last executing test programs: 9.923019582s ago: executing program 0 (id=1846): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001043554700000000000001090224"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) userfaultfd(0x1) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x80, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r4 = accept4$inet(r0, 0x0, 0x0, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x41415270}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000280)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r6, r9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x2, 0x10}, 0xc) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) socket(0x1f, 0xe, 0x9) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="b78d6d908fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 7.231930112s ago: executing program 2 (id=1860): r0 = socket(0x10, 0x3, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) socket(0x10, 0x3, 0xfffffffd) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) (async) 7.198515458s ago: executing program 2 (id=1861): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) io_cancel(0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001400)={r2, r4, r6, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x0, 0x0]}) (async) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x50) listen(r7, 0x0) (async) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) (async) r9 = open_tree(r1, &(0x7f0000001440)='./file0\x00', 0x88800) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000015c0)={&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001500)=""/187, 0xbb}) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x2200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000001680)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000001600)=@loop={'/dev/loop', 0x0}, r10, 0x0) r11 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r11, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x7bffffff}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0xc841}, 0x24000052) (async) recvmmsg$unix(r11, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1}}], 0x1, 0x40010040, 0x0) (async) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r12 = socket$inet(0xa, 0x801, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r12, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xbe, 0x101, 0x0, 0xfffffffffffffffe], 0x0, 0x0}, 0x78) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 7.069345309s ago: executing program 2 (id=1863): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff40) pread64(r1, 0x0, 0x0, 0x8) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x40000) 6.924740095s ago: executing program 0 (id=1864): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010040ed3ec908cd0cb300ea2d01ab0b9bdf85800771950000000904e9743a966cf1808b0bdff51d15c795500c216eaabc77809b0ccdff6905a2b91ca5ff8228de997d3d574be37fad23ba91db0d9fccc7c0d60faa676489040aacba8aadc51e95c021a29e0a47905076dd5826"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) keyctl$session_to_parent(0x12) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0x6, 0xaf, {0xaf, 0x4, "53df3562cfe08b2051d1f0ddab291833620e9b41cd5e59e7bdfbb68ac6b02585d538ed0798233cbd09b4275c083d5b7bddc3116a9f43b3e1ab96ee230aea5be0359a47cec49613566f0438f7c21e9fc9ea7d16ffbd5fbdbc3e3947fba14ed6a092225a46e53de778a519fa12420e44af16eb5bc85bb445851d6d21b4b4fe8dc5084b268c53461b5e4f395e4d4b89372ef734924e405ed38e4c52d87b876cc4f6214fc12c38167f95b513c13afe"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000a00)={0x0, 0x16, 0xe8, "1e9c057ca198ec72ce76e7c5d768eeaf4495f91137441b573a3fc8859d338b510919bf1889daec06347c4fbf2580862a89c2346e539f76f5739fa066ae431e96293c2805d0f6ffa2abec85ee7343a80589df051bd6842b40ccca504a6179e8e55fe3d90aa2172aa1d9d8ee464e7fc35eb6ef6407b6075b5d66a370c329b29789bdb17de23dc0b135f8fed8158888f9006c85e60970cb72539e481593758cec4563d36ca6cca4e78d61e3e9d988e17011992ce2b71eca8b08eb6ed962a984f0847414a3d83dd229abbfd241726555793a786090928234c3d48800677ab4aa85373196b02b1396aa26"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}}) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x40, 0xff, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x800, 0x2, 0x1, {0x22, 0xfe5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0xc5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x9, 0x3, 0x9, 0xef, 0x2}, 0xf, &(0x7f0000000200)=ANY=[]}) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x0, 0xb, 0x2, {0x2, 0x21}}, &(0x7f0000000440)={0x0, 0x3, 0x98, @string={0x98, 0x3, "f81360e45defcf11aca713a1d3aafcbb770b4f26beacd26a085c282be80b84b896b8885a8e1ba4cdb167bfedc62f4af215a5527d549817b4fda1cb38c4d90fa5264eec2d500ac646e9b2e1a04c6deee48e4a046a3d8239584740b2d9add2c013c11539d40e3f541af7eacd384c2cba1f70ad35ca4a25168812cf546fba606aff3c88dae1bf44be1375ba43319257ee5ef4446cf0c20e"}}, &(0x7f0000000800)=ANY=[], &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x668}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x40, 0x1c, 0x41, "4c9c3adfe5c00ac5b03d2f4c085ed33a579f4c4142d95d5cb788bcbe4ad8ebce4f3938105543eba89c045c5d1e4fffa9f639a4adbc94a44fe28a5fb61bfab49742"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)=ANY=[@ANYBLOB="2001b1000000ece81f09f79566e17e04fad7619767816ad55997136e062d11296dbc923e9720e8f5980563ff659e5690828524799cd7a0edf48ed4955575a5e245d471e69338d1d5a74d697d62dc1e14ea3db8577950fd61367c402adcaa872ddbfd0f4ae42c7aca2432d751314169472af8e69028f425c10c4b6b790160caf92313bf640ae6bd20cf5ccc57abdb93f46eba8962741434994c35fdd34965a1db68b2f2026d425d351be0c6b7ca0279297e46ed5175e385"], &(0x7f0000000780)={0x20, 0x3, 0xfffffffffffffc1d, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, &(0x7f0000000280)={0x0, 0x11, 0x1f, {0x1f, 0x62, "eba008db3f285bbf3dd1978397fad74a52678d57b892a10eab966b5eac"}}, &(0x7f0000000800)={0x0, 0x3, 0x86, @string={0x86, 0x3, "b501e4944a0386231dfc439d4463bc70c71c7c92991e14bde9b9e37cf95036791590aca9e3f4793ffa42f128bade1c297810d0aeb11452a641d8cd65f93e4ce8f5c7ac1d8e7b64b20a2e270c4709379ac5f25e5133cff95cbe3ba17e0a65b947599ce56e62b32ba6fb769ff3fe0ac1b191cd8bc2323bc468a2202d3aed22775b3ab68271"}}, &(0x7f0000000bc0)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0xc, "500cd658"}, @main=@item_4={0x3, 0x0, 0x9, "76412392"}, @local=@item_4={0x3, 0x2, 0x0, "0bc0a172"}, @main=@item_4={0x3, 0x0, 0xa, "1e7f4197"}, @main=@item_012={0x2, 0x0, 0x9, "9e36"}, @local=@item_012={0x1, 0x2, 0x5, "c1"}, @global=@item_4={0x3, 0x1, 0x7, "8890cda0"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x360}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c80)={0x40, 0xf, 0x7f, "d44903e86aff0b94adde6737dc9222190fab17fdaf232a6d2c3b39701bdaaeb18a4ad5fe464f66f7021efc1e0e8ccdce01216b538b549c963bf40419bb1d8a77fb2b325d427a9c168aba1e726cf0d0edca078469a06dd89bb9cf88c7e7529b49ae074473d315ba90ccdd03c37a29e5703450288f2f3988f0af26f999632d60"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0xc9}, &(0x7f0000000dc0)={0x20, 0x1, 0xae, "1e155b642067ad8c89d1b7e19eaf8998914647d5f08fa38be6f02a0565f331c1941f825e9e2d370964c5be85c74c372beb4285cad78307510f021669cc4299c3d9232a73e7e4bb567eeffcc9912a2e8247673de416aeb51188c8244ae5d0e749a44725354fbd1f6fe7053177795b0a1771b49292e7cd89b4ba354c6f56be99e8c59efc07d1c71356a1f22d32d61c1ecda6278b21b87b9bc97b3c0e939aafe496d2c79eefd33a06ffdd5e2579cdc9"}, &(0x7f0000000e80)={0x20, 0x3, 0x1, 0x80}}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xd) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.376416197s ago: executing program 0 (id=1866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x18, 0x0, &(0x7f0000000900)=[@dead_binder_done, @free_buffer={0x40086303, r4}], 0xa9, 0x0, &(0x7f0000000980)="9787a7f9894343b1e8b93b0302f562b2c2acbbe22187c44e19ba20d7190b0ca4a29f07c50493cb1eb3ebf5fcb3f0e5de52b3db55e0a33d82275a65e4258a9004c8e0b2f7467da68738b9c06f9ce66841fb9b98eca38612592222e5cc2d573a5f2608dc6a8332a722ff2f48d02bd8f1c73d40d4aef74cb95c0db73806ddbd8198f93415d719b5b41a8843c8b004f411cf792849e1f63d351a0451a43f1be173820a84ac3688268e2a62"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 5.501090949s ago: executing program 0 (id=1871): syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[], 0x0) 5.170959757s ago: executing program 3 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600200001b0000012dbd7000fcdbdf250e0000001b98e73c6abb7bc65178db204806fbf9cb974d423947ab7f430eefb7387c996f4da1ad8921048bcc8b5b093fdc518a3970ee07a444bfcbe6ab3c27d1c76fb7906580729e3bc6b4f744cfef9a4048e7aee56e79eb1cdb176e4b47e4cb67c0354cd2d52a588ba91c518fc773458f69efc397df1652e33bf354ea69f2aa600dd6bcc8f05df8a4c43029015dfc218429245e95df5b077f0c1bc277ad3614b9b896ba9ce1ea4131138a76913c40ec9c9842ad5eac0800158004000d800800bc00", @ANYRES32=r1, @ANYBLOB="0c01f98004001a80f42a94eb5da859864a88c6eb307cded4c4d158ba11e851c0528ea2fec53fcb86238f4e64ff56ed2a1a87a071609edbdcfaf5b223e5924d6eb8cb7ed6f36f929ed3a072ad30abc6bd2de597dba4dbfe3c7240de1d8fb88a6b766c84d332bf9c144935a93c8b81fa01dfc1104bd3878f40fe29e9d331c7bdcb69856b4d5d4a339d2149536fba595150c905118486722528d6de291ac98d073bb6c5ce417b731b564e1fefe36e6585286a7880f248bc1cb170f5d108e2c2c816a60e1acccbbe7ea8953458b9d812645a9768b5e6138cecc7bbbbec707ce3ea1c157917e07154e6c8798fb9450900c400667573650000000083a9c9faa0547ead0cc6d83e8e5f9e41f0adc205ab4e518248b54b58522f1c5d002e2ffd5f9924f6d91609dd376e5ad13cfffffd71577a3380f8741500a885ae779052ce6e32b1288d81443194c48b8ab2ce9c05f424e51de8ab92072e53f7f2cbc722de3147c73992b81ee709392a43910c005100e500"/378], 0x260}, 0x1, 0x0, 0x0, 0x40800}, 0x2004409c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff1000/0x1000)=nil, 0x1000}, 0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4212, r7, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r8, {0x7, 0x2d, 0x10, 0x10000000, 0x5, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000000c80)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r2, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 3.994272886s ago: executing program 2 (id=1874): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x18) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfeedcafe, 0x0, 0x0, 0x2, 0x3}}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc060000cba705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880) keyctl$set_reqkey_keyring(0xe, 0x5) readv(r0, 0x0, 0x0) socket$packet(0x11, 0x1, 0x300) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x44054) recvmsg$kcm(r0, 0x0, 0x40012100) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='@', 0x0) 3.897776426s ago: executing program 2 (id=1876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0xa84bf5a6, 0x1, 0x32, 0x2}, 0x9c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff89) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0xf27, 0x1, 0x1, 0x4, 0x401, 0x5, 0x4, 0x7, 0xffffffff, 0xfd, 0x5, 0x1, 0x40000001, 0x1, 0x2000006, 0x6a, 0x0, 0xc7b, 0x3, 0x40000003, 0x89, 0x4, 0x0, 0x1, 0x3, 0x2000e66, 0x3, 0x1, 0x10004087, 0x0, 0x10000]}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ppoll(&(0x7f0000000000)=[{r2, 0x280}, {r4, 0x4024}, {r0, 0x3d}], 0x3, &(0x7f0000000040), &(0x7f0000000080)={[0x6]}, 0x8) 3.704740137s ago: executing program 2 (id=1877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x4000000) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x800041, &(0x7f00000001c0)='discard') 2.42468441s ago: executing program 0 (id=1879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x18, 0x0, &(0x7f0000000900)=[@dead_binder_done, @free_buffer={0x40086303, r4}], 0xa9, 0x0, &(0x7f0000000980)="9787a7f9894343b1e8b93b0302f562b2c2acbbe22187c44e19ba20d7190b0ca4a29f07c50493cb1eb3ebf5fcb3f0e5de52b3db55e0a33d82275a65e4258a9004c8e0b2f7467da68738b9c06f9ce66841fb9b98eca38612592222e5cc2d573a5f2608dc6a8332a722ff2f48d02bd8f1c73d40d4aef74cb95c0db73806ddbd8198f93415d719b5b41a8843c8b004f411cf792849e1f63d351a0451a43f1be173820a84ac3688268e2a62"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.003630727s ago: executing program 3 (id=1881): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r1, 0x7cadd000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe38}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r5, 0x0, 0xffffffffffffffff}) r7 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.907679545s ago: executing program 1 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000180"], 0xfdef) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120086dd"], 0xfdef) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfffffffd}}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.472091778s ago: executing program 0 (id=1883): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) link(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0xfffffe85, 0x9, 0x8, 0x20a, 0x9, 0xc}, 0x9c) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f00000010c0)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES32=r1]) socket$l2tp6(0xa, 0x2, 0x73) 1.20661167s ago: executing program 3 (id=1884): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) syz_usb_disconnect(r0) (async) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)=0x1000000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0x33, 0x33, 0xe, 0x0, 0x81, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1}}]}, 0x50}}, 0x804) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x0, 0x8, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.108052782s ago: executing program 3 (id=1885): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r2, 0x89f2, &(0x7f0000000000)={0x10008a, 0x4, 0x8, 0x2, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0x6, 0x8}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000b00)) 897.226312ms ago: executing program 1 (id=1886): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x506b, &(0x7f0000000000)={0x0, 0xebef, 0x1000, 0x1, 0x32}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x10000000) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2, 0x10) pselect6(0x40, &(0x7f0000000180)={0x80000001, 0x7, 0x800000000000000, 0x7ff, 0x9, 0x0, 0x0, 0x9}, &(0x7f00000001c0)={0x0, 0x38, 0x7ff, 0x8001, 0x3, 0x3f54, 0x9, 0x100000001}, &(0x7f0000000200)={0xfffffffffffffff7, 0xe, 0x100000001, 0x0, 0x0, 0x9, 0x0, 0x6}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x4]}, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00') ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000340)={0x6, 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r5, 0xc, 0x12, r1, 0x0) mq_timedreceive(r2, &(0x7f00000003c0)=""/205, 0xcd, 0x7f, &(0x7f00000004c0)={0x77359400}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000500)={0x10000, 0x401, 0x1, 0x3, 0x3, [0x7, 0x0, 0x8, 0xc]}) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="b95e0300000f320f01df0fc7ab00000100c74424000b000000c74424020e000000c7442406000000000f011c240f01cfc744240087000000c744240205000000c7442406000000000f011c242e663e660f388273bc66400fc7f4b93a0a0000b82c7ba51cba000000000f30410f01c5", 0x6f}], 0x1, 0x4, &(0x7f0000000600), 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000640)=0x2) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1000001, 0x10, r1, 0x83000000) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000680)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000700)="2c0b8d89eec96e62b82e53123645ff1f085f9dcc7db5b54a41e15c08cd42120b6fe8150a72013ac9e95b8cbb6b61fb2b09f019531b9ae8df2174d985bf842322abd2a2fcbb509c37d03fe60c4c315af65838a4cac496c013f9182c13d96f55aac87db4a6751f1c6e2b", 0x69) accept$unix(r4, &(0x7f0000000780), &(0x7f0000000800)=0x6e) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000840)={0x1, 0x0, [{0x8, 0x4, 0x0, 0x0, @msi={0x5, 0x9, 0x2}}]}) getsockname(r3, &(0x7f0000000880)=@generic, &(0x7f0000000900)=0x80) write$vhost_msg(r1, &(0x7f00000009c0)={0x1, {&(0x7f0000000940)=""/46, 0x2e, &(0x7f0000000980)=""/7, 0x3, 0x4}}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a40)) read$usbfs(r1, &(0x7f0000000a80)=""/175, 0xaf) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000b40)) mkdirat(r1, &(0x7f0000000d40)='./file0\x00', 0xa) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xb5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 630.552176ms ago: executing program 3 (id=1887): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) 559.380307ms ago: executing program 1 (id=1888): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x1}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth0_to_bond\x00', 0xffff0001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 350.563149ms ago: executing program 1 (id=1889): socket$kcm(0xa, 0x3, 0x87) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(r1) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x102) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) landlock_restrict_self(r2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) open_by_handle_at(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000020000000e0000000000000009000000de25a3baad720a1fc6772d3bf149bb9b0021fa8a"], 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000040)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x8008af83, &(0x7f0000000000)={0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x4000}) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x800, 0xfffffffc, 0x0, {{@in=@broadcast, @in6=@local, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x40}, {0x0, 0x1000000000000403, 0xfffffffffffffffe, 0x40000040, 0x0, 0x1e, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0x80000001}}]}, 0xc4}}, 0x8044) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 79.362457ms ago: executing program 1 (id=1890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x64, 0x0, &(0x7f0000000900)=[@dead_binder_done, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000008c0)={0x30, 0x30, 0x30}}}], 0xa9, 0x0, &(0x7f0000000980)="9787a7f9894343b1e8b93b0302f562b2c2acbbe22187c44e19ba20d7190b0ca4a29f07c50493cb1eb3ebf5fcb3f0e5de52b3db55e0a33d82275a65e4258a9004c8e0b2f7467da68738b9c06f9ce66841fb9b98eca38612592222e5cc2d573a5f2608dc6a8332a722ff2f48d02bd8f1c73d40d4aef74cb95c0db73806ddbd8198f93415d719b5b41a8843c8b004f411cf792849e1f63d351a0451a43f1be173820a84ac3688268e2a62"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 19.775366ms ago: executing program 1 (id=1891): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@random={'security.', '\x00'}, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8ec81530bbcb2209, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xe0, 0xc, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xdfb2, 0x9, 0x1, {0x22, 0x6d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0xe, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9c, 0xbb}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x3, 0x4, 0x5, 0x20, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x7, &(0x7f0000000140)=@string={0x7, 0x3, "5fc332d2d7"}}, {0x3e, &(0x7f00000001c0)=@string={0x3e, 0x3, "1b3d828a46dd75eca53f13615cb38834bb827ad73acb8f21a985fc5f7fd976c26a8995ed74091ee94c4c0433f485d4205e150ef380b27d18e960cf7c"}}, {0x5, &(0x7f0000000200)=@string={0x5, 0x3, "792f8e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe9, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448a") 0s ago: executing program 3 (id=1892): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}, 0x800) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000100)="66a75c58335d5d058ea7f20dce759a79422add9d0dbae07902de82d1f5b853b865aa8423a02aa5d3d09317f9896484ff00604cf815ac13f619689cd8bd5b86f080db38ce25c50bb73f6b58f1f113143c3e5e6d5cdb1912c7bb1942ea9e1f28cc76142ff099d309fc9a58479404c38cd3401a964f7dbd0e0a0b02e19b784fe2042256544961e5c8451b01a02bccab9f3f8a6dcaf1eaadf1da0563378d8f04b923d9b4407d6a2d8c33b6617b8c5c1f2c0401439323", 0xb4}, {&(0x7f00000001c0)="414066b2db6fe35b547f211a3e51ff1e0f6a38d4d7a640c9ba27257ef210385208f280a81a873bdd905386a595b45a8c64522dfc10df81e6ff81b5e8affc831d82b764d26e4476ac333627394d70b45703ca62b9e8917948f09c27edbc0ab56922a855209066ec9e3fbe684b1c8666775e38cf58efbffd901f007a1df610e9a1378ef7ce80465dafa76b6b1fbe122d7fc0d25169c7b8a2e657bd201b49dbb1b7eea75a8886225668e02ea4655a71276236c7e11f004f4af216d798fd1b6254b9b8744985c4b9d6", 0xc7}, {&(0x7f00000002c0)="4fb19bdce1ea406694fff9338bbd25d9a6c904602cc1c84c71c5e1a0b2bec3598b0d7c6b820084734ad73175a39f1f95df7b02ff7ac2857271405be4b89f2fd9e8d4cc38f9570794bc59a631393cb2db191dc99d57c37ca34cf1b9c6eaffce4c048d0a240616246a3b7dd02e3f49fa7ad3aa206b19acb14700df3988e70e871c32e6c54eba1b51586e354452be2875229671151d984af5abf600ae8b2579473172e856e8a3cc274a4f235901b7039c", 0xaf}, {&(0x7f0000000380)="416cf66867e6ad34e26f28a59574a0a7f0788063f282be498bd4f992f6e7da5a9711272c6065a6654c8847574dff1a794fa739b74596996757fcbdd0aa0b0c41731451a164144ab215b9a20358c05cbb9d460828894c8c430f293dd5aec8fc47c647f0d704a9036cbd54b97b3e011174efc96ce40033a463b7f4b5effc22c6e7e8957d4abc9db63476509e6f1534c5cf14d509775dddba05451e718be0496f3851894704620a7658d1f6143e5f092f637eaf669ddf7d4478bd65652a893b17f677b716e01c87a2c80dd5e86322aebb50154ef74c6213c28d3c59b5eb0fcbb055959215fc5bb80b4aa428ae", 0xeb}, {&(0x7f0000000500)="3dd5c2143ba7b52e7fcea7ee55dfa06db064f88e3aabbea8f369aa94df47572235a89f9bf95abb94e2bd14635527274b5d50a37495031a56542c8e01802cc91d2027cb4c682bf7c21f8ff7c5d037f474ecd68404105b5f9bb62ace449afc8f135628c8da8cb0d9336d39711249c204d3de52cc86e73fb7811a0d896cd8e4401ae7ba5af3c7b1aa5612ca255f3b11395f1c5b50a0805b8b", 0x97}, {&(0x7f00000005c0)="850d5d951da088215810f7b4119ebdb784c143b547ad31e032698ec1eca6627ebe1bccd93b2ffa0a153374", 0x2b}, {&(0x7f0000000600)="09708c5db3391706d333c3ab702eea504325197023298315489361fab89b54665fd33eb07408f90229bd508f107dbfd4541d72f4f9e4c5f8a07d8e8eea1d901811b27bde6461eec1b406721ad8b84b0220399492ee232ca5fbba89fea55e16f925c398eaded9c22acd5613b948aaa1bc741c46fb71dc445931239e5e8fe65b898c997f4c2af64f608e364563975ed6edc3cd1a1d3f1869665c42bf28d038a6aebe102c8548368ca1ff9795be42f49686684fa89ab8df36a47aceca4dead9c275caa6e183ffcecc1a757fcb8120271650bc5e526cb7881053d86b028957c5f225c3132742de08a029e2fb35aab15bc95c51d37027c49c76", 0xf7}, {&(0x7f0000000700)="263a91180e78e972a8fcf07ba13876c151060a79316d63c6c445d8f23b287ac2fd308f70618fb3fa19ce5f204b4afd3128df4575390a9bd624dc208a3cbed23e9359066d5a79d9993ce480d92e3431f206d6924d270771e3a8901cc46a1e2432b5d9b8b7358f7bde9ef9bc775e439b72729fdfc1e6b8c13299804d01887d7be2a40b05abbe634ab075fbe781a8f4afc7b5b35aeb9f66d330c12d5fd18d8c35514b810b4c8d56bb6abc6ffce0851acb55d1fad38fe0991869a40bcd9f59c2499f338e19fd8978447cb2fec1df2a94f4", 0xcf}, {&(0x7f0000000800)="50043016a258a862b0c8ebed4240cb34ad17e935e0b32423a4abfcfd2a5d7013e4b661a84f9158c23f6d1bf752aad5c25a8a8f3695c3e5b9e9c96f54f636560e7a489a288573de80e1309689f3d1b518b7b4cf43378926005611515783ca62", 0x5f}], 0x9, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x33}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb3}}, @ip_ttl={{0x14}}], 0x80}, 0x1) kernel console output (not intermixed with test programs): uous mode [ 380.295710][T10257] syzkaller1: entered allmulticast mode [ 380.384736][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.395183][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.942575][ T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 380.968461][T10270] netlink: 'syz.2.1266': attribute type 10 has an invalid length. [ 380.979189][T10270] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 381.043361][T10271] IPv6: Can't replace route, no match found [ 381.071820][ T5893] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 381.090908][ T24] usb 2-1: device descriptor read/64, error -71 [ 381.179905][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 381.193679][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.205170][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.254745][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.263470][ T5893] usb 4-1: not running at top speed; connect to a high speed hub [ 381.272979][ T5893] usb 4-1: config 3 has an invalid interface number: 44 but max is 1 [ 381.281183][ T5893] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 381.290134][ T5893] usb 4-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 381.300345][ T5893] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 381.309284][ T5893] usb 4-1: config 3 has no interface number 0 [ 381.315791][ T5893] usb 4-1: config 3 interface 44 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 381.326707][ T5893] usb 4-1: config 3 interface 44 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 381.338323][ T24] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 381.346144][ T5893] usb 4-1: config 3 interface 44 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.357585][ T5893] usb 4-1: config 3 interface 44 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 381.369351][ T5893] usb 4-1: config 3 interface 44 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 381.382666][ T5893] usb 4-1: config 3 interface 44 has no altsetting 0 [ 381.391443][ T5893] usb 4-1: New USB device found, idVendor=19d2, idProduct=1594, bcdDevice=ab.97 [ 381.400793][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.408954][ T5893] usb 4-1: Product: syz [ 381.413374][ T5893] usb 4-1: Manufacturer:  [ 381.418031][ T5893] usb 4-1: SerialNumber: syz [ 381.429296][T10268] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 381.491813][ T24] usb 2-1: device descriptor read/64, error -71 [ 381.602507][ T24] usb usb2-port1: attempt power cycle [ 381.643245][ T5893] option 4-1:3.44: GSM modem (1-port) converter detected [ 381.668648][ T5893] usb 4-1: USB disconnect, device number 37 [ 381.687927][ T5893] option 4-1:3.44: device disconnected [ 381.788009][T10280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.798138][T10280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.941807][ T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 381.963858][ T24] usb 2-1: device descriptor read/8, error -71 [ 382.202105][ T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 382.233465][ T24] usb 2-1: device descriptor read/8, error -71 [ 382.352756][ T24] usb usb2-port1: unable to enumerate USB device [ 382.396328][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.405788][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.451925][ T5848] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 382.601796][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 382.610403][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.619400][ T5848] usb 4-1: config 86 has an invalid interface number: 48 but max is 0 [ 382.627763][ T5848] usb 4-1: config 86 has no interface number 0 [ 382.634098][ T5848] usb 4-1: config 86 interface 48 has no altsetting 0 [ 382.643655][ T5848] usb 4-1: New USB device found, idVendor=a2b1, idProduct=5cf7, bcdDevice=f4.a9 [ 382.652994][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.661067][ T5848] usb 4-1: Product: syz [ 382.665294][ T5848] usb 4-1: Manufacturer: syz [ 382.670158][ T5848] usb 4-1: SerialNumber: syz [ 382.881309][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.891825][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.905407][ T5848] cdc_acm 4-1:86.48: Zero length descriptor references [ 382.914161][ T5848] cdc_acm 4-1:86.48: probe with driver cdc_acm failed with error -22 [ 382.926170][ T5848] usb 4-1: USB disconnect, device number 38 [ 383.005256][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.015681][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.569303][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.580816][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.771821][ T5893] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 383.921959][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 383.932838][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 383.951746][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 383.970116][ T5893] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 383.990188][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.004900][ T5893] usb 4-1: Product: syz [ 384.011828][ T5893] usb 4-1: Manufacturer: syz [ 384.021801][ T5893] usb 4-1: SerialNumber: syz [ 384.028708][ T5893] usb 4-1: config 0 descriptor?? [ 384.170193][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.186535][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.231833][ T5848] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 384.246319][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.272394][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.404948][ T5848] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 384.414617][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.435013][ T5848] usb 2-1: config 0 descriptor?? [ 384.458118][ T5848] cp210x 2-1:0.0: cp210x converter detected [ 384.498831][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.513330][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.547731][ T10] usb 4-1: USB disconnect, device number 39 [ 384.676071][T10316] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1281'. [ 384.888118][ T5848] usb 2-1: cp210x converter now attached to ttyUSB0 [ 385.014704][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.052218][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.071027][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.089170][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.100496][ T5848] usb 2-1: USB disconnect, device number 38 [ 385.144338][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 385.147181][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.206117][ T5848] cp210x 2-1:0.0: device disconnected [ 385.514649][ T5893] usb 4-1: device not accepting address 40, error -71 [ 385.546166][T10338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 385.556253][T10337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 385.736214][T10340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.778796][T10340] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 385.791336][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 385.826757][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 385.854628][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.872261][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 385.918585][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 385.939643][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 385.951390][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.970297][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 385.980040][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 385.988663][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 385.988965][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.013875][T10346] IPVS: length: 68 != 24 [ 386.026396][T10350] batadv_slave_0: entered promiscuous mode [ 386.044985][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 386.047397][T10346] netlink: 'syz.1.1290': attribute type 21 has an invalid length. [ 386.059016][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 386.072204][T10351] batadv_slave_0: left promiscuous mode [ 386.097294][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.107034][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.126030][T10346] netlink: 'syz.1.1290': attribute type 6 has an invalid length. [ 386.144152][T10346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1290'. [ 386.154204][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 386.174542][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.199773][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1289'. [ 386.240516][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.257831][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 386.271758][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.279903][T10343] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 386.295729][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.319818][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.333232][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.346458][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.377651][T10358] overlayfs: failed lookup in lower (newroot/345, name='file0', err=-40): overlapping layers [ 386.462472][ T5933] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 386.623800][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.632781][ T5933] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 386.645762][ T5933] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 386.659558][ T5933] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 386.668859][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.678234][ T5933] usb 2-1: Product: syz [ 386.683442][ T5933] usb 2-1: Manufacturer: syz [ 386.688101][ T5933] usb 2-1: SerialNumber: syz [ 386.921917][ T5933] usb 2-1: Can't get UAC3 power state for id 10 [ 386.930810][ T5933] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 386.957192][ T5933] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 386.957894][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.971791][ T5933] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 386.979428][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.992007][ T5933] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 387.080035][ T5933] usb 2-1: USB disconnect, device number 39 [ 387.149695][ T7448] udevd[7448]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.812250][ T5848] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 387.871853][ T2171] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 387.984467][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.993266][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.005107][ T5848] usb 2-1: config 1 interface 0 has no altsetting 0 [ 388.014917][ T5848] usb 2-1: string descriptor 0 read error: -22 [ 388.021285][ T5848] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 388.030450][ T2171] usb 4-1: Using ep0 maxpacket: 16 [ 388.035651][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.045463][ T2171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.057315][ T2171] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 388.070337][ T2171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.085632][ T2171] usb 4-1: config 0 descriptor?? [ 388.301419][ T2171] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 388.476970][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.486079][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.497256][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.505971][ T29] audit: type=1326 audit(388.448:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.1.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4c79c819 code=0x0 [ 388.533739][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.601377][ T5848] usbhid 2-1:1.0: can't add hid device: -71 [ 388.607836][ T5848] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 388.626733][ T5848] usb 2-1: USB disconnect, device number 40 [ 388.699172][ T5933] usb 4-1: USB disconnect, device number 42 [ 389.592231][ T5848] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 389.741784][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 389.749295][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 389.758656][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.769158][ T5848] usb 4-1: config 0 descriptor?? [ 389.778922][ T5848] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 389.999906][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.008966][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.640496][T10411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.648836][T10411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 390.658289][T10411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.675253][T10411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 390.851890][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.864012][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.171834][ T809] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 391.322467][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 391.329671][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.341003][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.350958][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.364258][ T809] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.364425][ T5848] gspca_sonixj: reg_w1 err -110 [ 391.373503][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.402192][ T5848] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 391.405249][ T809] usb 2-1: config 0 descriptor?? [ 391.758865][T10436] ALSA: mixer_oss: invalid OSS volume '' [ 391.864707][ T809] hid_parser_main: 65 callbacks suppressed [ 391.864733][ T809] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 391.901760][ T809] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 391.914587][ T809] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 391.922467][ T809] microsoft 0003:045E:07DA.0018: usage index exceeded [ 391.930847][ T809] microsoft 0003:045E:07DA.0018: item 0 4 2 2 parsing failed [ 391.940992][ T809] microsoft 0003:045E:07DA.0018: parse failed [ 391.947247][ T809] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 392.342369][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.353250][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.900985][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.956323][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.965532][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.525190][T10463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.614087][T10466] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 393.616703][T10467] fuse: Unknown parameter '' [ 393.698663][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.714969][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.806018][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.816649][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.826664][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.835462][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.850981][T10479] __nla_validate_parse: 59 callbacks suppressed [ 393.851001][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 393.851286][ T5161] Bluetooth: hci0: unexpected event for opcode 0x2000 [ 393.950952][ T809] usb 2-1: USB disconnect, device number 41 [ 394.301792][ T809] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 394.421334][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.433247][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.445377][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.455204][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.465584][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 394.473236][ T809] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 394.483475][ T809] usb 2-1: config 0 has no interface number 0 [ 394.489585][ T809] usb 2-1: config 0 interface 184 has no altsetting 0 [ 394.498967][ T809] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 394.508785][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.516888][ T809] usb 2-1: Product: syz [ 394.521245][ T809] usb 2-1: Manufacturer: syz [ 394.531386][ T809] usb 2-1: SerialNumber: syz [ 394.541890][ T809] usb 2-1: config 0 descriptor?? [ 394.887689][T10492] delete_channel: no stack [ 394.903378][T10492] delete_channel: no stack [ 394.914699][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1325'. [ 395.162678][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 395.179044][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 395.362853][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 395.373966][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 395.384147][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 395.395156][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 395.405238][ T809] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 396.250078][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.260134][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.872813][T10513] binder: 10512:10513 ioctl c0046209 0 returned -22 [ 396.916888][T10516] tc_dump_action: action bad kind [ 397.016343][ T5848] usb 2-1: USB disconnect, device number 42 [ 397.431931][ T5848] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 397.602064][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 397.609591][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.621333][ T5848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 397.646867][ T5848] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 397.659517][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.669279][ T5848] usb 2-1: Product: syz [ 397.676984][ T5848] usb 2-1: Manufacturer: syz [ 397.683550][ T5848] usb 2-1: SerialNumber: syz [ 397.696430][T10520] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 397.746290][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.755877][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.768662][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.777897][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.882011][ T5161] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 397.895098][ T5161] Bluetooth: hci0: Injecting HCI hardware error event [ 397.904341][ T5852] Bluetooth: hci0: hardware error 0x00 [ 398.452894][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.462661][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.045251][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.057167][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.658268][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.667633][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.964306][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 400.093147][ T5848] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.112259][ T5848] usb 2-1: MIDIStreaming interface descriptor not found [ 400.144014][T10555] validate_nla: 57 callbacks suppressed [ 400.144035][T10555] netlink: 'syz.3.1347': attribute type 30 has an invalid length. [ 400.181050][ T5848] usb 2-1: USB disconnect, device number 43 [ 400.260181][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.305200][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.323620][T10559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.338814][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.351228][T10559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.362714][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.376634][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.489784][T10563] syzkaller0: entered promiscuous mode [ 400.495471][T10563] syzkaller0: entered allmulticast mode [ 400.546281][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 400.581825][ T5848] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 400.597332][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.606923][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.618525][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.629124][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.743447][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 400.754599][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 400.765861][ T5848] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 400.775410][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.787024][ T5848] usb 2-1: config 0 descriptor?? [ 400.793114][T10557] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 400.803511][ T5848] gspca_main: spca561-2.14.0 probing abcd:cdee [ 400.930108][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.939541][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.020648][ T5848] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 401.031475][ T5848] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.040454][ T5848] usb 2-1: MIDIStreaming interface descriptor not found [ 401.227854][ T5848] usb 2-1: USB disconnect, device number 44 [ 401.314828][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.325285][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.336063][T10579] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 401.602067][ T5848] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 401.690684][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.699693][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.751799][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 401.758526][ T5848] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 401.767273][ T5848] usb 2-1: config 0 has no interface number 0 [ 401.773705][ T5848] usb 2-1: config 0 interface 12 has no altsetting 0 [ 401.785135][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.794781][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.803328][ T5848] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 401.812564][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.821186][ T5848] usb 2-1: Product: syz [ 401.822263][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.835160][ T5848] usb 2-1: Manufacturer: syz [ 401.839779][ T5848] usb 2-1: SerialNumber: syz [ 401.847781][ T5848] usb 2-1: config 0 descriptor?? [ 401.853176][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.266182][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.277020][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.296694][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 402.514854][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.524578][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.953579][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.962802][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.083626][T10604] program syz.2.1364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.096737][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.106013][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.665429][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.676498][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.887370][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'. [ 403.953210][T10610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'. [ 404.999914][ T5848] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 405.009918][ T5848] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 405.017546][ T5848] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 405.025386][ T5848] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 405.047718][ T5848] usb 2-1: USB disconnect, device number 45 [ 405.521820][ T5848] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 405.675012][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.684121][ T5848] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 405.692495][ T5848] usb 2-1: config 3 has no interface number 0 [ 405.698842][ T5848] usb 2-1: config 3 interface 161 has no altsetting 0 [ 405.708050][ T5848] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=70.36 [ 405.717413][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.726020][ T5848] usb 2-1: Product: syz [ 405.730249][ T5848] usb 2-1: Manufacturer: syz [ 405.735245][ T5848] usb 2-1: SerialNumber: syz [ 405.846353][ T29] audit: type=1326 audit(405.798:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10599 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7fc00000 [ 405.953247][T10625] C: renamed from team_slave_0 (while UP) [ 405.964482][T10625] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 405.974688][T10625] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1370'. [ 405.992255][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.003667][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.062227][ T5848] usb_8dev 2-1:3.161 can0: sending command message failed [ 406.071018][ T5848] usb_8dev 2-1:3.161 can0: can't get firmware version [ 406.071170][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.089255][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.132506][ T5848] usb_8dev 2-1:3.161: probe with driver usb_8dev failed with error -22 [ 406.144685][ T5848] usb 2-1: USB disconnect, device number 46 [ 406.772860][T10642] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 406.781237][T10642] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1377'. [ 406.791019][T10642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1377'. [ 406.800315][T10642] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1377'. [ 406.905989][T10646] fuse: blksize only supported for fuseblk [ 406.974528][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.991226][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.275445][ T29] audit: type=1326 audit(407.228:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.3.1383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f553459c819 code=0x0 [ 407.602632][T10678] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1386'. [ 407.662233][ T29] audit: type=1326 audit(407.608:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.1.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4c79c819 code=0x0 [ 408.140506][T10694] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.288127][T10697] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1392'. [ 408.385518][T10704] tmpfs: Unknown parameter 'func' [ 408.394400][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.406243][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.426253][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.452333][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.998739][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.009980][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.022621][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.031478][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.413216][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.423915][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.634906][T10718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1398'. [ 409.645659][T10715] netlink: 'syz.2.1398': attribute type 10 has an invalid length. [ 409.653807][T10715] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1398'. [ 409.665716][T10715] bond0: entered promiscuous mode [ 409.670789][T10715] bond_slave_0: entered promiscuous mode [ 409.677308][T10715] bond_slave_1: entered promiscuous mode [ 409.683303][T10715] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 409.690813][T10715] bridge0: port 3(bond0) entered blocking state [ 409.697365][T10715] bridge0: port 3(bond0) entered disabled state [ 409.704031][T10715] bond0: entered allmulticast mode [ 409.709168][T10715] bond_slave_0: entered allmulticast mode [ 409.715463][T10715] bond_slave_1: entered allmulticast mode [ 409.721261][T10715] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 409.732671][T10715] bridge0: port 3(bond0) entered blocking state [ 409.739055][T10715] bridge0: port 3(bond0) entered forwarding state [ 409.793179][T10720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.843911][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.855556][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.967613][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.983502][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.996762][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.010382][ T29] audit: type=1326 audit(409.958:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5f9c819 code=0x7fc00000 [ 410.010733][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.036195][ T29] audit: type=1326 audit(409.958:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5f9c819 code=0x7fc00000 [ 410.074338][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 410.190343][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.204872][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.250455][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.259663][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.840704][T10748] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1409'. [ 410.979528][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.991597][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.219926][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.229023][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.238549][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.242385][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.421782][ T5933] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 411.573540][ T5933] usb 2-1: config 4 has an invalid interface number: 16 but max is 0 [ 411.582235][ T5933] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 411.592799][ T5933] usb 2-1: config 4 has no interface number 0 [ 411.611835][ T5933] usb 2-1: config 4 interface 16 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 411.627065][ T5933] usb 2-1: config 4 interface 16 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 411.641318][ T5933] usb 2-1: config 4 interface 16 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 411.653139][ T5933] usb 2-1: config 4 interface 16 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 411.664480][ T5933] usb 2-1: config 4 interface 16 has no altsetting 0 [ 411.675882][ T5933] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=15.97 [ 411.685362][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.693534][ T5933] usb 2-1: Product: syz [ 411.697890][ T5933] usb 2-1: Manufacturer: syz [ 411.702850][ T5933] usb 2-1: SerialNumber: syz [ 411.703352][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.722402][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.736770][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.746070][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.919092][ T5933] keyspan 2-1:4.16: Keyspan 2 port adapter converter detected [ 411.928009][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 87 [ 411.936938][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 7 [ 411.945965][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 81 [ 411.956941][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 1 [ 411.964901][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 2 [ 411.973069][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 85 [ 411.980864][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 5 [ 411.990266][ T5933] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 412.000424][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 83 [ 412.008272][ T5933] keyspan 2-1:4.16: unsupported endpoint type 0 [ 412.014676][ T5933] keyspan 2-1:4.16: unsupported endpoint type 0 [ 412.021087][ T5933] keyspan 2-1:4.16: found no endpoint descriptor for endpoint 86 [ 412.029048][ T5933] keyspan 2-1:4.16: unsupported endpoint type 0 [ 412.036831][ T5933] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 412.050099][ T5933] usb 2-1: USB disconnect, device number 47 [ 412.077928][ T5933] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 412.091038][ T5933] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 412.103303][ T5933] keyspan 2-1:4.16: device disconnected [ 412.297972][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.306897][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.495262][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.505090][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.691791][ T2171] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 412.715744][T10775] openvswitch: netlink: IP tunnel dst address not specified [ 412.756918][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.767144][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.776547][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.785637][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.796175][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.805852][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.814559][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.823515][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.834917][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.843848][ T2171] usb 2-1: Using ep0 maxpacket: 8 [ 412.855551][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.858609][ T2171] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 412.889327][ T2171] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 412.899382][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.908710][ T2171] usb 2-1: Product: syz [ 412.915862][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.924695][ T2171] usb 2-1: Manufacturer: syz [ 412.929653][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.937535][ T2171] usb 2-1: SerialNumber: syz [ 412.944991][ T2171] usb 2-1: config 0 descriptor?? [ 412.958257][ T2171] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 413.172662][ T2171] gspca_zc3xx: reg_w_i err -71 [ 413.548260][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.568405][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.583255][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.594103][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.609483][T10800] raw_sendmsg: syz.2.1425 forgot to set AF_INET. Fix it! [ 413.612585][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.639989][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.640164][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.654820][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.761770][ T2171] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 413.768235][ T2171] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 413.786482][ T2171] usb 2-1: USB disconnect, device number 48 [ 413.831097][T10815] netlink: 'syz.2.1429': attribute type 4 has an invalid length. [ 413.853161][T10815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1429'. [ 413.925884][T10821] vivid-002: disconnect [ 413.933503][T10821] vivid-002: reconnect [ 413.939157][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.939600][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.981759][T10824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.003312][T10824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.015057][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.024161][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.101756][ T2171] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 414.241841][ T2171] usb 2-1: device descriptor read/64, error -71 [ 414.481818][ T2171] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 414.567124][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.583367][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.604943][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.608245][T10840] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1437'. [ 414.614077][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.622811][ T2171] usb 2-1: device descriptor read/64, error -71 [ 414.640528][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.651022][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.665896][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.676998][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.690050][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.699278][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.715832][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.724757][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.742351][ T2171] usb usb2-port1: attempt power cycle [ 415.081820][ T2171] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 415.102736][ T2171] usb 2-1: device descriptor read/8, error -71 [ 415.315411][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.328066][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.342865][ T2171] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 415.382732][ T2171] usb 2-1: device descriptor read/8, error -71 [ 415.398419][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.409362][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.418425][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.426885][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.502079][ T2171] usb usb2-port1: unable to enumerate USB device [ 415.921999][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.932760][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.286531][T10857] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1444'. [ 416.535383][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1448'. [ 416.562021][T10869] netlink: 'syz.1.1448': attribute type 5 has an invalid length. [ 416.740530][T10878] mkiss: ax0: crc mode is auto. [ 416.964414][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.980488][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.471792][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 417.566616][T10913] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.593718][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.612536][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.634217][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 417.648193][ T9] usb 2-1: config 188 has an invalid interface number: 128 but max is 0 [ 417.657474][ T9] usb 2-1: config 188 has no interface number 0 [ 417.660033][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.667233][ T9] usb 2-1: config 188 interface 128 altsetting 6 endpoint 0x7 has an invalid bInterval 246, changing to 7 [ 417.674849][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.701529][ T9] usb 2-1: config 188 interface 128 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 417.721943][ T9] usb 2-1: config 188 interface 128 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 417.750622][ T9] usb 2-1: config 188 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 2031, setting to 64 [ 417.763525][ T9] usb 2-1: config 188 interface 128 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 417.791738][ T9] usb 2-1: config 188 interface 128 has no altsetting 0 [ 417.800877][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 417.828602][ T9] usb 2-1: New USB device found, idVendor=19d2, idProduct=1284, bcdDevice=d3.3a [ 417.837840][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.846088][ T9] usb 2-1: Product: 䐥ꄂﲍ蹒䓂㗱ᑔﹱ줮࿾澂폙벹讨眮辗仱㴨ຽ鰱㘻ᣜⶑ륹Ꮟꐠ非홷๳ꎝሷ뉊浶籹厂幼㿶망梩웓敮ద韵똛֣⢯婅薽㜖澛揀熺鈔㤈⒜ꦭ傲暰놽朌蟘ⷆ沆鸢☣剐ㅆ삇婯㖱䩳部䟢揘Ꮲᝥꑈ늳竄쬽 [ 417.873879][ T9] usb 2-1: Manufacturer: 篞駜躌裄锢柏旼䮶箑Ⲳ싲䃔隺ά䉳䛫鏚糵⾜ꍪḈ朇鷲幋錔탙℗鐳䎜䈨닚닾䙎颿膉ᢛ萗齌鳬絯깐瀈㡶넎 [ 417.891938][ T9] usb 2-1: SerialNumber: 鑄䅿ꈖ度뭤氈઀獪媆웓䠗 [ 418.110541][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.119594][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.128629][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.137587][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.146784][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.157234][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.168595][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.178930][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.190909][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.201424][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.238409][T10925] fuse: Bad value for 'group_id' [ 418.249562][T10925] fuse: Bad value for 'group_id' [ 418.256958][ T9] option 2-1:188.128: GSM modem (1-port) converter detected [ 418.281056][ T9] usb 2-1: USB disconnect, device number 53 [ 418.320495][ T9] option 2-1:188.128: device disconnected [ 418.329486][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.684610][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.712302][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.747372][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.765662][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.784933][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.787020][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.970597][T10952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.009523][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.017563][T10952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.033932][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.035176][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.053179][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.119270][T10958] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 419.127328][T10958] netlink: 'syz.0.1474': attribute type 4 has an invalid length. [ 419.146386][T10958] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1474'. [ 419.186583][T10958] pim6reg: entered allmulticast mode [ 419.194638][T10958] team0: entered allmulticast mode [ 419.199906][T10958] team_slave_0: entered allmulticast mode [ 419.216625][T10958] team_slave_1: entered allmulticast mode [ 419.225115][T10958] team0: left allmulticast mode [ 419.230667][T10958] team_slave_0: left allmulticast mode [ 419.236548][T10958] team_slave_1: left allmulticast mode [ 419.243459][T10958] pim6reg: left allmulticast mode [ 419.938641][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.955560][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.001317][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.016573][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.068549][T10986] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 420.233316][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.265845][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.335677][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.348861][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.386415][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'. [ 420.477355][T11004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'. [ 420.490765][T11004] nbd: device at index 64 is going down [ 420.646518][T11009] QAT: Device 248 not found [ 420.658048][ T5933] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 420.678947][T11010] QAT: Device 248 not found [ 420.798595][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.810938][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.842157][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 420.851449][ T5933] usb 2-1: New USB device found, idVendor=0582, idProduct=0159, bcdDevice= 0.40 [ 420.860785][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.882982][ T5933] usb 2-1: Product: syz [ 420.887292][ T5933] usb 2-1: Manufacturer: syz [ 420.895818][ T5933] usb 2-1: SerialNumber: syz [ 420.993605][T11022] netlink: 'syz.3.1494': attribute type 15 has an invalid length. [ 421.001568][T11022] netlink: 'syz.3.1494': attribute type 7 has an invalid length. [ 421.247627][ T5933] usb 2-1: USB disconnect, device number 54 [ 421.320247][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.452558][T11040] input: syz0 as /devices/virtual/input/input46 [ 421.483964][T11038] netlink: 'syz.3.1501': attribute type 2 has an invalid length. [ 421.499338][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1501'. [ 421.527613][T11042] netlink: 'syz.1.1503': attribute type 62 has an invalid length. [ 422.346646][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.356545][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.931081][T11080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1513'. [ 423.068964][T11080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.112667][T11080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.137460][T11080] bond0 (unregistering): Released all slaves [ 423.632298][ T5933] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 423.825085][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.842386][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.868294][T11086] /dev/sg0: Can't lookup blockdev [ 423.868937][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.902903][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.932463][ T5933] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 423.951931][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.975410][ T5933] usb 2-1: config 0 descriptor?? [ 424.074330][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.093709][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.394086][ T5933] hid-u2fzero 0003:10C4:8ACF.0019: unbalanced delimiter at end of report description [ 424.414929][ T5933] hid-u2fzero 0003:10C4:8ACF.0019: probe with driver hid-u2fzero failed with error -22 [ 425.524031][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.546640][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.752698][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.775640][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.422721][ T5933] usb 2-1: USB disconnect, device number 55 [ 426.506230][T11108] netlink: 'syz.1.1522': attribute type 9 has an invalid length. [ 426.514880][T11108] netlink: 'syz.1.1522': attribute type 11 has an invalid length. [ 426.523654][T11108] netlink: 'syz.1.1522': attribute type 12 has an invalid length. [ 426.533326][T11108] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1522'. [ 426.543215][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 426.558358][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.904498][ T5933] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 426.915053][T11121] cgroup: Unknown subsys name 'io' [ 427.097294][ T5933] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.122575][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.134541][ T5933] usb 2-1: Product: syz [ 427.142477][ T5933] usb 2-1: Manufacturer: syz [ 427.157719][ T5933] usb 2-1: SerialNumber: syz [ 427.180306][ T5933] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.201457][ T809] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.441060][ T5933] usb 2-1: USB disconnect, device number 56 [ 427.718627][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.733278][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.749306][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.761390][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.132127][T11142] kAFS: unparsable volume name [ 428.292666][ T809] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 428.306193][ T809] ath9k_htc: Failed to initialize the device [ 428.317036][ T5933] usb 2-1: ath9k_htc: USB layer deinitialized [ 428.365730][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.379987][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.394079][T11149] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1538'. [ 428.411956][T11149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.662810][ T5933] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 428.691898][T11154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.701068][T11154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.814541][ T5933] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.824141][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.836413][ T5933] usb 2-1: config 0 descriptor?? [ 428.845843][ T5933] cp210x 2-1:0.0: cp210x converter detected [ 428.983094][T11158] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 429.036759][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1541'. [ 429.062789][T11160] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 429.085262][T11160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1541'. [ 429.304775][ T5933] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 429.313286][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.322544][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.342288][ T5933] usb 2-1: cp210x converter now attached to ttyUSB0 [ 429.710714][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.722652][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.733453][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.743800][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.755167][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.764140][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.240430][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.250740][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.270823][ T5933] usb 2-1: USB disconnect, device number 57 [ 430.288019][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 430.311018][ T5933] cp210x 2-1:0.0: device disconnected [ 430.653035][ T5933] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 430.804839][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 430.814458][ T5933] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 430.826360][ T5933] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 430.838589][ T5933] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.850774][ T5933] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 430.869833][ T5933] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 430.879672][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.887954][ T5933] usb 2-1: Product: syz [ 430.892286][ T5933] usb 2-1: Manufacturer: syz [ 430.895873][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.897562][ T5933] usb 2-1: SerialNumber: syz [ 430.910873][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.936727][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 430.953508][ T5933] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input47 [ 430.987657][T11183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 431.028988][T11186] gfs2: not a GFS2 filesystem [ 431.153796][ T5933] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 431.164310][ T5933] (id 0x00) [ 431.169256][T11192] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 431.178315][T11192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.233287][ T5933] rc_core: IR keymap rc-imon-pad not found [ 431.239276][ T5933] Registered IR keymap rc-empty [ 431.244597][ T5933] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 431.255214][ T5933] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 431.354486][ T5933] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 431.372615][ T5933] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input48 [ 431.392627][ T5933] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:58> initialized [ 431.483025][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.499492][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.533868][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.558046][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.929209][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.938132][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.224284][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.235538][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.823688][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.832643][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.359076][ T2171] usb 2-1: USB disconnect, device number 58 [ 433.457748][T11213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1557'. [ 433.978583][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.988300][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.374837][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 434.452985][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1563'. [ 434.659215][T11222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.698702][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.708449][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.721859][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.722190][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.347877][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.365574][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.374962][T11239] vivid-004: disconnect [ 435.430234][T11239] vivid-004: reconnect [ 435.455276][T11246] pim6reg1: entered promiscuous mode [ 435.469764][T11246] pim6reg1: entered allmulticast mode [ 435.559444][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.571034][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.584754][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.596203][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.813550][ T5933] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 435.963693][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 435.976422][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 435.994780][ T5933] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 436.012153][ T5933] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 436.021381][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.029477][ T5933] usb 2-1: Product: syz [ 436.033946][ T5933] usb 2-1: Manufacturer: syz [ 436.038567][ T5933] usb 2-1: SerialNumber: syz [ 436.072476][T11257] binder: Binderfs stats mode cannot be changed during a remount [ 436.229985][T11261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.245308][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.254589][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.265308][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.275209][T11251] syzkaller1: entered promiscuous mode [ 436.281086][T11251] syzkaller1: entered allmulticast mode [ 436.281432][ T5933] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 436.296397][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.305804][ T5933] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 436.321034][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.332877][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.346715][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.372555][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.411410][ T5933] usb 2-1: USB disconnect, device number 59 [ 436.775614][ T5933] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 436.935545][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 436.956832][ T5933] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 436.967272][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.979767][ T5933] usb 2-1: config 0 descriptor?? [ 436.994640][T11267] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 437.209318][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.225007][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.271584][ T5933] usbhid 2-1:0.0: can't add hid device: -71 [ 437.290189][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 437.316677][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.321369][ T5933] usb 2-1: USB disconnect, device number 60 [ 437.339141][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.573771][ T5161] Bluetooth: hci3: command 0x0406 tx timeout [ 437.907771][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.922008][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.948371][T11285] QAT: failed to copy from user cfg_data. [ 438.333961][ T5933] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 438.494107][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 438.528326][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.542808][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.552825][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.567118][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.576563][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.589710][ T5933] usb 2-1: config 0 descriptor?? [ 438.718366][T11300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.728890][T11300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.741663][T11300] netlink: 'syz.2.1590': attribute type 21 has an invalid length. [ 438.750004][T11300] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 438.760072][T11300] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1590'. [ 439.069053][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.081145][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.117434][ T5933] usbhid 2-1:0.0: can't add hid device: -71 [ 439.134155][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 439.159230][ T5933] usb 2-1: USB disconnect, device number 61 [ 439.243080][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.256357][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.339350][T11310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.365249][T11310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.514243][ T5933] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 439.649229][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 439.726746][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.744017][ T5933] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.764123][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.788444][ T5933] usb 2-1: config 0 descriptor?? [ 439.976630][T11316] loop8: detected capacity change from 0 to 7 [ 439.998326][T11316] Dev loop8: unable to read RDB block 7 [ 440.004807][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.005425][T11316] loop8: AHDI p1 p2 [ 440.024084][T11316] loop8: partition table partially beyond EOD, truncated [ 440.030803][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.039552][T11316] loop8: p1 start 1702000233 is beyond EOD, truncated [ 440.086881][T11320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.099015][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 440.108184][T11320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.155429][ T5933] usb 2-1: USB disconnect, device number 62 [ 440.162471][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 440.286766][ T1315] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.296325][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.302822][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327923][T11330] AppArmor: change_hat: Invalid input '' [ 440.474663][ T29] audit: type=1800 audit(524728.410:64): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1601" name="file0" dev="overlay" ino=1572 res=0 errno=0 [ 440.526068][T11337] pvfs2: Unknown parameter 'syz' [ 440.644215][ T2171] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 440.691198][T11343] netlink: 'syz.2.1603': attribute type 27 has an invalid length. [ 440.804125][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 440.816184][ T2171] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 440.837021][ T2171] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 440.846923][ T2171] usb 2-1: can't read configurations, error -61 [ 440.848594][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.884738][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.984687][ T2171] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 441.134872][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 441.144927][ T2171] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 441.149755][T11354] syzkaller1: entered promiscuous mode [ 441.155492][ T2171] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 441.160160][T11354] syzkaller1: entered allmulticast mode [ 441.168392][ T2171] usb 2-1: can't read configurations, error -61 [ 441.185317][ T2171] usb usb2-port1: attempt power cycle [ 441.487405][T11368] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 441.534386][ T2171] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 441.555203][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 441.561350][ T2171] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 441.572326][ T2171] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 441.580946][ T2171] usb 2-1: can't read configurations, error -61 [ 441.618793][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 441.714555][ T2171] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 441.734949][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 441.741300][ T2171] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 441.751453][ T2171] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 441.759930][ T2171] usb 2-1: can't read configurations, error -61 [ 441.774555][ T2171] usb usb2-port1: unable to enumerate USB device [ 441.843244][T11376] binder: 11375:11376 ioctl c0306201 200000000280 returned -14 [ 441.866495][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.875669][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.063377][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.072403][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.084018][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.093137][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.429816][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.439584][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.574484][ T2171] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 442.641308][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.651496][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.660870][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.670201][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.724368][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 442.732155][ T2171] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 123, changing to 7 [ 442.745650][ T2171] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 442.754797][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.762892][ T2171] usb 2-1: Product: syz [ 442.767237][ T2171] usb 2-1: Manufacturer: syz [ 442.771868][ T2171] usb 2-1: SerialNumber: syz [ 442.990427][ T2171] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 443.060536][ T2171] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 443.097070][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.191538][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.193492][ T5893] usb 2-1: USB disconnect, device number 67 [ 443.202222][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.872611][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.887609][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.910159][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.922514][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.108368][T11424] syzkaller1: entered promiscuous mode [ 444.113912][T11424] syzkaller1: entered allmulticast mode [ 444.214618][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 444.364911][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 444.372230][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.383005][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.393157][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.403318][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.416912][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.426119][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.640288][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 444.646103][ T10] usbtmc 2-1:16.0: can't read capabilities [ 444.683738][ T5893] usb 2-1: USB disconnect, device number 68 [ 445.046787][T11443] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 445.054745][T11443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1633'. [ 445.125282][ T5893] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 445.155511][ T29] audit: type=1326 audit(524733.099:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.179911][ T29] audit: type=1326 audit(524733.099:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.202902][ T29] audit: type=1326 audit(524733.129:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.225895][ T29] audit: type=1326 audit(524733.129:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.249787][ T29] audit: type=1326 audit(524733.129:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.294745][ T29] audit: type=1326 audit(524733.129:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.334721][ T29] audit: type=1326 audit(524733.129:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.369627][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.384690][ T29] audit: type=1326 audit(524733.129:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553459c819 code=0x7ffc0000 [ 445.392782][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.436463][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 445.447923][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.462553][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.482196][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.498197][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.507490][ T5893] usb 2-1: config 0 descriptor?? [ 445.521526][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.548349][T11453] overlay: Unknown parameter 'posixacl' [ 445.594090][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.606289][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.932092][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 445.940666][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 445.952999][ T5893] usb 2-1: USB disconnect, device number 69 [ 446.102184][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.111199][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.163579][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.172920][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.741105][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.755916][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.766916][T11471] fuse: blksize only supported for fuseblk [ 446.819683][T11474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1645'. [ 446.832635][T11474] syzkaller1: left promiscuous mode [ 446.838132][T11474] syzkaller1: left allmulticast mode [ 447.021534][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.030903][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.104979][ T5893] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 447.266840][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 447.284946][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 447.299687][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 447.312006][ T5893] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 447.321624][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.330020][ T5893] usb 2-1: Product: syz [ 447.331663][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.334487][ T5893] usb 2-1: Manufacturer: syz [ 447.349175][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.351992][ T5893] usb 2-1: SerialNumber: syz [ 447.367637][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.369275][ T5893] usb 2-1: config 0 descriptor?? [ 447.383073][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.386222][ T5893] port100 2-1:0.0: NFC: Could not get supported command types [ 447.600933][T11491] netlink: 'syz.3.1650': attribute type 25 has an invalid length. [ 447.606787][ T5893] usb 2-1: USB disconnect, device number 70 [ 447.982384][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.005460][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.143990][T11500] syzkaller1: entered promiscuous mode [ 448.168039][T11500] syzkaller1: entered allmulticast mode [ 448.189074][T11500] kAFS: unable to lookup cell '/yz1' [ 448.427731][ T2171] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 448.595367][ T2171] usb 2-1: Using ep0 maxpacket: 8 [ 448.612984][ T2171] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.623702][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 448.634471][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 448.652458][ T2171] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 448.663519][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 448.678153][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 448.734307][ T2171] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.4e [ 448.743973][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.758691][ T2171] usb 2-1: SerialNumber: syz [ 448.778435][ T2171] usb 2-1: config 0 descriptor?? [ 448.792240][T11502] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 448.810288][ T2171] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.998912][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.236616][ T2171] usb 2-1: USB disconnect, device number 71 [ 449.330480][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.352993][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.562447][T11530] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 449.582741][T11530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'. [ 449.588485][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.605741][T11530] bridge0: port 3(dummy0) entered blocking state [ 449.609083][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.613147][T11530] bridge0: port 3(dummy0) entered disabled state [ 449.635430][T11530] dummy0: entered allmulticast mode [ 449.645054][T11530] dummy0: entered promiscuous mode [ 449.782616][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 449.805682][T11539] openvswitch: netlink: Missing key (keys=40, expected=80) [ 450.078773][T11554] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1670'. [ 450.090041][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.098912][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.164002][T11554] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 450.185077][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.198032][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.209723][T11557] nfs4: Unknown parameter '' [ 450.235839][ T2171] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 450.248318][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.260126][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.271498][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.281568][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.387529][ T2171] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.399437][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 450.410855][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.422105][ T2171] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.435133][ T2171] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.444273][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.455571][ T2171] usb 2-1: config 0 descriptor?? [ 450.461611][T11547] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 450.821020][T11564] netlink: 'syz.3.1673': attribute type 11 has an invalid length. [ 450.879521][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.895858][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.915755][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.927933][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.935639][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.943140][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.951078][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.958665][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.977037][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 450.987032][ T2171] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 451.013013][ T2171] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 451.030886][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.043905][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.537321][T11578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.547229][T11578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.101768][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.110962][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.305526][ T5843] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 453.030649][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.047258][T11603] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1687'. [ 453.050911][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.161896][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.171097][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.229041][T11613] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 453.240969][T11613] overlayfs: missing 'lowerdir' [ 453.385688][ T5843] usb 2-1: device descriptor read/64, error -32 [ 453.607049][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.616878][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.628522][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.629609][ T5843] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 453.645471][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.733360][T11625] dvmrp12: entered allmulticast mode [ 453.748234][T11625] netlink: 'syz.3.1695': attribute type 9 has an invalid length. [ 453.756766][T11625] netlink: 'syz.3.1695': attribute type 11 has an invalid length. [ 453.764673][T11625] netlink: 'syz.3.1695': attribute type 12 has an invalid length. [ 453.772593][T11625] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1695'. [ 453.782265][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 453.791335][ T5843] usb 2-1: device descriptor read/64, error -71 [ 453.822951][T11628] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 453.877956][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.888237][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.972958][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.983334][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.055821][ T5843] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 454.077390][ T5843] usb 2-1: device descriptor read/8, error -71 [ 454.194825][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.205001][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.345818][ T5843] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 454.367097][ T5843] usb 2-1: device descriptor read/8, error -71 [ 454.476439][ T5893] usb 2-1: USB disconnect, device number 72 [ 454.625966][ T5893] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 454.677362][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.686304][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.698069][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.709104][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.761560][T11646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.773629][ T5893] usb 2-1: device descriptor read/64, error -71 [ 454.781224][T11646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.025903][ T5893] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 455.155916][ T5893] usb 2-1: device descriptor read/64, error -71 [ 455.266392][ T5893] usb usb2-port1: attempt power cycle [ 455.361354][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.374259][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.527007][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.537149][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.606094][ T5893] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 455.628065][ T5893] usb 2-1: device descriptor read/8, error -71 [ 455.866085][ T5893] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 455.887148][ T5893] usb 2-1: device descriptor read/8, error -71 [ 455.997257][ T5893] usb usb2-port1: unable to enumerate USB device [ 456.174599][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.187497][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.230396][T11672] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 456.239299][T11672] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1711'. [ 456.253986][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.263788][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.273807][T11672] netlink: 'syz.2.1711': attribute type 19 has an invalid length. [ 456.296349][ T5893] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 456.301953][T11672] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1711'. [ 456.351811][T11674] batadv_slave_1: entered promiscuous mode [ 456.446328][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 456.453321][ T5893] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 456.461786][ T5893] usb 2-1: config 1 has no interface number 0 [ 456.468082][ T5893] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 456.478067][ T5893] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 456.488145][ T5893] usb 2-1: config 1 interface 105 has no altsetting 0 [ 456.497045][ T5893] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 456.506773][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 456.515032][ T5893] usb 2-1: Product: syz [ 456.519314][ T5893] usb 2-1: Manufacturer: syz [ 456.523938][ T5893] usb 2-1: SerialNumber: syz [ 456.531622][T11663] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.541126][T11663] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.832016][T11680] pim6reg: entered allmulticast mode [ 456.906969][T11683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.920901][T11683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.954445][T11663] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.966832][T11663] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 457.500819][T11685] ipvlan1: entered promiscuous mode [ 457.508423][T11685] ipvlan1: entered allmulticast mode [ 457.514415][T11685] veth0_vlan: entered allmulticast mode [ 457.584751][ T5893] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 457.606663][ T5893] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 457.629402][ T5893] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 457.656736][ T5893] usb 2-1: USB disconnect, device number 77 [ 457.687710][ T5893] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 457.826579][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 457.836635][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 457.849478][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 458.078983][T11697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.108268][T11697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.446302][ T5893] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 458.529689][T11712] program syz.3.1723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.582466][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.592557][ T5893] usb 2-1: device descriptor read/64, error -71 [ 458.599500][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.866470][ T5893] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 459.007071][ T5893] usb 2-1: device descriptor read/64, error -71 [ 459.117909][ T5893] usb usb2-port1: attempt power cycle [ 459.215089][T11716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.224322][T11716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.383813][T11673] batadv_slave_1: left promiscuous mode [ 459.466461][ T5893] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 459.487138][ T5893] usb 2-1: device descriptor read/8, error -71 [ 459.710231][T11740] binder: 11739:11740 ioctl c0306201 0 returned -14 [ 459.736493][ T5893] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 459.778341][ T5893] usb 2-1: device descriptor read/8, error -71 [ 459.836393][T11744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.846229][T11744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.896788][ T5893] usb usb2-port1: unable to enumerate USB device [ 459.905455][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.914623][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.925992][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.935514][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.406105][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.416784][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.709173][T11767] binder: 11766:11767 ioctl c0306201 0 returned -14 [ 461.024808][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.034094][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.465619][T11779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.474635][T11779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.516694][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 461.618352][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.629221][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.671321][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 461.680887][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.689229][ T10] usb 2-1: Product: syz [ 461.693490][ T10] usb 2-1: Manufacturer: syz [ 461.698360][ T10] usb 2-1: SerialNumber: syz [ 461.705186][ T10] usb 2-1: config 0 descriptor?? [ 462.043661][T11789] binder: 11788:11789 ioctl c0306201 0 returned -14 [ 462.199372][T11793] loop6: detected capacity change from 0 to 8 [ 462.320519][ T10] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 462.342777][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 462.375393][ T10] usb 2-1: Please update to version 0.2 or newer [ 462.587221][ T10] usb 2-1: USB disconnect, device number 82 [ 462.639004][T11793] Dev loop6: unable to read RDB block 8 [ 462.644813][T11793] loop6: unable to read partition table [ 462.651618][T11793] loop6: partition table beyond EOD, truncated [ 462.659675][T11793] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 462.851808][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.860745][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.906837][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.923705][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.941810][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.958200][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.482509][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.491676][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.542243][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.553449][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.129498][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.131481][T11843] syzkaller0: mtu greater than device maximum [ 464.145082][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.160059][T11843] syzkaller1: entered promiscuous mode [ 464.165620][T11843] syzkaller1: entered allmulticast mode [ 464.307186][ T5893] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 464.461092][ T5893] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 464.470459][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.478607][ T5893] usb 2-1: Product: syz [ 464.483106][ T5893] usb 2-1: Manufacturer: syz [ 464.487782][ T5893] usb 2-1: SerialNumber: syz [ 464.811549][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.821446][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.901830][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.912413][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.955557][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 464.970574][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 464.982665][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 465.006008][ T5893] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 465.026256][ T5893] usb 2-1: USB disconnect, device number 83 [ 465.037898][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.052230][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.101316][T11854] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 465.110073][T11854] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1768'. [ 465.120016][T11854] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1768'. [ 465.553301][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1772'. [ 465.784575][T11877] netlink: 'syz.2.1778': attribute type 38 has an invalid length. [ 465.802229][T11877] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 465.820436][T11877] qnx6: wrong signature (magic) in superblock #1. [ 465.831155][T11877] qnx6: unable to read the first superblock [ 466.023275][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.032824][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.078972][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 466.105763][T11892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.114677][T11892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.239500][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 466.246339][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.258698][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=32.36 [ 466.267986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.276014][ T10] usb 2-1: Product: syz [ 466.280212][ T10] usb 2-1: Manufacturer: syz [ 466.284824][ T10] usb 2-1: SerialNumber: syz [ 466.292996][ T10] usb 2-1: config 0 descriptor?? [ 466.304064][ T10] asix 2-1:0.0: probe with driver asix failed with error -22 [ 466.513572][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.523882][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.545215][ T809] usb 2-1: USB disconnect, device number 84 [ 466.792682][T11898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.801599][T11898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.944736][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.954596][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.397428][ T809] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 467.497850][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.510065][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.547470][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 467.560390][ T809] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 109, changing to 7 [ 467.586675][ T809] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 467.596333][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.604634][ T809] usb 2-1: Product: ࠓ [ 467.611730][ T809] usb 2-1: Manufacturer: 텥鲺㰥뇛쥈睻鞎熏ଵ器润㵒幏굂㸂랓駦ࡰ뿟⃗巵২큆ꌣ쐊쯤ꃔ쯑㺴魖ﳐ姳鴾䣴䙯壀ꯍ⪇䌊ﻬ㱄魏ꄞ빗☈ፑ裦즠͜闶ᄦⳝຈ藂蕇㰤섿ꮔ퉰핅䌴궕⠴㜮ᦛ嘿쳄䒍ᬈ诺ݤ⿾좻뻃襩柤⾑흶䮝꠵࣢ળ㻏䐬ᤠ䆔莴╇뼔﮶창萖圷歹挆墫懏 [ 467.646648][ T809] usb 2-1: SerialNumber: ᐉ [ 467.894058][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.904689][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.930817][ T809] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 468.011867][ T809] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.046249][ T809] usb 2-1: USB disconnect, device number 85 [ 468.084289][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.407551][ T809] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 468.569451][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.579937][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.591163][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.601239][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.614200][ T809] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 468.623299][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.634362][ T809] usb 2-1: config 0 descriptor?? [ 468.855167][ T809] usbhid 2-1:0.0: can't add hid device: -71 [ 468.862706][ T809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 468.877949][ T809] usb 2-1: USB disconnect, device number 86 [ 469.192808][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.202420][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.297733][ T7478] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 469.448220][ T7478] usb 2-1: Using ep0 maxpacket: 32 [ 469.455345][ T7478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.465977][ T7478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.477396][ T7478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.487467][ T7478] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 469.500653][ T7478] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 469.509845][ T7478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.521512][ T7478] usb 2-1: config 0 descriptor?? [ 469.936189][ T7478] hid_parser_main: 4 callbacks suppressed [ 469.936215][ T7478] betop 0003:20BC:5500.001B: unknown main item tag 0x3 [ 469.961599][ T7478] betop 0003:20BC:5500.001B: item fetching failed at offset 2/5 [ 469.970571][ T7478] betop 0003:20BC:5500.001B: parse failed [ 469.976470][ T7478] betop 0003:20BC:5500.001B: probe with driver betop failed with error -22 [ 469.987850][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.015298][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.181299][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'. [ 470.195501][ T9] usb 2-1: USB disconnect, device number 87 [ 470.714546][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.723763][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.744731][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.755703][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.301848][T11959] pim6reg: left allmulticast mode [ 471.384980][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.394372][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.405645][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.414721][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.425815][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.434977][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.888019][ T5843] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 472.025698][T11970] tipc: Enabling of bearer rejected, failed to enable media [ 472.040524][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.061985][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.074389][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.085400][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.107988][ T5843] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.119641][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.145744][ T5843] usb 2-1: config 0 descriptor?? [ 472.196898][T11980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.207559][T11980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.253687][T11982] netlink: 'syz.3.1813': attribute type 21 has an invalid length. [ 472.261912][T11982] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1813'. [ 472.320775][T11984] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1814'. [ 472.331290][T11984] unsupported nla_type 224 [ 472.337425][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.346811][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.573571][ T5843] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 472.582358][ T5843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 472.589834][ T5843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 472.597574][ T5843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 472.605298][ T5843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 472.613312][ T5843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 472.628883][ T5843] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 472.839923][ T7478] usb 2-1: USB disconnect, device number 88 [ 473.276882][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.286068][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.368394][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.383149][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.691958][T12022] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1824'. [ 473.701348][T12022] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 473.802375][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.813761][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.826458][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.843590][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.852540][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.863837][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.885252][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.894593][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.903905][T12031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1827'. [ 474.719818][T12051] overlay: ./file0 is not a directory [ 474.984824][T12064] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1837'. [ 475.178577][ T7478] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 475.308534][ T7478] usb 2-1: device descriptor read/64, error -71 [ 475.548499][ T7478] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 475.698455][ T7478] usb 2-1: device descriptor read/64, error -71 [ 475.808981][ T7478] usb usb2-port1: attempt power cycle [ 476.168952][ T7478] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 476.222977][ T7478] usb 2-1: device descriptor read/8, error -71 [ 476.478450][ T7478] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 476.512336][ T7478] usb 2-1: device descriptor read/8, error -71 [ 476.638796][ T7478] usb usb2-port1: unable to enumerate USB device [ 476.699531][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.717355][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.777962][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.790317][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.809459][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.821572][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.835534][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.847692][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.496497][T12106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.509034][T12106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.532340][T12106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.543919][T12106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.559662][T12106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.570064][T12106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.126649][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.135808][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.338824][ T5843] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 478.460829][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.470061][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.502213][ T5843] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 478.512700][ T5843] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.527872][ T5843] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 478.537157][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 478.545689][ T5843] usb 2-1: Product: syz [ 478.549964][ T5843] usb 2-1: Manufacturer: syz [ 478.554572][ T5843] usb 2-1: SerialNumber: syz [ 478.689018][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 478.704466][T12119] syzkaller1: entered promiscuous mode [ 478.710051][T12119] syzkaller1: entered allmulticast mode [ 479.021806][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.037529][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.047870][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.058114][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.067636][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.078346][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.088303][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.097237][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.106004][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.115909][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.127373][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.137690][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.138489][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.158986][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.713355][T12133] pim6reg1: entered promiscuous mode [ 479.718940][T12133] pim6reg1: entered allmulticast mode [ 479.856340][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.872067][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.883938][T12141] ISOFS: Unable to identify CD-ROM format. [ 479.947503][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.960042][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.418328][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.427347][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.971729][ T5843] usb 2-1: USB disconnect, device number 93 [ 481.033322][T12157] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1867'. [ 481.042885][T12157] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1867'. [ 481.042919][T12157] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1867'. [ 481.109263][T12162] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1869'. [ 481.135403][T12159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 481.144302][T12160] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 481.842271][ T29] audit: type=1326 audit(524769.785:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12172 comm="syz.3.1872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f553459c819 code=0x0 [ 481.972336][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.982297][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.267620][T12180] overlayfs: empty lowerdir [ 483.314923][T12192] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 483.327105][T12192] JFS: discard option not supported on device [ 483.329436][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 483.344217][T12192] Mount JFS Failure: -22 [ 483.348668][T12192] jfs_mount failed w/return code = -22 [ 483.492482][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.500159][ T9] usb 3-1: USB disconnect, device number 108 [ 483.518932][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.551560][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 483.574722][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.603971][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.617572][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.641363][ T24] usb 2-1: config 0 descriptor?? [ 483.674388][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.688840][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.700224][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.712328][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.720918][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.081860][ T24] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 484.158700][ T24] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 484.276474][ T24] usb 2-1: USB disconnect, device number 94 [ 484.335082][T12196] fido_id[12196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 484.561338][T12194] chnl_net:caif_netlink_parms(): no params data found [ 484.720370][ T49] smc: removing ib device syz1 [ 484.750724][ T9] syz1: Port: 1 Link DOWN [ 484.841271][ T49] smbdirect: ib_dev[syz1] removed [ 484.842840][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.886505][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.911652][T12194] bridge_slave_0: entered allmulticast mode [ 484.953547][T12194] bridge_slave_0: entered promiscuous mode [ 484.979165][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.998408][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.021961][T12194] bridge_slave_1: entered allmulticast mode [ 485.056999][T12194] bridge_slave_1: entered promiscuous mode [ 485.287158][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.317605][T12214] syzkaller1: entered promiscuous mode [ 485.333155][T12214] syzkaller1: entered allmulticast mode [ 485.363177][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.462236][T12218] overlayfs: failed to resolve '/': -2 [ 485.513435][T12194] team0: Port device team_slave_0 added [ 485.547703][T12194] team0: Port device team_slave_1 added [ 485.681490][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.698828][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.771930][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.809705][ T5852] Bluetooth: hci4: command tx timeout [ 485.820355][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.827642][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.858595][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.282131][T12194] hsr_slave_0: entered promiscuous mode [ 486.300301][T12194] hsr_slave_1: entered promiscuous mode [ 486.407937][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.423594][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.586445][T12237] veth0_to_bond: mtu less than device minimum [ 487.103546][ T49] ================================================================== [ 487.111692][ T49] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 487.119356][ T49] Free of addr ffff888075aa80d8 by task kworker/u8:3/49 [ 487.126495][ T49] [ 487.128909][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.128938][ T49] Tainted: [L]=SOFTLOCKUP [ 487.128943][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.128952][ T49] Workqueue: ib-unreg-wq ib_unregister_work [ 487.128973][ T49] Call Trace: [ 487.128981][ T49] [ 487.128987][ T49] dump_stack_lvl+0xe8/0x150 [ 487.129006][ T49] print_address_description+0x55/0x1e0 [ 487.129023][ T49] print_report+0x58/0x70 [ 487.129037][ T49] ? gid_table_release_one+0x384/0x470 [ 487.129051][ T49] kasan_report_invalid_free+0xea/0x110 [ 487.129064][ T49] ? gid_table_release_one+0x384/0x470 [ 487.129078][ T49] free_large_kmalloc+0x3c/0x110 [ 487.129090][ T49] gid_table_release_one+0x384/0x470 [ 487.129105][ T49] ib_device_release+0xd2/0x1c0 [ 487.129122][ T49] ? __pfx_ib_device_release+0x10/0x10 [ 487.129139][ T49] device_release+0xc4/0x1f0 [ 487.129152][ T49] kobject_put+0x228/0x560 [ 487.129170][ T49] ? process_scheduled_works+0xa70/0x1860 [ 487.129187][ T49] process_scheduled_works+0xb5d/0x1860 [ 487.129202][ T49] ? trace_contention_end+0x3b/0x160 [ 487.129221][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.129239][ T49] ? assign_work+0x3d5/0x5e0 [ 487.129255][ T49] worker_thread+0xa53/0xfc0 [ 487.129278][ T49] kthread+0x388/0x470 [ 487.129291][ T49] ? __pfx_worker_thread+0x10/0x10 [ 487.129306][ T49] ? __pfx_kthread+0x10/0x10 [ 487.129319][ T49] ret_from_fork+0x514/0xb70 [ 487.129335][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 487.129351][ T49] ? __switch_to+0xc79/0x1410 [ 487.129366][ T49] ? __pfx_kthread+0x10/0x10 [ 487.129378][ T49] ret_from_fork_asm+0x1a/0x30 [ 487.129393][ T49] [ 487.129397][ T49] [ 487.301730][ T49] The buggy address belongs to the physical page: [ 487.308230][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075aab400 pfn:0x75aa8 [ 487.318297][ T49] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 487.326801][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 487.334345][ T49] page_type: f8(unknown) [ 487.338592][ T49] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 487.347180][ T49] raw: ffff888075aab400 0000000000000000 00000000f8000000 0000000000000000 [ 487.355812][ T49] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 487.364486][ T49] head: ffff888075aab400 0000000000000000 00000000f8000000 0000000000000000 [ 487.373160][ T49] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 487.381922][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 487.390586][ T49] page dumped because: kasan: bad access detected [ 487.396992][ T49] page_owner tracks the page as allocated [ 487.402713][ T49] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9929, tgid 9928 (syz.2.1164), ts 357188340017, free_ts 357177047040 [ 487.420616][ T49] post_alloc_hook+0x231/0x280 [ 487.425499][ T49] get_page_from_freelist+0x24ba/0x2540 [ 487.431048][ T49] __alloc_frozen_pages_noprof+0x18d/0x380 [ 487.436857][ T49] alloc_pages_mpol+0x235/0x490 [ 487.441856][ T49] ___kmalloc_large_node+0x4e/0x120 [ 487.447075][ T49] __kmalloc_large_node_noprof+0x18/0x90 [ 487.452789][ T49] __kmalloc_noprof+0x3e8/0x760 [ 487.457668][ T49] ib_cache_setup_one+0x198/0x570 [ 487.462800][ T49] ib_register_device+0xfbd/0x13e0 [ 487.467925][ T49] rxe_register_device+0x1e3/0x350 [ 487.473128][ T49] rxe_net_add+0x81/0x110 [ 487.477550][ T49] rxe_newlink+0xf4/0x1c0 [ 487.481888][ T49] nldev_newlink+0x5bc/0x650 [ 487.486569][ T49] rdma_nl_rcv+0x6d1/0xa10 [ 487.490998][ T49] netlink_unicast+0x80f/0x9b0 [ 487.495768][ T49] netlink_sendmsg+0x813/0xb40 [ 487.500534][ T49] page last free pid 9929 tgid 9928 stack trace: [ 487.507292][ T49] __free_frozen_pages+0xbc7/0xd30 [ 487.512418][ T49] stack_depot_save_flags+0x40e/0x810 [ 487.517806][ T49] ref_tracker_free+0x12d/0x840 [ 487.522754][ T49] neigh_parms_release+0x163/0x1f0 [ 487.527872][ T49] addrconf_ifdown+0x177b/0x1a40 [ 487.532833][ T49] addrconf_notify+0x1bc/0x1050 [ 487.537691][ T49] notifier_call_chain+0x1ad/0x3d0 [ 487.542806][ T49] netif_set_mtu_ext+0x5aa/0x800 [ 487.547750][ T49] netif_set_mtu+0xd7/0x1b0 [ 487.552263][ T49] dev_set_mtu+0x126/0x260 [ 487.556684][ T49] dev_ioctl+0x7b4/0x1150 [ 487.561061][ T49] sock_do_ioctl+0x23e/0x320 [ 487.565657][ T49] sock_ioctl+0x5c6/0x7f0 [ 487.569991][ T49] __se_sys_ioctl+0xfc/0x170 [ 487.574598][ T49] do_syscall_64+0x15f/0xf80 [ 487.579282][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.585176][ T49] [ 487.587508][ T49] Memory state around the buggy address: [ 487.593141][ T49] ffff888075aa7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.601318][ T49] ffff888075aa8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.609381][ T49] >ffff888075aa8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.617438][ T49] ^ [ 487.624459][ T49] ffff888075aa8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.632522][ T49] ffff888075aa8180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.640592][ T49] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.721042][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 487.837387][ T10] usb 4-1: USB disconnect, device number 43 [ 487.887113][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.911335][ T5852] Bluetooth: hci4: command tx timeout [ 487.913382][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 487.926413][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.933647][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.944550][ T49] Tainted: [L]=SOFTLOCKUP [ 487.948895][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.958974][ T49] Workqueue: ib-unreg-wq ib_unregister_work [ 487.964916][ T49] Call Trace: [ 487.968222][ T49] [ 487.971185][ T49] vpanic+0x56c/0xa60 [ 487.975201][ T49] ? __pfx_vpanic+0x10/0x10 [ 487.979719][ T49] ? __pfx___schedule+0x10/0x10 [ 487.984586][ T49] panic+0xc5/0xd0 [ 487.988336][ T49] ? __pfx_panic+0x10/0x10 [ 487.992757][ T49] ? preempt_schedule_common+0x82/0xd0 [ 487.998222][ T49] check_panic_on_warn+0x89/0xb0 [ 488.003186][ T49] end_report+0x73/0x170 [ 488.007429][ T49] ? gid_table_release_one+0x384/0x470 [ 488.012889][ T49] kasan_report_invalid_free+0xfa/0x110 [ 488.018439][ T49] ? gid_table_release_one+0x384/0x470 [ 488.023908][ T49] free_large_kmalloc+0x3c/0x110 [ 488.028855][ T49] gid_table_release_one+0x384/0x470 [ 488.034237][ T49] ib_device_release+0xd2/0x1c0 [ 488.039297][ T49] ? __pfx_ib_device_release+0x10/0x10 [ 488.044852][ T49] device_release+0xc4/0x1f0 [ 488.049447][ T49] kobject_put+0x228/0x560 [ 488.053877][ T49] ? process_scheduled_works+0xa70/0x1860 [ 488.059604][ T49] process_scheduled_works+0xb5d/0x1860 [ 488.065160][ T49] ? trace_contention_end+0x3b/0x160 [ 488.070476][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.076465][ T49] ? assign_work+0x3d5/0x5e0 [ 488.081070][ T49] worker_thread+0xa53/0xfc0 [ 488.085691][ T49] kthread+0x388/0x470 [ 488.089869][ T49] ? __pfx_worker_thread+0x10/0x10 [ 488.095074][ T49] ? __pfx_kthread+0x10/0x10 [ 488.099672][ T49] ret_from_fork+0x514/0xb70 [ 488.104270][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 488.109404][ T49] ? __switch_to+0xc79/0x1410 [ 488.114083][ T49] ? __pfx_kthread+0x10/0x10 [ 488.118690][ T49] ret_from_fork_asm+0x1a/0x30 [ 488.123461][ T49] [ 488.127222][ T49] Kernel Offset: disabled [ 488.131542][ T49] Rebooting in 86400 seconds..