last executing test programs: 5m56.866165198s ago: executing program 2 (id=293): creat(&(0x7f00000009c0)='./file0\x00', 0x111) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00080211"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0xfffd}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000101090003020000e1de40bb83044d87fe6b0c516000000300000005", @ANYRES32=0x0], 0x50}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m56.837336902s ago: executing program 2 (id=294): mkdir(&(0x7f0000000540)='./file0\x00', 0x101) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x101) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 5m56.792980227s ago: executing program 2 (id=295): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x10001, 0x400040) tee(0xffffffffffffffff, r0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8300c00000001000610"], 0x11) 5m56.719710773s ago: executing program 2 (id=296): r0 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r1 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8141) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x9, {0x2, 0x9, 0x9, 0x8400}, {0x2, 0x5, 0x2, 0xffffff00}, {0x0, 0x801e}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x21, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xd3fc6000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r5, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x4, 0xb, 0x11000, 0x10000, 0x8, 0xfffffeff, 0x2174]}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000300)={0xb, "19e322a514ead255ded597bdd1f0eb4c40b7341283c93cd719d65197f0cf4a23", 0x3, 0x2, 0x4, 0xc00000, 0x28000, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008090) r8 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001100)='\x00\x00\x00\x00\x00\x00\xeeiT', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x6}}, 0x30) 5m56.719181724s ago: executing program 2 (id=297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x1}}}}}]}}]}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0xf0f000, 0xfffffffd, @name="3c7ca5417dcaaa31139bfb48b8f601ee68185555fae5bc41b3480c1f6dbd4bcb"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x3, 0x120, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x1, 0x1, 0x1, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "cc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x100, 0xffff, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x2774, 0x8, 0x101}, @network_terminal={0x7, 0x24, 0xa, 0x9d, 0xa, 0x4, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @mdlm_detail={0xaa, 0x24, 0x13, 0x9, "dfd3a7590a1982526083eaf185a3deb41f34a6e64d6619f1c7c884dd82a12dfd673b20c96af4f2faaa5d72ef25414de11188814f8bae59978767747f3023538c34635d0c5106d76e455231125e8ff7e276f99ba86afee7a4208772c150db80afbb969ef2f792f5536edf2d9acbf49e9040506392c15ebcf1793ce309b64c8c5446d00998518885f4eb04148dd162a282ff3df33a1048447848e2a3aaeec4f1026cd6a95a4bde"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xce, 0x3d, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x85, 0xf1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa8, 0x40, 0xff}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x8, 0x8, 0x10, 0x2}, 0xc6, &(0x7f0000000180)=ANY=[@ANYBLOB="050fc600058b10043e329c492c169b980f70d2822546e6870bc96aa51e01b69a910a530eeb5e98de9769268520fabbb160af8480e08be097c71a173e0c1d47020068de01000000684623acfde65fdc14d6eaadf1a87b70cb913540a210737fbb12417112ad624929fe6cde7105833b7c7b81f3c00bb56fb68f5fd4accf78db9ea427a7bae462b2092ac7b4af251751bc0710020a43ffff0710020a4681001410040f4ca519a58c444932800ff357d73a921214100409d57e2c5842d02da84faa894dee19ccd6"], 0x1, [{0x78, &(0x7f0000000280)=@string={0x78, 0x3, "e1988d805e515d97cca009d12e48bf15b55f776888167fdd7f2ed2a1d1372ed6471911429cd2443c640b438c3a00bcc8344253315e9dd36a0a05bda733505f5254a717c9dba70b651ea62429df8daa1edfc4a10d19eb30c3ce6794edea01601c1b06c2623d049eb871ff4e4e33633d0a4b9449250734"}}]}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000400)={0x20, 0xf, 0x1f, "00e132d5e7efabfe15ff379cc568b9bec7511eb3f9272ba788c2b043fe53be"}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x30, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xc, 0x5, 0x1, {0x22, 0x43f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd, 0x40, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x53, 0x8, 0x98}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x7, 0x0, 0x81, 0xff, 0x5}, 0x1b, &(0x7f0000000480)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x16, 0x10, 0x2, 0x40, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x6, 0x80, 0x4, 0x2}]}, 0x5, [{0x18, &(0x7f0000000500)=@string={0x18, 0x3, "bc1e1a51fd7c816589969a004f3a543483082b477c61"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1aca}}, {0xc7, &(0x7f0000000580)=@string={0xc7, 0x3, "e64aa1081008d97f7cf2c64b27ace005a6d7994558206e58a36a0bc3492816133a13a2b1e14a0a76124a346e647d1dc9724f43e3d2ca849f92384059b8dbb0f7bca010efb2be482a3e8e0bc681f128cb3c347dfe43f318ef37d8a5ddc46e7a6d2fab784f9571559d8dc55b525e9dcb82e0118bf87028288f0207fd4df7e707af6361b46e5c565c5cc0e5e1025cc024d9ff2690c23bb8d721976548ece4381c6d0635e2599499d30dd02e7e87f79d0929ff999487383c7f4a8c8da3901e69a2a57ac7d4a1ec"}}, {0x41, &(0x7f0000000680)=@string={0x41, 0x3, "098534b0e18b135b12981b6ed420e56c04dce9a7e98a13dd021afe40bd4b9b5ac5b9d5c71ab23af335e75aa6041b0253db17cc5092c2056127be12fff0b25d"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x46f}}]}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5m54.952729435s ago: executing program 2 (id=313): r0 = creat(&(0x7f00000009c0)='./file0\x00', 0x111) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00080211"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000fc0)={&(0x7f0000000800)=@pptp={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000001080)="1ea4405da7d510c8e8d22f9f4b8b3ce59743319d3d90e5ee9274437f2fbb73806e4b7ed9b1daec086a7636e9748fc1c91dd0af3943aff222dfc58a86fb5fbbbabf628825250ceb5884e661dc862e120653b295fde0979b81b218ead6acded548fe833090fd80", 0x66}, {&(0x7f0000000900)="5e009a9f81f46aac659b3bcb84f3bb63dbbc76bdcce72ca0c5aaee1da3c41c807f8ac15c5f55bba42708976ff822bf9ff67103a66920be7225f6fe96ebc270e33c46aaeacc65bfbb9810124c773247166e8d3ef8b32532cf879d6e4b0f08683dcd76ad58adfa24ed244aba5ba850bc1eb661ea1ac4100654b8acfe9b6c51d89a6a86721a08dd023ff81103fb7f74a9468ab53b07b3cdb0b06b6ec9f5e487473392a64ce9b1fa8d53d423a031eca9c47e79e450d0ea", 0xb5}, {&(0x7f0000001100)="6c697cfaa929ea014080424a3edd54320435177a81c1b1762183715d1b189edc5bac6fa394a40f9dced0ca22f5f4a6c26867bd1f5dea5baa6aada5c716eaadabb2e959a8ee518b82e00712a94376909f7d92169b3abb24af8d6350a5847cd8bfce3a12f47382c9b0c345089014f9206399e5ffac5b6debe4c724b9d0318bf12f944882d0ed26c27dadf545517b0c9f162c07b8f7e35f7c93f03bf4fffa43f6ebd85be216649547768704a9a6c3a031de3f26a52e84008a8e1557180ff3640f8d2525e363ff197459ed2b0437e5f627944886ee29b1db06aceab96dcb35e055b07d", 0xe1}, {&(0x7f0000000a00)="cb4753b32d3d04178b2b34ef365c02b3b626dc2bcae349d3e2114991e6e3db7d8f2a7bd266774f4c7f539a21a01e3753504e765737b00e718b9fdd3ae7cc09212995945fe869c08a5e9be01d4d3723d80c9c021ab96df7d189df420dde31bd568827f65e7ba6d21a1caca45eef18cbf2310442c5123b4ae1332d47813b4bcbd6f8a4182f65710469e8ab55d95cc9cd8ad4", 0x91}, {&(0x7f0000000ac0)="1726ca6415e003b917870b82790b016247f89493e3669df7bc8078cc3e0bd27866334c1736f24b64ff63c38f71dc08c1ab5ed6ddbce43fceb998d09df94f46265e8155e65bf3b12f0efd3f47fb8e1f52aa6d8ba22a64f5e7837baa4cd193994b9f84364f16e3ea1035611fb50e3d5cbb06763bd51941c8b5e8f15d29a6985a7274f05a1b2c04321fd165edc33455eb420158d27089d5bbfc29ba4c9647d9ca49e735184c6991bab9c6e07cdf2861165f2966505afcc784747e196a46b10f8327d32be9f046d21c4f68cb10d4b2f9a51c90f057", 0xd3}, {&(0x7f0000000bc0)="a95fde8e6a00067b4ad523052ccd79d76764c1783ef1ff1c5cc7ac7317d01045349b34d148ab6e9425ca484f47b047bdf4545c8c59cb0a39613c3217c06ae50a4baf1fb3c2d7076dc6653e", 0x4b}, {&(0x7f0000000c40)="5fcb933ebd676f956f032853f8f0f4a8768baef08c08fb3387949ca8b81c627c47dda2b2f3af976688bbc02963a42c3fb3c1b26dc81e108bbe2dd535c137ab83564f96c56f21e9f55bdafcd71915328efc", 0x51}, {&(0x7f0000000cc0)="347f1b7a5d5ef97b726861559929471c6e94f0f895f871f5dcfb6275240a077217e368e943a9fe31cdb693da2456866c689784417ace20fedb8d8201fd631f0e8dea81aeccd22595d80eb72044c5845d2983ab358e05c2b165d843741c7ac152ab6b7fc7fb8e246f00dac3397daadd8f42b90bfa2b814db04d7351ac2114f90883f9cc8e3f76739378bae5a26fed801b683df2714103f30e3409daa64c28db428b80646667bb541aaa29e94a49271829e0dc094bfefdcc420b101e8afe04298357895aa19ab2c83b8e42d227d5be0cea3b58def3d8a0c401", 0xd8}, {&(0x7f0000000dc0)="4a289cb6fe7bc1396cc70f8fd74f2e084220b67acaf5d4a18997c0901d2d55ca8feaf4475346e8ed27012e52620a652d68804875073bf80f8c57661fa4d949451d3ad9f700b53f32ea48db1fcf7632e1bd68d539166f572a637762fba99f5959bd3e1a3e09e712e355d4141ac08211dd98e4e874556fad9f8feb298e2c0b13e3d0610c7b6d4f", 0x86}], 0x9, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xcb3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x60}, 0x2081) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m39.76931338s ago: executing program 32 (id=313): r0 = creat(&(0x7f00000009c0)='./file0\x00', 0x111) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00080211"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000fc0)={&(0x7f0000000800)=@pptp={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000001080)="1ea4405da7d510c8e8d22f9f4b8b3ce59743319d3d90e5ee9274437f2fbb73806e4b7ed9b1daec086a7636e9748fc1c91dd0af3943aff222dfc58a86fb5fbbbabf628825250ceb5884e661dc862e120653b295fde0979b81b218ead6acded548fe833090fd80", 0x66}, {&(0x7f0000000900)="5e009a9f81f46aac659b3bcb84f3bb63dbbc76bdcce72ca0c5aaee1da3c41c807f8ac15c5f55bba42708976ff822bf9ff67103a66920be7225f6fe96ebc270e33c46aaeacc65bfbb9810124c773247166e8d3ef8b32532cf879d6e4b0f08683dcd76ad58adfa24ed244aba5ba850bc1eb661ea1ac4100654b8acfe9b6c51d89a6a86721a08dd023ff81103fb7f74a9468ab53b07b3cdb0b06b6ec9f5e487473392a64ce9b1fa8d53d423a031eca9c47e79e450d0ea", 0xb5}, {&(0x7f0000001100)="6c697cfaa929ea014080424a3edd54320435177a81c1b1762183715d1b189edc5bac6fa394a40f9dced0ca22f5f4a6c26867bd1f5dea5baa6aada5c716eaadabb2e959a8ee518b82e00712a94376909f7d92169b3abb24af8d6350a5847cd8bfce3a12f47382c9b0c345089014f9206399e5ffac5b6debe4c724b9d0318bf12f944882d0ed26c27dadf545517b0c9f162c07b8f7e35f7c93f03bf4fffa43f6ebd85be216649547768704a9a6c3a031de3f26a52e84008a8e1557180ff3640f8d2525e363ff197459ed2b0437e5f627944886ee29b1db06aceab96dcb35e055b07d", 0xe1}, {&(0x7f0000000a00)="cb4753b32d3d04178b2b34ef365c02b3b626dc2bcae349d3e2114991e6e3db7d8f2a7bd266774f4c7f539a21a01e3753504e765737b00e718b9fdd3ae7cc09212995945fe869c08a5e9be01d4d3723d80c9c021ab96df7d189df420dde31bd568827f65e7ba6d21a1caca45eef18cbf2310442c5123b4ae1332d47813b4bcbd6f8a4182f65710469e8ab55d95cc9cd8ad4", 0x91}, {&(0x7f0000000ac0)="1726ca6415e003b917870b82790b016247f89493e3669df7bc8078cc3e0bd27866334c1736f24b64ff63c38f71dc08c1ab5ed6ddbce43fceb998d09df94f46265e8155e65bf3b12f0efd3f47fb8e1f52aa6d8ba22a64f5e7837baa4cd193994b9f84364f16e3ea1035611fb50e3d5cbb06763bd51941c8b5e8f15d29a6985a7274f05a1b2c04321fd165edc33455eb420158d27089d5bbfc29ba4c9647d9ca49e735184c6991bab9c6e07cdf2861165f2966505afcc784747e196a46b10f8327d32be9f046d21c4f68cb10d4b2f9a51c90f057", 0xd3}, {&(0x7f0000000bc0)="a95fde8e6a00067b4ad523052ccd79d76764c1783ef1ff1c5cc7ac7317d01045349b34d148ab6e9425ca484f47b047bdf4545c8c59cb0a39613c3217c06ae50a4baf1fb3c2d7076dc6653e", 0x4b}, {&(0x7f0000000c40)="5fcb933ebd676f956f032853f8f0f4a8768baef08c08fb3387949ca8b81c627c47dda2b2f3af976688bbc02963a42c3fb3c1b26dc81e108bbe2dd535c137ab83564f96c56f21e9f55bdafcd71915328efc", 0x51}, {&(0x7f0000000cc0)="347f1b7a5d5ef97b726861559929471c6e94f0f895f871f5dcfb6275240a077217e368e943a9fe31cdb693da2456866c689784417ace20fedb8d8201fd631f0e8dea81aeccd22595d80eb72044c5845d2983ab358e05c2b165d843741c7ac152ab6b7fc7fb8e246f00dac3397daadd8f42b90bfa2b814db04d7351ac2114f90883f9cc8e3f76739378bae5a26fed801b683df2714103f30e3409daa64c28db428b80646667bb541aaa29e94a49271829e0dc094bfefdcc420b101e8afe04298357895aa19ab2c83b8e42d227d5be0cea3b58def3d8a0c401", 0xd8}, {&(0x7f0000000dc0)="4a289cb6fe7bc1396cc70f8fd74f2e084220b67acaf5d4a18997c0901d2d55ca8feaf4475346e8ed27012e52620a652d68804875073bf80f8c57661fa4d949451d3ad9f700b53f32ea48db1fcf7632e1bd68d539166f572a637762fba99f5959bd3e1a3e09e712e355d4141ac08211dd98e4e874556fad9f8feb298e2c0b13e3d0610c7b6d4f", 0x86}], 0x9, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xcb3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x60}, 0x2081) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m36.257393423s ago: executing program 0 (id=436): creat(&(0x7f00000009c0)='./file0\x00', 0x111) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00080211"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0xfffd}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000101090003020000e1de40bb83044d87fe6b0c516000000300000005", @ANYRES32=0x0], 0x50}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m36.038297207s ago: executing program 0 (id=439): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x800) (fail_nth: 1) 5m35.630456314s ago: executing program 0 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 5m35.493838076s ago: executing program 0 (id=443): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) setreuid(0x0, 0xee00) setpriority(0x1, 0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0xa, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) listen(r0, 0x20000400) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ftruncate(r2, 0x4000000000008001) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2040, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x20, r1}, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9) 5m35.251644221s ago: executing program 0 (id=444): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 5m34.894299359s ago: executing program 0 (id=445): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xff7e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 5m19.534282781s ago: executing program 33 (id=445): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xff7e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 4m23.945088637s ago: executing program 1 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x2, 0x2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5434, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) sendto$inet(r1, &(0x7f0000000000)="ac48bc79aab021fe122ee7b8185a6229ca49701551fd36", 0x17, 0x40804, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 4m23.816249848s ago: executing program 1 (id=1002): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x0, 0x5, r1) (async) keyctl$reject(0x13, r1, 0x0, 0x5, r1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendfile(r2, r0, 0x0, 0x7fffefff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 4m22.835243606s ago: executing program 1 (id=1013): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x8811, r0, 0x0) 4m22.733497399s ago: executing program 1 (id=1014): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001940)={0xb, {"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", 0x1000}}, 0x1006) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r3, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4m22.211700667s ago: executing program 1 (id=1018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xd865f000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0xffff0000, 0x4) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@empty, @mcast2, @local, 0x100, 0xfff8, 0x2, 0x500, 0x5, 0x100001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x4) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x3, 0x400100) mmap$snddsp_status(&(0x7f0000a08000/0x1000)=nil, 0x1000, 0x0, 0x110, r5, 0x82000000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000180009020000b71addeb0000020000040000000000000000100008808b0000007b26282f283a0000dd4483bfa03b73a30f165a66e8934a9848b470b760751af40d5b6783c9f241e12ff31fb62d9ec21eb10dc45827d66dbabcc18eae422336e48c274275a2ce4d1bb92e619b053e35a2c185ab19290d105394540a83f24b8db3"], 0x2c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3ff}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4088100}, 0x8800) 4m21.97028404s ago: executing program 1 (id=1022): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4m21.879787635s ago: executing program 34 (id=1022): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 6.139558675s ago: executing program 3 (id=3202): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_open_procfs$userns(r0, &(0x7f0000000040)) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 5.328760079s ago: executing program 4 (id=3207): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000005200), 0x400000000000059, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x6) 5.029176627s ago: executing program 3 (id=3210): mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0xc, 0x3032, 0xffffffffffffffff, 0x8f4de000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) mlockall(0x2) 4.851119925s ago: executing program 5 (id=3212): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.074059483s ago: executing program 3 (id=3214): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) syz_open_dev$vim2m(&(0x7f0000000100), 0xf, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200029bd5c143a8b93b437103a84e6e8127000fddbdf250a000000080005000700000008000400bc0b0000080004000b40b0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x9, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x2) syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xfff}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}}, &(0x7f0000000600)=0x84) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x1e, 0x21, 0x8, 0x25dfdbfb, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x96335b3603020bac}, 0x0) 2.057209937s ago: executing program 3 (id=3219): ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0) syz_io_uring_setup(0x604d, 0x0, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x3406}, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000100)) 1.92631796s ago: executing program 5 (id=3220): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) lseek(0xffffffffffffffff, 0x1000000, 0x4) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x61f0, 0x0) 1.858253955s ago: executing program 3 (id=3222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) sendmmsg$alg(r1, &(0x7f00000054c0)=[{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000008c0)="65008bee898379aed6607aba31c31a0d5aa54b360c152f76caa974764664ec5738c155f03a7e56161095f8d68b5bd3776163ccf8b187359ed5239eb78a8868cc5281faeb936945c835f0665785710558383c11644e47cbf729b5860a25758e5c854aeba07f9327ac08c1c50de6823e5f850f2959b630232794b4d925f10cd2cd07e982f764ecf44172c4333f86576186b9b2b482448e", 0x34000}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x20000844) 1.794159244s ago: executing program 4 (id=3223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.75867823s ago: executing program 4 (id=3224): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.727134749s ago: executing program 5 (id=3225): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x400000001fc, 0x2301) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.626295632s ago: executing program 3 (id=3226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sync() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 1.552783556s ago: executing program 4 (id=3227): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000400)="201f5c2289d4831f6d4a39209468014e000d33fcfd9b156f1154f019012648fb2077aa4470a01e1f0e8e0eba12fab654805ca48a8b126a5ed791fd505cd0b19486ea71fe3d4ba5fa0e8b968a8367c0a42e863532408e8b326c72efd412d3a550f2ff47384bcccc29873f6755cd2e55560ed554bb11c36b5d6e8e0839a5f27d23741953ae28dc49b9d7747b4c3ea4528e8d63d4c03edeca6ba690197c4571bdcee9cdfd601aeac5785cdf0cc9f7afa2a764f0575ebf0a8f8242613aa23ed2e6b06690fe1cb8d2b4eb410b53ff206c90620219f9", 0xd3) truncate(&(0x7f0000000080)='./file0\x00', 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x14\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5) fallocate(r9, 0x0, 0x400000000000000, 0x7) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x7, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000200000109000200733c7a31000000000900010073797a3100000004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.552287991s ago: executing program 5 (id=3228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040880) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.552109263s ago: executing program 6 (id=3229): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70fd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 800.679247ms ago: executing program 6 (id=3230): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000080)="003e2ed03cc4a0362e98ad0f0000", 0xe}], 0x2) 650.324018ms ago: executing program 6 (id=3231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000a00)=""/238, 0xee}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x103}], 0x4, 0x40010020, 0x0) 621.528132ms ago: executing program 5 (id=3232): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x18, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@private1, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 612.931669ms ago: executing program 4 (id=3233): io_setup(0x80000001, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000400), 0x1) 557.605529ms ago: executing program 6 (id=3234): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x3f, 0x9}) 114.28854ms ago: executing program 4 (id=3235): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) 113.984784ms ago: executing program 6 (id=3236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd", 0x7}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4", 0x19}], 0x2}], 0x1, 0x40800) 70.740186ms ago: executing program 5 (id=3237): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x10000, 0x40, 0x6dd, 0x0, 0xfffffffd, 0x40, 0x800, 0x1, 0x9, 0x100, 0x6, &(0x7f0000000380)=[0x8], 0x1, 0x0}) 0s ago: executing program 6 (id=3238): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) kernel console output (not intermixed with test programs): T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 412.030547][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.038841][ T10] usb 6-1: Product: syz [ 412.043039][ T10] usb 6-1: Manufacturer: syz [ 412.047726][ T10] usb 6-1: SerialNumber: syz [ 412.088083][ T5961] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 412.111004][ T5961] usb 5-1: device descriptor read/8, error -71 [ 412.260531][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 412.348047][ T5961] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 412.379317][ T5961] usb 5-1: device descriptor read/8, error -71 [ 412.469560][T13362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.478352][T13362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.490540][ T5961] usb usb5-port1: unable to enumerate USB device [ 414.238012][ T5897] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 414.288009][ T5961] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 414.399716][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.411311][ T5897] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.421481][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.430956][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.441115][T13382] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 414.451222][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.464229][ T5961] usb 5-1: config 5 has an invalid interface number: 233 but max is 1 [ 414.484775][ T5961] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 414.505359][ T5961] usb 5-1: config 5 has no interface number 1 [ 414.511655][ T5961] usb 5-1: config 5 interface 233 has no altsetting 0 [ 414.525229][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.534405][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.599336][ T5897] usb 6-1: USB disconnect, device number 38 [ 414.715253][ T5897] usblp0: removed [ 416.348149][ T24] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 416.512807][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.534825][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 416.544777][ T24] usb 6-1: can't read configurations, error -71 [ 416.940931][ T5961] usb 5-1: string descriptor 0 read error: -71 [ 416.954838][T13395] /dev/rnullb0: Can't open blockdev [ 416.958612][ T5961] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8 [ 416.991320][ T5897] usb 4-1: USB disconnect, device number 71 [ 417.011174][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.066249][ T5961] usb 5-1: can't set config #5, error -71 [ 417.093821][ T5961] usb 5-1: USB disconnect, device number 2 [ 417.112985][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2681'. [ 417.398100][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 417.458008][ T5897] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 417.548059][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 417.554581][ T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 417.564832][ T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 417.574750][ T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.587771][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 417.597319][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 417.606720][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.614990][ T24] usb 6-1: Product: syz [ 417.619271][ T24] usb 6-1: Manufacturer: syz [ 417.624050][ T24] usb 6-1: SerialNumber: syz [ 417.630569][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 417.639375][ T5897] usb 4-1: not running at top speed; connect to a high speed hub [ 417.649151][ T5897] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 417.659783][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.670797][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.679996][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.688153][ T5897] usb 4-1: Product: syz [ 417.692361][ T5897] usb 4-1: Manufacturer: syz [ 417.696962][ T5897] usb 4-1: SerialNumber: syz [ 417.850622][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 417.871861][T13408] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.2684'. [ 417.925414][ T5897] usb 4-1: unknown interface protocol 0xfc, assuming v1 [ 417.932838][ T5897] usb 4-1: 0:2 : does not exist [ 417.951689][ T5897] usb 4-1: USB disconnect, device number 72 [ 417.982281][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.070552][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.079289][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.255460][ T5872] usb 6-1: USB disconnect, device number 40 [ 418.264084][ T5872] usblp0: removed [ 419.008095][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 419.058084][ T5872] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 419.170122][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 419.179362][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.189247][ T10] usb 4-1: config 0 descriptor?? [ 419.199573][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 419.221655][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.231979][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 419.239983][ T5872] usb 5-1: can't read configurations, error -71 [ 419.399663][T13421] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 419.412034][ T10] gspca_spca508: reg_read err -71 [ 419.417554][ T10] gspca_spca508: reg_read err -71 [ 419.424175][ T10] gspca_spca508: reg_read err -71 [ 419.429829][ T10] gspca_spca508: reg_read err -71 [ 419.435336][ T10] gspca_spca508: reg_read err -71 [ 419.440937][ T10] gspca_spca508: reg write: error -71 [ 419.446373][ T10] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 419.459820][ T10] usb 4-1: USB disconnect, device number 73 [ 419.938157][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 420.128143][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 420.135024][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.145350][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.156338][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.165810][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.174181][ T24] usb 6-1: Product: syz [ 420.178458][ T24] usb 6-1: Manufacturer: syz [ 420.183080][ T24] usb 6-1: SerialNumber: syz [ 420.298001][ T5872] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 420.462018][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 420.470259][ T5872] usb 5-1: not running at top speed; connect to a high speed hub [ 420.479102][ T5872] usb 5-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 420.489620][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.500983][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.510283][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.518816][ T5872] usb 5-1: Product: syz [ 420.523016][ T5872] usb 5-1: Manufacturer: syz [ 420.529297][ T5872] usb 5-1: SerialNumber: syz [ 420.595070][ T5860] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 420.596519][ T24] usb 6-1: cannot find UAC_HEADER [ 420.616556][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 420.633459][ T24] usb 6-1: USB disconnect, device number 41 [ 420.641614][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.748656][ T5872] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 420.755730][ T5872] usb 5-1: 0:2 : does not exist [ 420.765668][ T5872] usb 5-1: USB disconnect, device number 4 [ 420.781233][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.293351][T13445] netlink: 'syz.3.2700': attribute type 3 has an invalid length. [ 421.302796][T13445] netlink: 'syz.3.2700': attribute type 3 has an invalid length. [ 421.363085][ T5860] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 421.363117][ T5860] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 421.370707][ T5860] Bluetooth: hci2: Dropping invalid advertising data [ 421.385037][ T5860] Bluetooth: hci2: Malformed LE Event: 0x02 [ 421.507864][T13451] comedi comedi3: comedi_config --init_data is deprecated [ 421.522949][T13451] comedi: valid board names for 8255 driver are: [ 421.530603][T13451] 8255 [ 421.530842][ T979] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 421.533493][T13451] comedi: valid board names for vmk80xx driver are: [ 421.550812][T13451] vmk80xx [ 421.553871][T13451] comedi: valid board names for usbduxsigma driver are: [ 421.561041][T13451] usbduxsigma [ 421.564424][T13451] comedi: valid board names for usbduxfast driver are: [ 421.571737][T13451] usbduxfast [ 421.575040][T13451] comedi: valid board names for usbdux driver are: [ 421.582896][T13451] usbdux [ 421.585875][T13451] comedi: valid board names for ni6501 driver are: [ 421.592742][T13451] ni6501 [ 421.595720][T13451] comedi: valid board names for dt9812 driver are: [ 421.602480][T13451] dt9812 [ 421.605458][T13451] comedi: valid board names for ni_labpc_cs driver are: [ 421.612568][T13451] ni_labpc_cs [ 421.615956][T13451] comedi: valid board names for ni_daq_700 driver are: [ 421.623241][T13451] ni_daq_700 [ 421.626568][T13451] comedi: valid board names for labpc_pci driver are: [ 421.633632][T13451] labpc_pci [ 421.637428][T13451] comedi: valid board names for adl_pci9118 driver are: [ 421.644647][T13451] pci9118dg [ 421.649308][T13451] pci9118hg [ 421.653332][T13451] pci9118hr [ 421.656574][T13451] comedi: valid board names for 8255_pci driver are: [ 421.663799][T13451] 8255_pci [ 421.667066][T13451] comedi: valid board names for s526 driver are: [ 421.674623][T13451] s526 [ 421.677807][T13451] comedi: valid board names for multiq3 driver are: [ 421.684577][T13451] multiq3 [ 421.687838][T13451] comedi: valid board names for pcmuio driver are: [ 421.694879][T13451] pcmuio48 [ 421.698379][T13451] pcmuio96 [ 421.701682][T13451] comedi: valid board names for pcmmio driver are: [ 421.708521][T13451] pcmmio [ 421.711652][T13451] comedi: valid board names for pcmda12 driver are: [ 421.718429][T13451] pcmda12 [ 421.721599][T13451] comedi: valid board names for pcmad driver are: [ 421.728169][T13451] pcmad12 [ 421.731437][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.732798][T13451] pcmad16 [ 421.739854][ T979] usb 5-1: not running at top speed; connect to a high speed hub [ 421.750966][T13451] comedi: valid board names for ni_labpc driver are: [ 421.760465][T13451] lab-pc-1200 [ 421.764218][T13451] lab-pc-1200ai [ 421.764325][ T979] usb 5-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 421.781235][T13451] lab-pc+ [ 421.784461][T13451] comedi: valid board names for atmio16 driver are: [ 421.791575][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.800893][T13451] atmio16 [ 421.804117][T13451] atmio16d [ 421.807455][T13451] comedi: valid board names for ni_at_ao driver are: [ 421.815203][T13451] at-ao-6 [ 421.821874][T13451] at-ao-10 [ 421.825296][ T979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.826452][T13451] comedi: valid board names for ni_at_a2150 driver are: [ 421.835167][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.835196][ T979] usb 5-1: Product: syz [ 421.835213][ T979] usb 5-1: Manufacturer: syz [ 421.835230][ T979] usb 5-1: SerialNumber: syz [ 421.865568][T13451] ni_at_a2150 [ 421.869221][T13451] comedi: valid board names for adq12b driver are: [ 421.875837][T13451] adq12b [ 421.879048][T13451] comedi: valid board names for mpc624 driver are: [ 421.885563][T13451] mpc624 [ 421.888934][T13451] comedi: valid board names for c6xdigio driver are: [ 421.895729][T13451] c6xdigio [ 421.899656][T13451] comedi: valid board names for aio_iiro_16 driver are: [ 421.906773][T13451] aio_iiro_16 [ 421.910429][T13451] comedi: valid board names for aio_aio12_8 driver are: [ 421.917387][T13451] aio_aio12_8 [ 421.920996][T13451] aio_ai12_8 [ 421.924399][T13451] aio_ao12_4 [ 421.927687][T13451] comedi: valid board names for fl512 driver are: [ 421.934357][T13451] fl512 [ 421.937234][T13451] comedi: valid board names for dmm32at driver are: [ 421.943960][T13451] dmm32at [ 421.947133][T13451] comedi: valid board names for dt282x driver are: [ 421.954078][T13451] dt2821 [ 421.957371][T13451] dt2821-f [ 421.961392][T13451] dt2821-g [ 421.964633][T13451] dt2823 [ 421.967660][T13451] dt2824-pgh [ 421.971116][T13451] dt2824-pgl [ 421.974486][T13451] dt2825 [ 421.977501][T13451] dt2827 [ 421.980788][T13451] dt2828 [ 421.983824][T13451] dt2829 [ 421.986793][T13451] dt21-ez [ 421.990151][T13451] dt23-ez [ 421.993195][T13451] dt24-ez [ 421.996248][T13451] dt24-ez-pgl [ 421.999723][T13451] comedi: valid board names for dt2817 driver are: [ 422.006266][T13451] dt2817 [ 422.009283][T13451] comedi: valid board names for dt2815 driver are: [ 422.016062][T13451] dt2815 [ 422.020451][T13451] comedi: valid board names for dt2814 driver are: [ 422.027054][T13451] dt2814 [ 422.030086][T13451] comedi: valid board names for dt2811 driver are: [ 422.036703][T13451] dt2811-pgh [ 422.041404][T13451] dt2811-pgl [ 422.045018][T13451] comedi: valid board names for dt2801 driver are: [ 422.046942][ T979] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 422.053085][T13451] dt2801 [ 422.066171][ T979] usb 5-1: 0:2 : does not exist [ 422.066650][T13451] comedi: valid board names for das6402 driver are: [ 422.080126][T13451] das6402-12 [ 422.081788][ T979] usb 5-1: USB disconnect, device number 5 [ 422.083559][T13451] das6402-16 [ 422.093033][T13451] comedi: valid board names for das1800 driver are: [ 422.101616][T13451] das-1701st [ 422.105138][T13451] das-1701st-da [ 422.108892][T13451] das-1702st [ 422.112272][T13451] das-1702st-da [ 422.116077][T13451] das-1702hr [ 422.121506][T13451] das-1702hr-da [ 422.125138][T13451] das-1701ao [ 422.128752][T13451] das-1702ao [ 422.132070][T13451] das-1801st [ 422.135366][T13451] das-1801st-da [ 422.139966][T13451] das-1802st [ 422.143362][T13451] das-1802st-da [ 422.146923][T13451] das-1802hr [ 422.150410][T13451] das-1802hr-da [ 422.154045][T13451] das-1801hc [ 422.157340][T13451] das-1802hc [ 422.160986][T13451] das-1801ao [ 422.164664][T13451] das-1802ao [ 422.171520][T13451] comedi: valid board names for das800 driver are: [ 422.178130][T13451] das-800 [ 422.181290][T13451] cio-das800 [ 422.184631][T13451] das-801 [ 422.187674][T13451] cio-das801 [ 422.191462][T13451] das-802 [ 422.194651][T13451] cio-das802 [ 422.198205][T13451] cio-das802/16 [ 422.201887][T13451] comedi: valid board names for isa-das08 driver are: [ 422.209243][T13451] isa-das08 [ 422.212655][T13451] das08-pgm [ 422.215952][T13451] das08-pgh [ 422.219354][T13451] das08-pgl [ 422.222670][T13451] das08-aoh [ 422.225874][T13451] das08-aol [ 422.229168][T13451] das08-aom [ 422.232418][T13451] das08/jr-ao [ 422.235928][T13451] das08jr-16-ao [ 422.239711][T13451] pc104-das08 [ 422.243142][T13451] das08jr/16 [ 422.246422][T13451] comedi: valid board names for das16m1 driver are: [ 422.253145][T13451] das16m1 [ 422.256188][T13451] comedi: valid board names for dac02 driver are: [ 422.262818][T13451] dac02 [ 422.267181][T13451] comedi: valid board names for rti802 driver are: [ 422.273820][T13451] rti802 [ 422.276795][T13451] comedi: valid board names for rti800 driver are: [ 422.283433][T13451] rti800 [ 422.286563][T13451] rti815 [ 422.289729][T13451] comedi: valid board names for pcm3724 driver are: [ 422.296478][T13451] pcm3724 [ 422.299620][T13451] comedi: valid board names for pcl818 driver are: [ 422.306257][T13451] pcl818l [ 422.309378][T13451] pcl818h [ 422.312418][T13451] pcl818hd [ 422.315522][T13451] pcl818hg [ 422.318716][T13451] pcl818 [ 422.321675][T13451] pcl718 [ 422.324604][T13451] pcm3718 [ 422.327617][T13451] comedi: valid board names for pcl816 driver are: [ 422.334355][T13451] pcl816 [ 422.337336][T13451] pcl814b [ 422.340398][T13451] comedi: valid board names for pcl812 driver are: [ 422.346913][T13451] pcl812 [ 422.349941][T13451] pcl812pg [ 422.353081][T13451] acl8112pg [ 422.356270][T13451] acl8112dg [ 422.359539][T13451] acl8112hg [ 422.362773][T13451] a821pgl [ 422.365826][T13451] a821pglnda [ 422.370612][T13451] a821pgh [ 422.373670][T13451] a822pgl [ 422.376735][T13451] a822pgh [ 422.379961][T13451] a823pgl [ 422.383422][T13451] a823pgh [ 422.393116][T13451] pcl813 [ 422.396203][T13451] pcl813b [ 422.399426][T13451] acl8113 [ 422.402491][T13451] iso813 [ 422.405457][T13451] acl8216 [ 422.408598][T13451] a826pg [ 422.411561][T13451] comedi: valid board names for pcl730 driver are: [ 422.418720][T13451] pcl730 [ 422.422075][T13451] iso730 [ 422.425128][T13451] acl7130 [ 422.428241][T13451] pcm3730 [ 422.431541][T13451] pcl725 [ 422.434784][T13451] p8r8dio [ 422.437830][T13451] acl7225b [ 422.441070][T13451] p16r16dio [ 422.444292][T13451] pcl733 [ 422.447313][T13465] /dev/rnullb0: Can't open blockdev [ 422.447443][T13451] pcl734 [ 422.455698][T13451] opmm-1616-xt [ 422.462443][T13451] pearl-mm-p [ 422.466050][T13451] ir104-pbf [ 422.472287][T13451] comedi: valid board names for pcl726 driver are: [ 422.480070][T13451] pcl726 [ 422.483044][T13451] pcl727 [ 422.486098][T13451] pcl728 [ 422.489336][T13451] acl6126 [ 422.492397][T13451] acl6128 [ 422.495436][T13451] comedi: valid board names for pcl724 driver are: [ 422.502537][T13451] pcl724 [ 422.505525][T13451] pcl722 [ 422.508682][T13451] pcl731 [ 422.511624][T13451] acl7122 [ 422.514647][T13451] acl7124 [ 422.517654][T13451] pet48dio [ 422.520842][T13451] pcmio48 [ 422.523887][T13451] onyx-mm-dio [ 422.527341][T13451] comedi: valid board names for pcl711 driver are: [ 422.533904][T13451] pcl711 [ 422.536866][T13451] pcl711b [ 422.540003][T13451] acl8112hg [ 422.543211][T13451] acl8112dg [ 422.546420][T13451] comedi: valid board names for amplc_pc263 driver are: [ 422.553516][T13451] pc263 [ 422.556380][T13451] comedi: valid board names for amplc_pc236 driver are: [ 422.563365][T13451] pc36at [ 422.566315][T13451] comedi: valid board names for amplc_dio200 driver are: [ 422.574933][T13451] pc212e [ 422.577937][T13451] pc214e [ 422.580898][T13451] pc215e [ 422.583852][T13451] pc218e [ 422.586829][T13451] pc272e [ 422.589857][T13451] comedi: valid board names for comedi_parport driver are: [ 422.597184][T13451] comedi_parport [ 422.601302][T13451] comedi: valid board names for comedi_test driver are: [ 422.611454][T13451] comedi_test [ 422.614919][T13451] comedi: valid board names for comedi_bond driver are: [ 422.623756][T13451] comedi_bond [ 422.878795][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 423.040099][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.048816][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 423.057549][ T10] usb 5-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 423.068582][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.080028][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.090494][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.098863][ T10] usb 5-1: Product: syz [ 423.103070][ T10] usb 5-1: Manufacturer: syz [ 423.107674][ T10] usb 5-1: SerialNumber: syz [ 423.245930][T13485] netlink: 'syz.5.2715': attribute type 6 has an invalid length. [ 423.328862][ T10] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 423.336091][ T10] usb 5-1: 0:2 : does not exist [ 423.352924][ T10] usb 5-1: USB disconnect, device number 6 [ 423.578119][ T24] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 423.670047][T13495] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 423.681507][T13495] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 423.690723][T13495] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 423.699226][T13495] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 423.707178][T13495] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 423.715076][T13495] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 423.724094][T13495] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 423.733220][T13495] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 423.744476][T13495] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 423.745673][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 423.755679][T13495] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 423.761086][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 423.778376][ T24] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 423.789060][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.800251][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.810096][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.818457][ T24] usb 6-1: Product: syz [ 423.825209][ T24] usb 6-1: Manufacturer: syz [ 423.830244][ T24] usb 6-1: SerialNumber: syz [ 423.987750][T13506] comedi comedi3: comedi_config --init_data is deprecated [ 424.009524][T13506] comedi: valid board names for 8255 driver are: [ 424.016059][T13506] 8255 [ 424.020529][T13506] comedi: valid board names for vmk80xx driver are: [ 424.027261][T13506] vmk80xx [ 424.030887][T13506] comedi: valid board names for usbduxsigma driver are: [ 424.038280][T13506] usbduxsigma [ 424.041828][T13506] comedi: valid board names for usbduxfast driver are: [ 424.049102][T13506] usbduxfast [ 424.057411][T13506] comedi: valid board names for usbdux driver are: [ 424.067424][T13506] usbdux [ 424.070105][ T24] usb 6-1: unknown interface protocol 0xfc, assuming v1 [ 424.070886][T13506] comedi: valid board names for ni6501 driver are: [ 424.086414][T13506] ni6501 [ 424.087228][ T24] usb 6-1: 0:2 : does not exist [ 424.090118][T13506] comedi: valid board names for dt9812 driver are: [ 424.101941][T13506] dt9812 [ 424.105064][T13506] comedi: valid board names for ni_labpc_cs driver are: [ 424.113611][T13506] ni_labpc_cs [ 424.117496][T13506] comedi: valid board names for ni_daq_700 driver are: [ 424.126576][T13506] ni_daq_700 [ 424.131022][T13506] comedi: valid board names for labpc_pci driver are: [ 424.137369][ T24] usb 6-1: USB disconnect, device number 42 [ 424.142614][T13506] labpc_pci [ 424.148875][T13506] comedi: valid board names for adl_pci9118 driver are: [ 424.156200][T13506] pci9118dg [ 424.160145][T13506] pci9118hg [ 424.163444][T13506] pci9118hr [ 424.166860][T13506] comedi: valid board names for 8255_pci driver are: [ 424.176390][T13506] 8255_pci [ 424.186652][T13506] comedi: valid board names for s526 driver are: [ 424.196149][T13506] s526 [ 424.201080][T13506] comedi: valid board names for multiq3 driver are: [ 424.207723][T13506] multiq3 [ 424.211469][T13506] comedi: valid board names for pcmuio driver are: [ 424.218501][T13506] pcmuio48 [ 424.221641][T13506] pcmuio96 [ 424.224761][T13506] comedi: valid board names for pcmmio driver are: [ 424.232016][T13506] pcmmio [ 424.235150][T13506] comedi: valid board names for pcmda12 driver are: [ 424.241814][T13506] pcmda12 [ 424.244878][T13506] comedi: valid board names for pcmad driver are: [ 424.251567][T13506] pcmad12 [ 424.254629][T13506] pcmad16 [ 424.257689][T13506] comedi: valid board names for ni_labpc driver are: [ 424.264588][T13506] lab-pc-1200 [ 424.268032][T13506] lab-pc-1200ai [ 424.271720][T13506] lab-pc+ [ 424.274985][T13506] comedi: valid board names for atmio16 driver are: [ 424.281871][T13506] atmio16 [ 424.284962][T13506] atmio16d [ 424.288408][ T5961] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 424.290320][T13506] comedi: valid board names for ni_at_ao driver are: [ 424.303175][T13506] at-ao-6 [ 424.306234][T13506] at-ao-10 [ 424.309488][T13506] comedi: valid board names for ni_at_a2150 driver are: [ 424.317409][T13506] ni_at_a2150 [ 424.321048][T13506] comedi: valid board names for adq12b driver are: [ 424.327758][T13506] adq12b [ 424.330983][T13506] comedi: valid board names for mpc624 driver are: [ 424.337609][T13506] mpc624 [ 424.341111][T13506] comedi: valid board names for c6xdigio driver are: [ 424.348147][T13506] c6xdigio [ 424.351417][T13506] comedi: valid board names for aio_iiro_16 driver are: [ 424.358531][T13506] aio_iiro_16 [ 424.362122][T13506] comedi: valid board names for aio_aio12_8 driver are: [ 424.369288][T13506] aio_aio12_8 [ 424.372786][T13506] aio_ai12_8 [ 424.376181][T13506] aio_ao12_4 [ 424.379630][T13506] comedi: valid board names for fl512 driver are: [ 424.386095][T13506] fl512 [ 424.389030][T13506] comedi: valid board names for dmm32at driver are: [ 424.395662][T13506] dmm32at [ 424.399030][T13506] comedi: valid board names for dt282x driver are: [ 424.405556][T13506] dt2821 [ 424.408594][T13506] dt2821-f [ 424.411727][T13506] dt2821-g [ 424.414951][T13506] dt2823 [ 424.418195][ T5961] usb 4-1: device descriptor read/64, error -71 [ 424.422644][T13506] dt2824-pgh [ 424.428289][T13506] dt2824-pgl [ 424.431610][T13506] dt2825 [ 424.434554][T13506] dt2827 [ 424.437558][T13506] dt2828 [ 424.440792][T13506] dt2829 [ 424.443742][T13506] dt21-ez [ 424.446771][T13506] dt23-ez [ 424.450087][T13506] dt24-ez [ 424.453219][T13506] dt24-ez-pgl [ 424.456599][T13506] comedi: valid board names for dt2817 driver are: [ 424.463173][T13506] dt2817 [ 424.466191][T13506] comedi: valid board names for dt2815 driver are: [ 424.472733][T13506] dt2815 [ 424.475699][T13506] comedi: valid board names for dt2814 driver are: [ 424.482435][T13506] dt2814 [ 424.485450][T13506] comedi: valid board names for dt2811 driver are: [ 424.492024][T13506] dt2811-pgh [ 424.495362][T13506] dt2811-pgl [ 424.498750][T13506] comedi: valid board names for dt2801 driver are: [ 424.505265][T13506] dt2801 [ 424.508424][T13506] comedi: valid board names for das6402 driver are: [ 424.515036][T13506] das6402-12 [ 424.518737][T13506] das6402-16 [ 424.522042][T13506] comedi: valid board names for das1800 driver are: [ 424.528997][T13506] das-1701st [ 424.532304][T13506] das-1701st-da [ 424.535838][T13506] das-1702st [ 424.539523][T13506] das-1702st-da [ 424.543606][T13506] das-1702hr [ 424.547091][T13506] das-1702hr-da [ 424.550817][T13506] das-1701ao [ 424.554220][T13506] das-1702ao [ 424.557718][T13506] das-1801st [ 424.561101][T13506] das-1801st-da [ 424.564673][T13506] das-1802st [ 424.568216][T13506] das-1802st-da [ 424.571867][T13506] das-1802hr [ 424.575200][T13506] das-1802hr-da [ 424.578899][T13506] das-1801hc [ 424.582208][T13506] das-1802hc [ 424.585587][T13506] das-1801ao [ 424.589026][T13506] das-1802ao [ 424.592319][T13506] comedi: valid board names for das800 driver are: [ 424.598889][T13506] das-800 [ 424.602033][T13506] cio-das800 [ 424.605326][T13506] das-801 [ 424.608759][T13506] cio-das801 [ 424.612211][T13506] das-802 [ 424.615260][T13506] cio-das802 [ 424.618939][T13506] cio-das802/16 [ 424.622809][T13506] comedi: valid board names for isa-das08 driver are: [ 424.629657][T13506] isa-das08 [ 424.633023][T13506] das08-pgm [ 424.636237][T13506] das08-pgh [ 424.639512][T13506] das08-pgl [ 424.642764][T13506] das08-aoh [ 424.646044][T13506] das08-aol [ 424.649390][T13506] das08-aom [ 424.652616][T13506] das08/jr-ao [ 424.656004][T13506] das08jr-16-ao [ 424.659624][T13506] pc104-das08 [ 424.663024][T13506] das08jr/16 [ 424.666328][T13506] comedi: valid board names for das16m1 driver are: [ 424.673073][ T5961] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 424.674120][T13506] das16m1 [ 424.689397][T13506] comedi: valid board names for dac02 driver are: [ 424.696183][T13506] dac02 [ 424.699617][T13506] comedi: valid board names for rti802 driver are: [ 424.706349][T13506] rti802 [ 424.712972][T13506] comedi: valid board names for rti800 driver are: [ 424.719916][T13506] rti800 [ 424.723232][T13506] rti815 [ 424.726278][T13506] comedi: valid board names for pcm3724 driver are: [ 424.736534][T13506] pcm3724 [ 424.740553][T13506] comedi: valid board names for pcl818 driver are: [ 424.747211][T13506] pcl818l [ 424.750350][T13506] pcl818h [ 424.753419][T13506] pcl818hd [ 424.756571][T13506] pcl818hg [ 424.759797][T13506] pcl818 [ 424.762756][T13506] pcl718 [ 424.765693][T13506] pcm3718 [ 424.769136][T13506] comedi: valid board names for pcl816 driver are: [ 424.775675][T13506] pcl816 [ 424.778816][T13506] pcl814b [ 424.781890][T13506] comedi: valid board names for pcl812 driver are: [ 424.789490][T13506] pcl812 [ 424.792465][T13506] pcl812pg [ 424.795581][T13506] acl8112pg [ 424.798910][T13506] acl8112dg [ 424.802149][T13506] acl8112hg [ 424.805341][T13506] a821pgl [ 424.808452][T13506] a821pglnda [ 424.811763][T13506] a821pgh [ 424.814833][T13506] a822pgl [ 424.818038][ T5961] usb 4-1: device descriptor read/64, error -71 [ 424.828071][T13506] a822pgh [ 424.831154][T13506] a823pgl [ 424.834238][T13506] a823pgh [ 424.837296][T13506] pcl813 [ 424.855279][T13506] pcl813b [ 424.868084][T13506] acl8113 [ 424.873402][T13506] iso813 [ 424.876631][T13506] acl8216 [ 424.882253][T13506] a826pg [ 424.885263][T13506] comedi: valid board names for pcl730 driver are: [ 424.892984][T13506] pcl730 [ 424.897259][T13506] iso730 [ 424.900478][T13506] acl7130 [ 424.903676][T13506] pcm3730 [ 424.906726][T13506] pcl725 [ 424.909768][T13506] p8r8dio [ 424.912959][T13506] acl7225b [ 424.916193][T13506] p16r16dio [ 424.919699][T13506] pcl733 [ 424.922701][T13506] pcl734 [ 424.925805][T13506] opmm-1616-xt [ 424.929543][T13506] pearl-mm-p [ 424.932845][T13506] ir104-pbf [ 424.936039][T13506] comedi: valid board names for pcl726 driver are: [ 424.943067][T13506] pcl726 [ 424.946058][T13506] pcl727 [ 424.949352][ T5961] usb usb4-port1: attempt power cycle [ 424.954933][T13506] pcl728 [ 424.958818][T13506] acl6126 [ 424.962036][T13506] acl6128 [ 424.965091][T13506] comedi: valid board names for pcl724 driver are: [ 424.971752][T13506] pcl724 [ 424.974789][T13506] pcl722 [ 424.977727][T13506] pcl731 [ 424.980702][T13506] acl7122 [ 424.983736][T13506] acl7124 [ 424.986751][T13506] pet48dio [ 424.989883][T13506] pcmio48 [ 424.992917][T13506] onyx-mm-dio [ 424.996311][T13506] comedi: valid board names for pcl711 driver are: [ 425.002981][T13506] pcl711 [ 425.006118][T13506] pcl711b [ 425.009218][T13506] acl8112hg [ 425.012522][T13506] acl8112dg [ 425.015732][T13506] comedi: valid board names for amplc_pc263 driver are: [ 425.023256][T13506] pc263 [ 425.026145][T13506] comedi: valid board names for amplc_pc236 driver are: [ 425.034580][T13506] pc36at [ 425.037724][T13506] comedi: valid board names for amplc_dio200 driver are: [ 425.045095][T13506] pc212e [ 425.048166][T13506] pc214e [ 425.051136][T13506] pc215e [ 425.054186][T13506] pc218e [ 425.057117][T13506] pc272e [ 425.061177][T13506] comedi: valid board names for comedi_parport driver are: [ 425.068651][T13506] comedi_parport [ 425.072452][T13506] comedi: valid board names for comedi_test driver are: [ 425.079496][T13506] comedi_test [ 425.082889][T13506] comedi: valid board names for comedi_bond driver are: [ 425.089937][T13506] comedi_bond [ 425.308038][ T5961] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 425.328750][ T5961] usb 4-1: device descriptor read/8, error -71 [ 425.578075][ T5961] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 425.610524][ T5961] usb 4-1: device descriptor read/8, error -71 [ 425.627382][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 425.642610][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 425.660267][T13521] kvm: pic: single mode not supported [ 425.663237][T13521] kvm: pic: level sensitive irq not supported [ 425.729725][ T5961] usb usb4-port1: unable to enumerate USB device [ 425.880355][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 425.998061][ T9] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 426.128002][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 426.138564][ T9] usb 6-1: device descriptor read/64, error -71 [ 426.287968][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 426.294690][ T24] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.305848][ T24] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 426.315849][ T24] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.329194][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 426.337541][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 426.346780][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.354893][ T24] usb 5-1: Product: syz [ 426.359100][ T24] usb 5-1: Manufacturer: syz [ 426.363849][ T24] usb 5-1: SerialNumber: syz [ 426.379658][ T9] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 426.518068][ T9] usb 6-1: device descriptor read/64, error -71 [ 426.574734][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 426.629933][ T9] usb usb6-port1: attempt power cycle [ 426.778348][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.787377][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.968544][ T9] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 426.969162][ T5961] usb 5-1: USB disconnect, device number 7 [ 426.983770][ T5961] usblp0: removed [ 426.989029][ T9] usb 6-1: device descriptor read/8, error -71 [ 427.228049][ T9] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 427.248556][ T9] usb 6-1: device descriptor read/8, error -71 [ 427.358241][ T9] usb usb6-port1: unable to enumerate USB device [ 427.468014][ T5872] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 427.622272][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 427.632623][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 427.641492][ T5872] usb 4-1: can't read configurations, error -71 [ 428.144397][T13547] comedi comedi3: comedi_config --init_data is deprecated [ 428.155819][T13547] comedi: valid board names for 8255 driver are: [ 428.162614][T13547] 8255 [ 428.165423][T13547] comedi: valid board names for vmk80xx driver are: [ 428.172447][T13547] vmk80xx [ 428.175518][T13547] comedi: valid board names for usbduxsigma driver are: [ 428.184162][T13547] usbduxsigma [ 428.187565][T13547] comedi: valid board names for usbduxfast driver are: [ 428.194623][T13547] usbduxfast [ 428.198123][T13547] comedi: valid board names for usbdux driver are: [ 428.205888][T13547] usbdux [ 428.209049][T13547] comedi: valid board names for ni6501 driver are: [ 428.215597][T13547] ni6501 [ 428.219389][T13547] comedi: valid board names for dt9812 driver are: [ 428.225937][T13547] dt9812 [ 428.229002][T13547] comedi: valid board names for ni_labpc_cs driver are: [ 428.235991][T13547] ni_labpc_cs [ 428.239498][T13547] comedi: valid board names for ni_daq_700 driver are: [ 428.246478][T13547] ni_daq_700 [ 428.250071][T13547] comedi: valid board names for labpc_pci driver are: [ 428.256992][T13547] labpc_pci [ 428.260606][T13547] comedi: valid board names for adl_pci9118 driver are: [ 428.267723][T13547] pci9118dg [ 428.271319][T13547] pci9118hg [ 428.274563][T13547] pci9118hr [ 428.277768][T13547] comedi: valid board names for 8255_pci driver are: [ 428.284715][T13547] 8255_pci [ 428.288780][T13547] comedi: valid board names for s526 driver are: [ 428.295420][T13547] s526 [ 428.298585][T13547] comedi: valid board names for multiq3 driver are: [ 428.305192][T13547] multiq3 [ 428.308612][T13547] comedi: valid board names for pcmuio driver are: [ 428.315151][T13547] pcmuio48 [ 428.318358][T13547] pcmuio96 [ 428.321561][T13547] comedi: valid board names for pcmmio driver are: [ 428.328131][T13547] pcmmio [ 428.331076][T13547] comedi: valid board names for pcmda12 driver are: [ 428.337732][T13547] pcmda12 [ 428.340936][T13547] comedi: valid board names for pcmad driver are: [ 428.347543][T13547] pcmad12 [ 428.350697][T13547] pcmad16 [ 428.353757][T13547] comedi: valid board names for ni_labpc driver are: [ 428.360535][T13547] lab-pc-1200 [ 428.363999][T13547] lab-pc-1200ai [ 428.367602][T13547] lab-pc+ [ 428.370692][T13547] comedi: valid board names for atmio16 driver are: [ 428.381662][T13547] atmio16 [ 428.384823][T13547] atmio16d [ 428.388119][T13547] comedi: valid board names for ni_at_ao driver are: [ 428.394924][T13547] at-ao-6 [ 428.397101][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 428.398323][T13547] at-ao-10 [ 428.411279][T13547] comedi: valid board names for ni_at_a2150 driver are: [ 428.418582][T13547] ni_at_a2150 [ 428.422096][T13547] comedi: valid board names for adq12b driver are: [ 428.428972][T13547] adq12b [ 428.432028][T13547] comedi: valid board names for mpc624 driver are: [ 428.438772][T13547] mpc624 [ 428.441817][T13547] comedi: valid board names for c6xdigio driver are: [ 428.449943][T13547] c6xdigio [ 428.453130][T13547] comedi: valid board names for aio_iiro_16 driver are: [ 428.460291][T13547] aio_iiro_16 [ 428.463872][T13547] comedi: valid board names for aio_aio12_8 driver are: [ 428.471190][T13547] aio_aio12_8 [ 428.474683][T13547] aio_ai12_8 [ 428.478165][T13547] aio_ao12_4 [ 428.481662][T13547] comedi: valid board names for fl512 driver are: [ 428.488348][T13547] fl512 [ 428.491235][T13547] comedi: valid board names for dmm32at driver are: [ 428.497977][T13547] dmm32at [ 428.501104][T13547] comedi: valid board names for dt282x driver are: [ 428.507718][T13547] dt2821 [ 428.511908][T13547] dt2821-f [ 428.515132][T13547] dt2821-g [ 428.518885][T13547] dt2823 [ 428.521956][T13547] dt2824-pgh [ 428.525253][T13547] dt2824-pgl [ 428.528638][T13547] dt2825 [ 428.531680][T13547] dt2827 [ 428.534661][T13547] dt2828 [ 428.537711][T13547] dt2829 [ 428.540782][T13547] dt21-ez [ 428.543881][T13547] dt23-ez [ 428.547172][T13547] dt24-ez [ 428.550285][T13547] dt24-ez-pgl [ 428.553834][T13547] comedi: valid board names for dt2817 driver are: [ 428.560426][T13547] dt2817 [ 428.563377][T13547] comedi: valid board names for dt2815 driver are: [ 428.570182][T13547] dt2815 [ 428.573131][T13547] comedi: valid board names for dt2814 driver are: [ 428.579677][T13547] dt2814 [ 428.582711][T13547] comedi: valid board names for dt2811 driver are: [ 428.589241][T13547] dt2811-pgh [ 428.592552][T13547] dt2811-pgl [ 428.595843][T13547] comedi: valid board names for dt2801 driver are: [ 428.602617][T13547] dt2801 [ 428.605564][T13547] comedi: valid board names for das6402 driver are: [ 428.613016][T13547] das6402-12 [ 428.616996][T13547] das6402-16 [ 428.620498][T13547] comedi: valid board names for das1800 driver are: [ 428.627140][T13547] das-1701st [ 428.630649][T13547] das-1701st-da [ 428.634209][T13547] das-1702st [ 428.637502][T13547] das-1702st-da [ 428.642710][T13547] das-1702hr [ 428.646158][T13547] das-1702hr-da [ 428.652812][T13547] das-1701ao [ 428.656271][T13547] das-1702ao [ 428.660448][T13547] das-1801st [ 428.663861][T13547] das-1801st-da [ 428.667624][T13547] das-1802st [ 428.671238][T13547] das-1802st-da [ 428.674824][T13547] das-1802hr [ 428.678570][T13547] das-1802hr-da [ 428.682218][T13547] das-1801hc [ 428.685664][T13547] das-1802hc [ 428.690654][T13547] das-1801ao [ 428.694001][T13547] das-1802ao [ 428.697304][T13547] comedi: valid board names for das800 driver are: [ 428.705075][T13547] das-800 [ 428.710438][T13547] cio-das800 [ 428.713760][T13547] das-801 [ 428.720101][T13547] cio-das801 [ 428.723538][T13547] das-802 [ 428.726587][T13547] cio-das802 [ 428.732167][T13547] cio-das802/16 [ 428.736386][T13547] comedi: valid board names for isa-das08 driver are: [ 428.745042][T13547] isa-das08 [ 428.750914][T13547] das08-pgm [ 428.754256][T13547] das08-pgh [ 428.757490][T13547] das08-pgl [ 428.762311][T13547] das08-aoh [ 428.765612][T13547] das08-aol [ 428.771046][T13547] das08-aom [ 428.774526][T13547] das08/jr-ao [ 428.779655][T13547] das08jr-16-ao [ 428.780041][T13555] /dev/rnullb0: Can't open blockdev [ 428.783222][T13547] pc104-das08 [ 428.783235][T13547] das08jr/16 [ 428.783245][T13547] comedi: valid board names for das16m1 driver are: [ 428.783256][T13547] das16m1 [ 428.783265][T13547] comedi: valid board names for dac02 driver are: [ 428.811739][T13547] dac02 [ 428.814632][T13547] comedi: valid board names for rti802 driver are: [ 428.823100][T13547] rti802 [ 428.826083][T13547] comedi: valid board names for rti800 driver are: [ 428.832810][T13547] rti800 [ 428.835803][T13547] rti815 [ 428.838857][T13547] comedi: valid board names for pcm3724 driver are: [ 428.845484][T13547] pcm3724 [ 428.848647][T13547] comedi: valid board names for pcl818 driver are: [ 428.855584][T13547] pcl818l [ 428.860345][T13547] pcl818h [ 428.863411][T13547] pcl818hd [ 428.866537][T13547] pcl818hg [ 428.869767][T13547] pcl818 [ 428.872760][T13547] pcl718 [ 428.875774][T13547] pcm3718 [ 428.879044][T13547] comedi: valid board names for pcl816 driver are: [ 428.885605][T13547] pcl816 [ 428.888980][T13547] pcl814b [ 428.892099][T13547] comedi: valid board names for pcl812 driver are: [ 428.898806][T13547] pcl812 [ 428.901815][T13547] pcl812pg [ 428.905952][T13547] acl8112pg [ 428.909257][T13547] acl8112dg [ 428.912665][T13547] acl8112hg [ 428.915854][T13547] a821pgl [ 428.919050][T13547] a821pglnda [ 428.923595][T13547] a821pgh [ 428.926681][T13547] a822pgl [ 428.929762][T13547] a822pgh [ 428.932881][T13547] a823pgl [ 428.935918][T13547] a823pgh [ 428.939018][T13547] pcl813 [ 428.941989][T13547] pcl813b [ 428.945453][T13547] acl8113 [ 428.948775][T13547] iso813 [ 428.951810][T13547] acl8216 [ 428.954851][T13547] a826pg [ 428.957849][T13547] comedi: valid board names for pcl730 driver are: [ 428.964436][T13547] pcl730 [ 428.967365][T13547] iso730 [ 428.970369][T13547] acl7130 [ 428.973396][T13547] pcm3730 [ 428.976416][T13547] pcl725 [ 428.979483][T13547] p8r8dio [ 428.982522][T13547] acl7225b [ 428.985676][T13547] p16r16dio [ 428.988938][T13547] pcl733 [ 428.991890][T13547] pcl734 [ 428.994836][T13547] opmm-1616-xt [ 428.998375][T13547] pearl-mm-p [ 429.001706][T13547] ir104-pbf [ 429.004930][T13547] comedi: valid board names for pcl726 driver are: [ 429.011525][T13547] pcl726 [ 429.014592][T13547] pcl727 [ 429.017551][T13547] pcl728 [ 429.020607][T13547] acl6126 [ 429.025402][T13547] acl6128 [ 429.028799][T13547] comedi: valid board names for pcl724 driver are: [ 429.035348][T13547] pcl724 [ 429.038502][T13547] pcl722 [ 429.041464][T13547] pcl731 [ 429.044397][T13547] acl7122 [ 429.047446][T13547] acl7124 [ 429.050728][T13547] pet48dio [ 429.053878][T13547] pcmio48 [ 429.056910][T13547] onyx-mm-dio [ 429.060348][T13547] comedi: valid board names for pcl711 driver are: [ 429.066853][T13547] pcl711 [ 429.069857][T13547] pcl711b [ 429.072900][T13547] acl8112hg [ 429.076108][T13547] acl8112dg [ 429.079356][T13547] comedi: valid board names for amplc_pc263 driver are: [ 429.086340][T13547] pc263 [ 429.089241][T13547] comedi: valid board names for amplc_pc236 driver are: [ 429.096199][T13547] pc36at [ 429.099485][T13547] comedi: valid board names for amplc_dio200 driver are: [ 429.106893][T13547] pc212e [ 429.110349][T13547] pc214e [ 429.113308][T13547] pc215e [ 429.116253][T13547] pc218e [ 429.120997][T13547] pc272e [ 429.123960][T13547] comedi: valid board names for comedi_parport driver are: [ 429.131811][T13547] comedi_parport [ 429.135500][T13547] comedi: valid board names for comedi_test driver are: [ 429.142665][ T5961] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 429.143877][T13547] comedi_test [ 429.153878][T13547] comedi: valid board names for comedi_bond driver are: [ 429.160913][T13547] comedi_bond [ 429.301244][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.312826][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.323002][ T5961] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 429.332336][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.342444][ T5961] usb 6-1: config 0 descriptor?? [ 429.598024][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 429.750915][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.752215][ T5961] cp2112 0003:10C4:EA90.0018: item fetching failed at offset 5/7 [ 429.760044][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 429.769458][ T5961] cp2112 0003:10C4:EA90.0018: parse failed [ 429.778821][ T9] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 429.781546][ T5961] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -22 [ 429.791239][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.826236][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.835513][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.845478][ T9] usb 5-1: Product: syz [ 429.850167][ T9] usb 5-1: Manufacturer: syz [ 429.854811][ T9] usb 5-1: SerialNumber: syz [ 429.938009][ T24] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 429.960117][T13560] binder_alloc: 13558: binder_alloc_buf, no vma [ 430.070019][ T9] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 430.077166][ T9] usb 5-1: 0:2 : does not exist [ 430.088286][ T9] usb 5-1: USB disconnect, device number 8 [ 430.096480][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.110291][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 430.114023][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.120433][ T24] usb 4-1: can't read configurations, error -71 [ 430.619716][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 430.968522][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 431.137975][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 431.144625][ T24] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.155720][ T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.166067][ T24] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.179659][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 431.190138][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 431.199259][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.207350][ T24] usb 4-1: Product: syz [ 431.211568][ T24] usb 4-1: Manufacturer: syz [ 431.216280][ T24] usb 4-1: SerialNumber: syz [ 431.436979][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 431.465484][T13580] netlink: 'syz.4.2751': attribute type 10 has an invalid length. [ 431.474198][T13580] bridge0: port 3(netdevsim0) entered blocking state [ 431.482945][T13580] bridge0: port 3(netdevsim0) entered disabled state [ 431.491592][T13580] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 431.501059][T13580] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 431.509981][T13580] bridge0: port 3(netdevsim0) entered blocking state [ 431.516802][T13580] bridge0: port 3(netdevsim0) entered forwarding state [ 431.551159][T13582] /dev/rnullb0: Can't open blockdev [ 431.633847][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.642845][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.820727][ T24] usb 4-1: USB disconnect, device number 81 [ 431.827725][ T24] usblp0: removed [ 431.846673][ T9] usb 6-1: USB disconnect, device number 47 [ 431.929342][ T5961] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 432.088056][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 432.097087][ T5961] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 432.106498][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.114782][ T5961] usb 5-1: Product: syz [ 432.119331][ T5961] usb 5-1: Manufacturer: syz [ 432.123992][ T5961] usb 5-1: SerialNumber: syz [ 432.130006][ T5961] usb 5-1: config 0 descriptor?? [ 432.136773][ T5961] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 432.227990][ T9] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 432.340237][T13585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.352266][T13585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.382715][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 432.392552][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 432.406095][ T9] usb 6-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 432.419313][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.441284][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.458545][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.466673][ T9] usb 6-1: Product: syz [ 432.474106][ T9] usb 6-1: Manufacturer: syz [ 432.481319][ T9] usb 6-1: SerialNumber: syz [ 432.599890][ T5961] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 432.708874][ T9] usb 6-1: unknown interface protocol 0xfc, assuming v1 [ 432.718643][ T9] usb 6-1: 0:2 : does not exist [ 432.729901][ T9] usb 6-1: USB disconnect, device number 48 [ 432.762366][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 432.775084][ T5961] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 432.783540][ T5961] usb 4-1: can't read configurations, error -71 [ 433.497992][ T5897] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 433.649804][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 433.658492][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 433.667197][ T5897] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 433.677653][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.690426][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.699849][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.707987][ T5897] usb 6-1: Product: syz [ 433.712298][ T5897] usb 6-1: Manufacturer: syz [ 433.716939][ T5897] usb 6-1: SerialNumber: syz [ 433.932668][ T5897] usb 6-1: unknown interface protocol 0xfc, assuming v1 [ 433.940097][ T5897] usb 6-1: 0:2 : does not exist [ 433.950487][ T5897] usb 6-1: USB disconnect, device number 49 [ 433.968793][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.020444][T13607] netlink: 'syz.6.2761': attribute type 10 has an invalid length. [ 434.030088][T13607] bridge0: port 3(netdevsim0) entered blocking state [ 434.036908][T13607] bridge0: port 3(netdevsim0) entered disabled state [ 434.047446][T13607] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 434.056822][T13607] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 434.066348][T13607] bridge0: port 3(netdevsim0) entered blocking state [ 434.073256][T13607] bridge0: port 3(netdevsim0) entered forwarding state [ 434.112780][T13610] comedi comedi3: comedi_config --init_data is deprecated [ 434.150639][ T5860] Bluetooth: hci0: unexpected cc 0x0c5a length: 1 < 2 [ 434.157670][ T5860] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 434.172616][T13612] binder: 13611:13612 ioctl 40046210 0 returned -14 [ 434.237658][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2765'. [ 434.518070][ T9] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 434.587171][ T5961] usb 5-1: USB disconnect, device number 9 [ 434.669874][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 434.686235][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 434.695932][ T9] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 434.707359][ T5872] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 434.715042][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.726374][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.735600][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.743673][ T9] usb 4-1: Product: syz [ 434.747843][ T9] usb 4-1: Manufacturer: syz [ 434.752612][ T9] usb 4-1: SerialNumber: syz [ 434.872161][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.883058][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 434.891041][ T5872] usb 6-1: can't read configurations, error -71 [ 434.971894][ T9] usb 4-1: unknown interface protocol 0xfc, assuming v1 [ 434.979102][ T9] usb 4-1: 0:2 : does not exist [ 434.992002][ T9] usb 4-1: USB disconnect, device number 84 [ 435.014118][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.403071][T13636] netlink: 'syz.5.2771': attribute type 10 has an invalid length. [ 435.411320][T13636] bridge0: port 3(netdevsim0) entered blocking state [ 435.418499][T13636] bridge0: port 3(netdevsim0) entered disabled state [ 435.425372][T13636] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 435.435209][T13636] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 435.443750][T13636] bridge0: port 3(netdevsim0) entered blocking state [ 435.450527][T13636] bridge0: port 3(netdevsim0) entered forwarding state [ 435.509498][T13642] binder: 13640:13642 ioctl 4018620d 0 returned -22 [ 435.590801][T13648] /dev/rnullb0: Can't open blockdev [ 435.898177][ T5961] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 435.928037][ T5872] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 436.070955][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.080761][ T5961] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 436.080895][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 436.088964][ T5961] usb 4-1: can't read configurations, error -71 [ 436.099285][ T5872] usb 6-1: not running at top speed; connect to a high speed hub [ 436.111709][ T5872] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 436.122349][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.133291][ T5872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.142899][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.151057][ T5872] usb 6-1: Product: syz [ 436.155252][ T5872] usb 6-1: Manufacturer: syz [ 436.159924][ T5872] usb 6-1: SerialNumber: syz [ 436.374399][ T5872] usb 6-1: unknown interface protocol 0xfc, assuming v1 [ 436.383053][ T5872] usb 6-1: 0:2 : does not exist [ 436.393804][ T5872] usb 6-1: USB disconnect, device number 51 [ 437.137988][ T5961] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 437.292194][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 437.300745][ T5961] usb 4-1: not running at top speed; connect to a high speed hub [ 437.310989][ T5961] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 437.322884][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.334647][ T5961] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.347209][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.355579][ T5961] usb 4-1: Product: syz [ 437.360198][ T5961] usb 4-1: Manufacturer: syz [ 437.365309][ T5961] usb 4-1: SerialNumber: syz [ 437.498037][ T5897] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 437.582402][ T5961] usb 4-1: unknown interface protocol 0xfc, assuming v1 [ 437.589523][ T5961] usb 4-1: 0:2 : does not exist [ 437.600630][ T5961] usb 4-1: USB disconnect, device number 86 [ 437.650819][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 437.659856][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 437.667462][ T5897] usb 5-1: can't read configurations, error -71 [ 438.035812][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.168425][ T5961] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 438.227204][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 438.237588][ T5870] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 438.247071][ T5870] Bluetooth: hci0: Injecting HCI hardware error event [ 438.254322][ T5870] Bluetooth: hci0: hardware error 0x00 [ 438.339469][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 438.346026][ T5961] usb 6-1: config index 0 descriptor too short (expected 208, got 36) [ 438.354359][ T5961] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 438.362619][ T5961] usb 6-1: config 2 has no interface number 0 [ 438.368887][ T5961] usb 6-1: config 2 interface 31 has no altsetting 0 [ 438.377483][ T5961] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 438.387171][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.395705][ T5961] usb 6-1: Product: syz [ 438.400006][ T5961] usb 6-1: Manufacturer: syz [ 438.404625][ T5961] usb 6-1: SerialNumber: syz [ 438.438141][ T5872] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 438.518023][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 438.578057][ T5872] usb 4-1: device descriptor read/64, error -71 [ 438.668162][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 438.675098][ T5897] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.685318][ T5897] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.695354][ T5897] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.708455][ T5897] usb 5-1: config 1 interface 0 has no altsetting 0 [ 438.717239][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 438.726376][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.734611][ T5897] usb 5-1: Product: syz [ 438.738865][ T5897] usb 5-1: Manufacturer: syz [ 438.743669][ T5897] usb 5-1: SerialNumber: syz [ 438.829657][ T5872] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 438.876369][ T5961] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 438.887748][ T5961] usb 6-1: USB disconnect, device number 52 [ 438.953037][ T5897] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 438.968120][ T5872] usb 4-1: device descriptor read/64, error -71 [ 439.088200][ T5872] usb usb4-port1: attempt power cycle [ 439.154926][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.164511][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.258439][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 439.344573][ T5897] usb 5-1: USB disconnect, device number 11 [ 439.351714][ T5897] usblp0: removed [ 439.427998][ T5872] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 439.450334][ T5872] usb 4-1: device descriptor read/8, error -71 [ 439.698006][ T5872] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 439.718585][ T5872] usb 4-1: device descriptor read/8, error -71 [ 439.829601][ T5872] usb usb4-port1: unable to enumerate USB device [ 439.930441][T13713] kvm: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x1 [ 439.939963][T13713] kvm: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x1 [ 439.951947][T13713] kvm: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xbe702112 [ 439.964483][T13713] kvm: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x1 [ 439.973332][T13713] kvm: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x1 [ 439.986062][T13713] kvm_intel: kvm [13712]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x1 [ 440.298022][ T5870] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 440.438154][ T5897] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 440.552427][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 440.568844][ T5872] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 440.600951][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 440.609728][ T5897] usb 5-1: not running at top speed; connect to a high speed hub [ 440.618617][ T5897] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 440.629091][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.640739][ T5897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.650035][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.659640][ T5897] usb 5-1: Product: syz [ 440.663907][ T5897] usb 5-1: Manufacturer: syz [ 440.669143][ T5897] usb 5-1: SerialNumber: syz [ 440.721737][T13720] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2810'. [ 440.734209][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.743638][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 440.751746][ T5872] usb 6-1: can't read configurations, error -71 [ 440.885171][ T5897] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 440.892272][ T5897] usb 5-1: 0:2 : does not exist [ 440.906062][ T5897] usb 5-1: USB disconnect, device number 12 [ 441.269764][T13732] binder: 13730:13732 ioctl 4018620d 0 returned -22 [ 441.798096][ T5872] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 441.970120][ T5872] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 441.980573][ T5872] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.994441][ T5872] usb 6-1: config 2 interface 0 has no altsetting 0 [ 442.002809][ T5872] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 442.012674][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.020760][ T5872] usb 6-1: Product: syz [ 442.025023][ T5872] usb 6-1: Manufacturer: syz [ 442.030873][ T5872] usb 6-1: SerialNumber: syz [ 442.118073][ T5926] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 442.247605][ T5872] usb 6-1: USB disconnect, device number 54 [ 442.292019][T13756] FAULT_INJECTION: forcing a failure. [ 442.292019][T13756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.302940][T13754] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2824'. [ 442.312570][T13756] CPU: 1 UID: 0 PID: 13756 Comm: syz.4.2825 Not tainted syzkaller #0 PREEMPT(full) [ 442.312607][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.312620][T13756] Call Trace: [ 442.312627][T13756] [ 442.312635][T13756] dump_stack_lvl+0x189/0x250 [ 442.312667][T13756] ? __pfx____ratelimit+0x10/0x10 [ 442.312693][T13756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.312719][T13756] ? __pfx__printk+0x10/0x10 [ 442.312752][T13756] ? __might_fault+0xb0/0x130 [ 442.312774][T13756] ? policy_nodemask+0x27c/0x720 [ 442.312797][T13756] ? rcu_is_watching+0x15/0xb0 [ 442.312822][T13756] should_fail_ex+0x414/0x560 [ 442.312843][T13756] _copy_from_iter+0x1de/0x1790 [ 442.312865][T13756] ? __might_fault+0xb0/0x130 [ 442.312884][T13756] ? __might_fault+0xcc/0x130 [ 442.312905][T13756] ? _copy_from_iter+0x24f/0x1790 [ 442.312929][T13756] ? __pfx__copy_from_iter+0x10/0x10 [ 442.312950][T13756] ? sock_alloc_send_pskb+0x875/0x990 [ 442.312976][T13756] ? __pfx__copy_from_iter+0x10/0x10 [ 442.312998][T13756] ? page_copy_sane+0x16a/0x280 [ 442.313021][T13756] copy_page_from_iter+0xdd/0x170 [ 442.313046][T13756] skb_copy_datagram_from_iter+0x306/0x720 [ 442.313072][T13756] tun_get_user+0x1691/0x3e20 [ 442.313092][T13756] ? rcu_is_watching+0x15/0xb0 [ 442.313116][T13756] ? lock_release+0x4b/0x3e0 [ 442.313140][T13756] ? aa_file_perm+0x44d/0x1550 [ 442.313159][T13756] ? __pfx_tun_get_user+0x10/0x10 [ 442.313175][T13756] ? _parse_integer_limit+0x1ae/0x1f0 [ 442.313197][T13756] ? kstrtoull+0x12f/0x1d0 [ 442.313219][T13756] ? ref_tracker_alloc+0x318/0x460 [ 442.313238][T13756] ? get_pid_task+0x20/0x1f0 [ 442.313256][T13756] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 442.313277][T13756] ? tun_get+0x1c/0x2f0 [ 442.313292][T13756] ? tun_get+0x1c/0x2f0 [ 442.313306][T13756] ? rcu_is_watching+0x15/0xb0 [ 442.313329][T13756] ? tun_get+0x1c/0x2f0 [ 442.313343][T13756] ? lock_release+0x4b/0x3e0 [ 442.313363][T13756] ? common_file_perm+0x1b5/0x230 [ 442.313381][T13756] ? tun_get+0x1c/0x2f0 [ 442.313399][T13756] tun_chr_write_iter+0x113/0x200 [ 442.313426][T13756] vfs_write+0x5c9/0xb30 [ 442.313450][T13756] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 442.313477][T13756] ? __pfx_vfs_write+0x10/0x10 [ 442.313502][T13756] ? __fget_files+0x2a/0x420 [ 442.313531][T13756] ksys_write+0x145/0x250 [ 442.313553][T13756] ? __pfx_ksys_write+0x10/0x10 [ 442.313574][T13756] ? rcu_is_watching+0x15/0xb0 [ 442.313599][T13756] ? rcu_is_watching+0x15/0xb0 [ 442.313623][T13756] do_syscall_64+0xfa/0x3b0 [ 442.313641][T13756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.313659][T13756] ? clear_bhb_loop+0x60/0xb0 [ 442.313678][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.313695][T13756] RIP: 0033:0x7f07bf78ebe9 [ 442.313712][T13756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.313727][T13756] RSP: 002b:00007f07c0523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.313757][T13756] RAX: ffffffffffffffda RBX: 00007f07bf9b5fa0 RCX: 00007f07bf78ebe9 [ 442.313771][T13756] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000004 [ 442.313783][T13756] RBP: 00007f07c0523090 R08: 0000000000000000 R09: 0000000000000000 [ 442.313795][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.313806][T13756] R13: 00007f07bf9b6038 R14: 00007f07bf9b5fa0 R15: 00007fff7ab87578 [ 442.313825][T13756] [ 442.619592][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.690253][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.701005][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 442.708859][ T5926] usb 4-1: can't read configurations, error -71 [ 442.874488][T13766] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2830'. [ 443.047994][ T5897] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 443.199794][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.208616][ T5897] usb 5-1: not running at top speed; connect to a high speed hub [ 443.217760][ T5897] usb 5-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 443.228235][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.240253][ T5897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.249469][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.257985][ T5897] usb 5-1: Product: syz [ 443.262193][ T5897] usb 5-1: Manufacturer: syz [ 443.266809][ T5897] usb 5-1: SerialNumber: syz [ 443.482289][ T5897] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 443.489428][ T5897] usb 5-1: 0:2 : does not exist [ 443.499588][ T5897] usb 5-1: USB disconnect, device number 13 [ 443.514882][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.908161][ T5872] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 443.964993][T13783] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 444.072362][T13777] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2841'. [ 444.316243][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'. [ 444.358219][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 444.367424][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 444.387970][ T5872] usb 6-1: can't read configurations, error -71 [ 444.888253][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 445.051461][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 445.059835][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 445.070123][ T9] usb 5-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 445.080493][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.091999][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.102125][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.110223][ T9] usb 5-1: Product: syz [ 445.114412][ T9] usb 5-1: Manufacturer: syz [ 445.119305][ T9] usb 5-1: SerialNumber: syz [ 445.128109][ T5897] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 445.218086][ T5872] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 445.278048][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 445.285262][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.295622][ T5897] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 445.304978][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.314812][ T5897] usb 4-1: config 0 descriptor?? [ 445.334378][ T9] usb 5-1: unknown interface protocol 0xfc, assuming v1 [ 445.341825][ T9] usb 5-1: 0:2 : does not exist [ 445.353639][ T9] usb 5-1: USB disconnect, device number 14 [ 445.381326][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 445.389096][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 445.403046][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.419475][ T5872] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.428778][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.436911][ T5872] usb 6-1: Product: syz [ 445.441214][ T5872] usb 6-1: Manufacturer: syz [ 445.445840][ T5872] usb 6-1: SerialNumber: syz [ 445.452136][ T5872] usb 6-1: config 0 descriptor?? [ 445.459849][ T5872] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 445.469272][ T5872] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 445.876435][T13827] /dev/rnullb0: Can't open blockdev [ 446.071031][ T5872] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 446.082420][ T5872] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 446.178094][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 446.340160][T13829] netlink: 'syz.4.2859': attribute type 72 has an invalid length. [ 446.353608][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 446.370421][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 446.379358][ T9] usb 5-1: can't read configurations, error -71 [ 446.695414][T13822] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 446.703904][T13822] /dev/rnullb0: Can't open blockdev [ 447.013161][T13835] xt_limit: Overflow, try lower: 271964/0 [ 447.118949][ T5872] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 447.320334][ T5872] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 447.336418][ T5872] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 447.368280][ T5872] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 447.392645][ T5872] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 447.423113][ T5872] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 447.438375][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.444793][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.458026][ T5872] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 447.469479][ T5872] usb 6-1: USB disconnect, device number 56 [ 447.787968][ T979] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 447.951229][T13851] netlink: 'syz.4.2868': attribute type 72 has an invalid length. [ 447.991556][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 448.020577][ T979] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 448.058112][ T979] usb 5-1: can't read configurations, error -71 [ 448.207955][ T6854] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 448.367975][ T6854] usb 6-1: Using ep0 maxpacket: 32 [ 448.374897][ T6854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 448.387397][ T6854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 448.401607][ T6854] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 448.411358][ T6854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.419796][ T6854] usb 6-1: Product: syz [ 448.424136][ T6854] usb 6-1: Manufacturer: syz [ 448.429205][ T6854] usb 6-1: SerialNumber: syz [ 448.444848][ T6854] usb 6-1: config 0 descriptor?? [ 448.462536][ T6854] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 448.708808][T13853] netlink: 'syz.5.2869': attribute type 4 has an invalid length. [ 448.747269][T13853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.756508][T13853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.868710][ T13] usb 6-1: Failed to submit usb control message: -71 [ 448.868973][ T6854] usb 6-1: USB disconnect, device number 57 [ 448.875472][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 448.891873][ T13] usb 6-1: unable to get target info from device [ 448.902072][ T13] usb 6-1: could not get target info (-71) [ 448.909692][ T13] usb 6-1: could not probe fw (-71) [ 449.346366][T13824] kexec: Could not allocate control_code_buffer [ 449.374734][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 449.385636][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 449.405193][ T5897] usb 4-1: USB disconnect, device number 93 [ 449.480997][T13868] /dev/rnullb0: Can't open blockdev [ 449.553853][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2875'. [ 449.586563][T13874] netlink: 'syz.5.2876': attribute type 10 has an invalid length. [ 449.596120][T13874] team0: Device ipvlan1 failed to register rx_handler [ 449.797982][ T979] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 449.948162][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 449.955549][ T979] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.965500][ T979] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 449.975467][ T979] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.988884][ T979] usb 5-1: config 1 interface 0 has no altsetting 0 [ 449.997227][ T979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 450.006498][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.014699][ T979] usb 5-1: Product: syz [ 450.020157][ T979] usb 5-1: Manufacturer: syz [ 450.024785][ T979] usb 5-1: SerialNumber: syz [ 450.028019][ T5897] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 450.190012][T13881] netlink: 'syz.5.2879': attribute type 72 has an invalid length. [ 450.200441][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.210508][ T5897] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 450.218942][ T5897] usb 6-1: can't read configurations, error -71 [ 450.248230][ T979] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 450.449995][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.462337][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.661378][ T5872] usb 5-1: USB disconnect, device number 19 [ 450.669098][ T5872] usblp0: removed [ 451.198793][T13898] netlink: 'syz.4.2885': attribute type 10 has an invalid length. [ 451.211553][T13898] team0: Device ipvlan1 failed to register rx_handler [ 451.618449][ T9] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 451.820875][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 451.842019][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 451.842226][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.857834][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.860180][ T9] usb 4-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 451.878305][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.890522][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.898833][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.906122][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.955271][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.985600][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.999664][T13916] vxcan1 speed is unknown, defaulting to 1000 [ 452.007253][ T9] usb 4-1: Product: syz [ 452.016494][ T9] usb 4-1: Manufacturer: syz [ 452.026798][ T9] usb 4-1: SerialNumber: syz [ 452.198258][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2894'. [ 452.257315][ T9] usb 4-1: unknown interface protocol 0xfc, assuming v1 [ 452.266983][ T9] usb 4-1: 0:2 : does not exist [ 452.287442][ T9] usb 4-1: USB disconnect, device number 94 [ 452.300622][T13916] chnl_net:caif_netlink_parms(): no params data found [ 452.320341][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.370025][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.378957][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.386316][T13916] bridge_slave_0: entered allmulticast mode [ 452.394007][T13916] bridge_slave_0: entered promiscuous mode [ 452.402264][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.409524][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.416932][T13916] bridge_slave_1: entered allmulticast mode [ 452.423902][T13916] bridge_slave_1: entered promiscuous mode [ 452.444262][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.453433][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 452.455730][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.486295][T13916] team0: Port device team_slave_0 added [ 452.494208][T13916] team0: Port device team_slave_1 added [ 452.512901][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.520129][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.547787][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.559849][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.566833][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.594298][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.617953][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 452.624629][ T43] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.634744][ T43] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.644754][ T43] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.651058][T13916] hsr_slave_0: entered promiscuous mode [ 452.658311][ T43] usb 6-1: config 1 interface 0 has no altsetting 0 [ 452.668062][T13916] hsr_slave_1: entered promiscuous mode [ 452.673005][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 452.676823][T13916] debugfs: 'hsr0' already exists in 'hsr' [ 452.685909][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.685937][ T43] usb 6-1: Product: syz [ 452.685953][ T43] usb 6-1: Manufacturer: syz [ 452.685970][ T43] usb 6-1: SerialNumber: syz [ 452.714454][T13916] Cannot create hsr debugfs directory [ 452.816556][T13916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.870992][T13916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.900352][ T43] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 452.920635][T13916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.974407][T13916] bridge0: port 3(netdevsim0) entered disabled state [ 452.982791][T13916] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 452.992300][T13916] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 453.001233][T13916] bridge0: port 3(netdevsim0) entered disabled state [ 453.012784][T13916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.068149][ T5897] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 453.089214][T13916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.099029][T13916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.110505][T13916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.112600][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.126398][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.128884][T13916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.206721][T13916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.228553][ T5897] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 453.237161][T13916] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.246433][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.264314][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.265048][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.275818][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.282636][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.305782][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.308189][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.313070][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.340371][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.369045][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.370188][ T9] usb 6-1: USB disconnect, device number 60 [ 453.389997][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.392516][ T9] usblp0: removed [ 453.418394][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.430248][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.440240][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.449322][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.461804][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.473979][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.484648][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.500619][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.509439][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.520077][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.532406][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.541124][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.543541][T13916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.553029][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.568780][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.576480][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.595129][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 453.658202][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.692145][ T5897] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 453.709834][ T5897] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 453.719394][ T5897] usb 4-1: Product: syz [ 453.723591][ T5897] usb 4-1: Manufacturer: syz [ 453.729698][ T5897] usb 4-1: SerialNumber: syz [ 453.745025][ T5897] usb 4-1: config 0 descriptor?? [ 453.757277][ T5897] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 453.762115][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2898'. [ 453.903485][T13948] netlink: 'syz.6.2898': attribute type 1 has an invalid length. [ 453.931709][T13916] veth0_vlan: entered promiscuous mode [ 453.952037][T13916] veth1_vlan: entered promiscuous mode [ 453.978109][ T5870] Bluetooth: hci1: command tx timeout [ 454.007125][T13916] veth0_macvtap: entered promiscuous mode [ 454.030808][T13916] veth1_macvtap: entered promiscuous mode [ 454.043197][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 454.044007][ T9] usb 4-1: USB disconnect, device number 95 [ 454.070976][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 454.080444][T13916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.107845][T13916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.152618][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.175882][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.190309][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.221668][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.242605][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.283435][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.336160][T13927] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 454.347282][T13927] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 454.355557][T13927] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 454.364091][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.382619][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.388518][T13927] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 454.603586][T13973] fuse: Unknown parameter '0x00000000000000160x0000000000000014' [ 454.672615][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 454.748150][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 454.919426][T13967] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2892'. [ 454.930053][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.941315][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 454.949083][ T9] usb 5-1: can't read configurations, error -71 [ 455.045904][ T5870] Bluetooth: hci2: Malformed Event: 0x02 [ 455.364744][T13996] 9p: Bad value for 'rfdno' [ 455.368714][T13995] syzkaller1: entered promiscuous mode [ 455.374883][T13995] syzkaller1: entered allmulticast mode [ 455.539917][T14003] tmpfs: Invalid uid '0x00000000ffffffff' [ 455.596824][T14007] syzkaller1: entered promiscuous mode [ 455.603783][T14007] syzkaller1: entered allmulticast mode [ 455.613149][T14007] FAULT_INJECTION: forcing a failure. [ 455.613149][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.626438][T14007] CPU: 1 UID: 0 PID: 14007 Comm: syz.5.2918 Not tainted syzkaller #0 PREEMPT(full) [ 455.626466][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.626479][T14007] Call Trace: [ 455.626489][T14007] [ 455.626494][T14007] dump_stack_lvl+0x189/0x250 [ 455.626516][T14007] ? __pfx____ratelimit+0x10/0x10 [ 455.626548][T14007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.626564][T14007] ? __pfx__printk+0x10/0x10 [ 455.626579][T14007] ? __might_fault+0xb0/0x130 [ 455.626595][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626611][T14007] should_fail_ex+0x414/0x560 [ 455.626625][T14007] _copy_from_iter+0x1de/0x1790 [ 455.626640][T14007] ? mntput_no_expire+0xb9/0x9d0 [ 455.626655][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626670][T14007] ? unwind_next_frame+0xa5/0x2390 [ 455.626681][T14007] ? unwind_next_frame+0xa5/0x2390 [ 455.626691][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626706][T14007] ? __pfx__copy_from_iter+0x10/0x10 [ 455.626720][T14007] ? is_bpf_text_address+0x26/0x2b0 [ 455.626734][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626750][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626767][T14007] tun_get_user+0x219/0x3e20 [ 455.626780][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626794][T14007] ? lock_release+0x4b/0x3e0 [ 455.626810][T14007] ? aa_file_perm+0x44d/0x1550 [ 455.626822][T14007] ? __pfx_tun_get_user+0x10/0x10 [ 455.626833][T14007] ? _parse_integer_limit+0x1ae/0x1f0 [ 455.626848][T14007] ? kstrtoull+0x12f/0x1d0 [ 455.626861][T14007] ? ref_tracker_alloc+0x318/0x460 [ 455.626874][T14007] ? get_pid_task+0x20/0x1f0 [ 455.626886][T14007] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 455.626899][T14007] ? tun_get+0x1c/0x2f0 [ 455.626909][T14007] ? tun_get+0x1c/0x2f0 [ 455.626919][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.626933][T14007] ? tun_get+0x1c/0x2f0 [ 455.626942][T14007] ? lock_release+0x4b/0x3e0 [ 455.626955][T14007] ? common_file_perm+0x1b5/0x230 [ 455.626967][T14007] ? tun_get+0x1c/0x2f0 [ 455.626978][T14007] tun_chr_write_iter+0x113/0x200 [ 455.626996][T14007] vfs_write+0x5c9/0xb30 [ 455.627012][T14007] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 455.627029][T14007] ? __pfx_vfs_write+0x10/0x10 [ 455.627052][T14007] ? __fget_files+0x2a/0x420 [ 455.627082][T14007] ksys_write+0x145/0x250 [ 455.627106][T14007] ? __pfx_ksys_write+0x10/0x10 [ 455.627128][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.627151][T14007] ? rcu_is_watching+0x15/0xb0 [ 455.627167][T14007] do_syscall_64+0xfa/0x3b0 [ 455.627179][T14007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.627190][T14007] ? clear_bhb_loop+0x60/0xb0 [ 455.627203][T14007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.627215][T14007] RIP: 0033:0x7f490838ebe9 [ 455.627233][T14007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.627249][T14007] RSP: 002b:00007f49091a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.627269][T14007] RAX: ffffffffffffffda RBX: 00007f49085b5fa0 RCX: 00007f490838ebe9 [ 455.627283][T14007] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000003 [ 455.627296][T14007] RBP: 00007f49091a1090 R08: 0000000000000000 R09: 0000000000000000 [ 455.627308][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.627319][T14007] R13: 00007f49085b6038 R14: 00007f49085b5fa0 R15: 00007ffd85a2bd88 [ 455.627331][T14007] [ 456.049615][T14009] syzkaller1: entered promiscuous mode [ 456.055143][T14009] syzkaller1: entered allmulticast mode [ 456.061097][ T5870] Bluetooth: hci1: command tx timeout [ 456.438061][ T9] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 456.577965][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 456.590266][T14016] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2922'. [ 456.602549][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 456.612583][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 456.620499][ T9] usb 6-1: can't read configurations, error -71 [ 456.715844][T14022] FAULT_INJECTION: forcing a failure. [ 456.715844][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.729603][ T5897] usb 5-1: device descriptor read/64, error -71 [ 456.730693][T14022] CPU: 0 UID: 0 PID: 14022 Comm: syz.3.2925 Not tainted syzkaller #0 PREEMPT(full) [ 456.730719][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.730730][T14022] Call Trace: [ 456.730737][T14022] [ 456.730745][T14022] dump_stack_lvl+0x189/0x250 [ 456.730777][T14022] ? __pfx____ratelimit+0x10/0x10 [ 456.730803][T14022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.730828][T14022] ? __pfx__printk+0x10/0x10 [ 456.730850][T14022] ? __might_fault+0xb0/0x130 [ 456.730873][T14022] ? rcu_is_watching+0x15/0xb0 [ 456.730899][T14022] should_fail_ex+0x414/0x560 [ 456.730920][T14022] _copy_from_user+0x2d/0xb0 [ 456.730945][T14022] ucma_resolve_addr+0xa8/0x270 [ 456.730964][T14022] ? aa_file_perm+0x13a/0x1550 [ 456.730983][T14022] ? aa_file_perm+0x44d/0x1550 [ 456.731001][T14022] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 456.731027][T14022] ? rcu_is_watching+0x15/0xb0 [ 456.731050][T14022] ? lock_release+0x4b/0x3e0 [ 456.731071][T14022] ? __might_fault+0xb0/0x130 [ 456.731090][T14022] ? __might_fault+0xcc/0x130 [ 456.731110][T14022] ucma_write+0x249/0x2e0 [ 456.731127][T14022] ? __pfx_ucma_write+0x10/0x10 [ 456.731142][T14022] ? security_file_permission+0x75/0x290 [ 456.731165][T14022] ? rw_verify_area+0x255/0x4d0 [ 456.731186][T14022] ? __pfx_ucma_write+0x10/0x10 [ 456.731202][T14022] vfs_write+0x27b/0xb30 [ 456.731226][T14022] ? __pfx_vfs_write+0x10/0x10 [ 456.731248][T14022] ? lock_release+0x4b/0x3e0 [ 456.731269][T14022] ? __fget_files+0x2a/0x420 [ 456.731294][T14022] ? __fget_files+0x3a0/0x420 [ 456.731318][T14022] ? __fget_files+0x2a/0x420 [ 456.731345][T14022] ksys_write+0x145/0x250 [ 456.731368][T14022] ? __pfx_ksys_write+0x10/0x10 [ 456.731392][T14022] ? rcu_is_watching+0x15/0xb0 [ 456.731417][T14022] do_syscall_64+0xfa/0x3b0 [ 456.731434][T14022] ? rcu_is_watching+0x15/0xb0 [ 456.731456][T14022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.731481][T14022] ? clear_bhb_loop+0x60/0xb0 [ 456.731501][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.731519][T14022] RIP: 0033:0x7f1ffbd8ebe9 [ 456.731535][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.731551][T14022] RSP: 002b:00007f1ff9ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.731572][T14022] RAX: ffffffffffffffda RBX: 00007f1ffbfb5fa0 RCX: 00007f1ffbd8ebe9 [ 456.731586][T14022] RDX: 0000000000000118 RSI: 00002000000005c0 RDI: 0000000000000003 [ 456.731598][T14022] RBP: 00007f1ff9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.731609][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.731620][T14022] R13: 00007f1ffbfb6038 R14: 00007f1ffbfb5fa0 R15: 00007fff579f8f28 [ 456.731639][T14022] [ 457.249048][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 457.390951][ T5897] usb 5-1: device descriptor read/64, error -71 [ 457.498784][ T5897] usb usb5-port1: attempt power cycle [ 457.758070][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 457.838310][ T5897] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 457.868690][ T5897] usb 5-1: device descriptor read/8, error -71 [ 457.938029][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 457.946579][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.961794][ T9] usb 6-1: config 250 has an invalid interface number: 88 but max is 0 [ 457.971952][ T9] usb 6-1: config 250 has no interface number 0 [ 457.976506][T14079] JFS: discard option not supported on device [ 457.978777][ T9] usb 6-1: config 250 interface 88 has no altsetting 0 [ 457.980733][ T9] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 457.987102][T14079] Mount JFS Failure: -22 [ 457.993776][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.002706][T14079] jfs_mount failed w/return code = -22 [ 458.014052][ T9] usb 6-1: Product: syz [ 458.024862][ T9] usb 6-1: Manufacturer: syz [ 458.029926][ T9] usb 6-1: SerialNumber: syz [ 458.108057][ T5897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 458.128603][ T5897] usb 5-1: device descriptor read/8, error -71 [ 458.140963][ T5870] Bluetooth: hci1: command tx timeout [ 458.239607][ T5897] usb usb5-port1: unable to enumerate USB device [ 458.247841][ T9] qmi_wwan 6-1:250.88: bogus CDC Union: master=0, slave=0 [ 458.256521][ T9] qmi_wwan 6-1:250.88: probe with driver qmi_wwan failed with error -22 [ 458.272060][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 458.273564][ T9] usb 6-1: USB disconnect, device number 63 [ 458.538411][ T5897] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 458.688041][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 458.694709][ T5897] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 458.705088][ T5897] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 458.715089][ T5897] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.729137][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 458.738480][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 458.747616][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.755974][ T5897] usb 4-1: Product: syz [ 458.760244][ T5897] usb 4-1: Manufacturer: syz [ 458.764948][ T5897] usb 4-1: SerialNumber: syz [ 458.847552][T14094] 9p: Could not find request transport: rd00000°04e23 [ 458.978649][ T5897] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 459.162800][T14102] syz.5.2946 (14102): drop_caches: 2 [ 459.175964][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.185828][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.379815][ T5897] usb 4-1: USB disconnect, device number 96 [ 459.390730][ T5897] usblp0: removed [ 459.446882][T14114] hfs: can't find a HFS filesystem on dev rnullb0 [ 459.847966][ T5926] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 459.943476][T14124] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 459.952389][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2955'. [ 459.978083][ T5926] usb 5-1: device descriptor read/64, error -71 [ 460.218088][ T5870] Bluetooth: hci1: command tx timeout [ 460.228877][ T5926] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 460.317698][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 460.319564][T14145] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.339428][T14145] exFAT-fs (loop5): unable to read boot sector [ 460.346126][T14145] exFAT-fs (loop5): failed to read boot sector [ 460.353322][T14145] exFAT-fs (loop5): failed to recognize exfat type [ 460.408307][ T5926] usb 5-1: device descriptor read/64, error -71 [ 460.538547][ T5926] usb usb5-port1: attempt power cycle [ 460.567981][ T5897] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 460.718008][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 460.724591][ T5897] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.734917][ T5897] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 460.745000][ T5897] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.758147][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 460.766255][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 460.775984][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.784172][ T5897] usb 4-1: Product: syz [ 460.788411][ T5897] usb 4-1: Manufacturer: syz [ 460.793031][ T5897] usb 4-1: SerialNumber: syz [ 460.832669][T14153] nbd: device at index 6 is going down [ 460.878106][ T5926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 460.900926][ T5926] usb 5-1: device descriptor read/8, error -71 [ 461.007043][ T5897] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 461.138326][ T5926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 461.159122][ T5926] usb 5-1: device descriptor read/8, error -71 [ 461.209124][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.217821][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.282405][ T5926] usb usb5-port1: unable to enumerate USB device [ 461.405579][ T43] usb 4-1: USB disconnect, device number 97 [ 461.426166][ T43] usblp0: removed [ 462.029178][ T6854] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 462.178070][ T6854] usb 6-1: Using ep0 maxpacket: 32 [ 462.183396][ T43] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 462.192956][ T6854] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 462.201831][ T6854] usb 6-1: config 0 has no interface number 0 [ 462.209738][ T6854] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 462.219679][ T6854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.227701][ T6854] usb 6-1: Product: syz [ 462.231931][ T6854] usb 6-1: Manufacturer: syz [ 462.236632][ T6854] usb 6-1: SerialNumber: syz [ 462.242581][ T6854] usb 6-1: config 0 descriptor?? [ 462.251928][ T6854] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 462.363713][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.372651][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 462.380593][ T43] usb 4-1: can't read configurations, error -71 [ 462.454369][ T6854] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 462.466073][ T6854] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 462.859016][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 462.866919][ T6854] usb 6-1: USB disconnect, device number 64 [ 462.879896][ T6854] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 462.895102][ T6854] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 462.915317][ T6854] quatech2 6-1:0.51: device disconnected [ 462.968176][ T5926] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 462.982662][T14184] FAULT_INJECTION: forcing a failure. [ 462.982662][T14184] name failslab, interval 1, probability 0, space 0, times 0 [ 462.996699][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.3.2982 Not tainted syzkaller #0 PREEMPT(full) [ 462.996719][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.996727][T14184] Call Trace: [ 462.996732][T14184] [ 462.996738][T14184] dump_stack_lvl+0x189/0x250 [ 462.996760][T14184] ? __pfx____ratelimit+0x10/0x10 [ 462.996778][T14184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.996794][T14184] ? __pfx__printk+0x10/0x10 [ 462.996812][T14184] should_fail_ex+0x414/0x560 [ 462.996826][T14184] should_failslab+0xa8/0x100 [ 462.996841][T14184] kmem_cache_alloc_noprof+0x73/0x3c0 [ 462.996854][T14184] ? skb_clone+0x212/0x3a0 [ 462.996876][T14184] skb_clone+0x212/0x3a0 [ 462.996890][T14184] __netlink_deliver_tap+0x404/0x850 [ 462.996904][T14184] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.996915][T14184] netlink_deliver_tap+0x19c/0x1b0 [ 462.996926][T14184] netlink_unicast+0x7fa/0x9e0 [ 462.996943][T14184] ? __pfx_netlink_unicast+0x10/0x10 [ 462.996959][T14184] ? netlink_sendmsg+0x642/0xb30 [ 462.996969][T14184] ? skb_put+0x11b/0x210 [ 462.996981][T14184] netlink_sendmsg+0x805/0xb30 [ 462.996994][T14184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.997006][T14184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.997018][T14184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.997035][T14184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.997046][T14184] __sock_sendmsg+0x21c/0x270 [ 462.997062][T14184] ____sys_sendmsg+0x505/0x830 [ 462.997075][T14184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.997090][T14184] ? import_iovec+0x74/0xa0 [ 462.997107][T14184] ___sys_sendmsg+0x21f/0x2a0 [ 462.997120][T14184] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.997139][T14184] ? __fget_files+0x2a/0x420 [ 462.997156][T14184] ? __fget_files+0x3a0/0x420 [ 462.997174][T14184] __x64_sys_sendmsg+0x19b/0x260 [ 462.997187][T14184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.997202][T14184] ? __pfx_ksys_write+0x10/0x10 [ 462.997224][T14184] ? rcu_is_watching+0x15/0xb0 [ 462.997241][T14184] do_syscall_64+0xfa/0x3b0 [ 462.997253][T14184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.997265][T14184] ? clear_bhb_loop+0x60/0xb0 [ 462.997277][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.997289][T14184] RIP: 0033:0x7f1ffbd8ebe9 [ 462.997301][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.997311][T14184] RSP: 002b:00007f1ff9ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.997326][T14184] RAX: ffffffffffffffda RBX: 00007f1ffbfb5fa0 RCX: 00007f1ffbd8ebe9 [ 462.997335][T14184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 462.997343][T14184] RBP: 00007f1ff9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.997351][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.997358][T14184] R13: 00007f1ffbfb6038 R14: 00007f1ffbfb5fa0 R15: 00007fff579f8f28 [ 462.997371][T14184] [ 463.284962][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.355535][T14188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 463.368024][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 463.378609][ T5926] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 463.386772][ T5926] usb 5-1: config 0 has no interface number 0 [ 463.393372][ T5926] usb 5-1: config 0 interface 62 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 463.407152][ T5926] usb 5-1: config 0 interface 62 has no altsetting 0 [ 463.416372][ T5926] usb 5-1: New USB device found, idVendor=0003, idProduct=d501, bcdDevice=23.50 [ 463.425862][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 463.435523][ T5926] usb 5-1: Product: syz [ 463.439892][ T5926] usb 5-1: Manufacturer: syz [ 463.444505][ T5926] usb 5-1: SerialNumber: syz [ 463.450995][ T5926] usb 5-1: config 0 descriptor?? [ 463.695172][ T5926] usb 5-1: USB disconnect, device number 30 [ 463.697958][ T43] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 463.858146][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 463.865454][ T43] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.875554][ T43] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.885632][ T43] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.900514][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 463.910720][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 463.919827][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.927975][ T43] usb 4-1: Product: syz [ 463.932166][ T43] usb 4-1: Manufacturer: syz [ 463.936785][ T43] usb 4-1: SerialNumber: syz [ 464.149709][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 464.355858][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.372232][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.498066][ T5926] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 464.572779][ T9] usb 4-1: USB disconnect, device number 100 [ 464.590478][ T9] usblp0: removed [ 464.670859][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.692148][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 464.702316][ T5926] usb 5-1: can't read configurations, error -71 [ 465.360242][T14215] overlayfs: missing 'workdir' [ 465.529889][ T6854] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 465.688009][ T6854] usb 6-1: Using ep0 maxpacket: 16 [ 465.694967][ T6854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.705966][ T6854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.716167][ T6854] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 465.725425][ T6854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.737258][ T6854] usb 6-1: config 0 descriptor?? [ 465.868084][ T5926] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 466.022039][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.031180][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 466.039008][ T5926] usb 5-1: can't read configurations, error -71 [ 466.150810][ T6854] hid_parser_main: 8 callbacks suppressed [ 466.150828][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.163794][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.171025][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.178130][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.185131][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.192345][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.199862][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.207381][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.214503][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.221721][ T6854] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 466.231077][ T6854] elecom 0003:056E:00E6.0019: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.5-1/input0 [ 466.356474][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'. [ 466.366896][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'. [ 466.378622][T14214] Bluetooth: hci4: Frame reassembly failed (-84) [ 466.386573][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'. [ 467.178064][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 467.227968][ T5926] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 467.327982][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 467.335338][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 467.344861][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.357545][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 467.364808][ T9] pvrusb2: ********** [ 467.369048][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 467.379275][ T9] pvrusb2: Important functionality might not be entirely working. [ 467.387180][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 467.398675][ T9] pvrusb2: ********** [ 467.403984][ T5926] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 467.413236][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.425688][ T5926] usb 5-1: config 0 descriptor?? [ 467.436848][ T5926] usb 5-1: selecting invalid altsetting 3 [ 467.442784][ T5926] comedi comedi5: could not set alternate setting 3 in high speed [ 467.450743][ T5926] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 467.461755][ T5926] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 467.556860][ T2346] pvrusb2: Invalid write control endpoint [ 467.586575][ T2346] pvrusb2: Invalid write control endpoint [ 467.592483][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 467.602296][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 467.610290][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 467.621539][ T2346] pvrusb2: Device being rendered inoperable [ 467.627599][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 467.635469][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 467.640910][T14238] syz.4.3001 (14238): drop_caches: 2 [ 467.643887][ T2346] pvrusb2: Attached sub-driver cx25840 [ 467.654025][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 467.654638][ T9] usb 5-1: USB disconnect, device number 35 [ 467.673048][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 467.760944][T14240] pvrusb2: Attempted to execute control transfer when device not ok [ 467.783816][ T979] usb 4-1: USB disconnect, device number 101 [ 468.378156][ T5860] Bluetooth: hci4: command 0x1003 tx timeout [ 468.384376][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 468.400605][ T979] usb 6-1: USB disconnect, device number 65 [ 468.575436][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 468.797956][ T979] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 468.818055][ T6854] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 468.951728][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.962427][ T979] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 468.970506][ T979] usb 6-1: can't read configurations, error -71 [ 468.978694][ T6854] usb 4-1: Using ep0 maxpacket: 16 [ 468.985569][ T6854] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.995613][ T6854] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 469.005489][ T6854] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.018657][ T6854] usb 4-1: config 1 interface 0 has no altsetting 0 [ 469.027027][ T6854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 469.036250][ T6854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.044503][ T6854] usb 4-1: Product: syz [ 469.048806][ T6854] usb 4-1: Manufacturer: syz [ 469.053510][ T6854] usb 4-1: SerialNumber: syz [ 469.262959][ T6854] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 469.471177][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.503982][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.913868][ T5926] usb 4-1: USB disconnect, device number 102 [ 469.923690][ T5926] usblp0: removed [ 470.078006][ T979] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 470.237956][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 470.245346][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.254279][ T979] usb 6-1: config 0 has too many interfaces: 44, using maximum allowed: 32 [ 470.262978][ T979] usb 6-1: config 0 has an invalid interface number: 59 but max is 43 [ 470.271260][ T979] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 44 [ 470.280281][ T979] usb 6-1: config 0 has no interface number 0 [ 470.286577][ T979] usb 6-1: config 0 interface 59 has no altsetting 0 [ 470.296947][ T979] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 470.306136][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.314281][ T979] usb 6-1: Product: syz [ 470.318661][ T979] usb 6-1: Manufacturer: syz [ 470.323283][ T979] usb 6-1: SerialNumber: syz [ 470.329843][ T979] usb 6-1: config 0 descriptor?? [ 470.544083][ T979] usb 6-1: USB disconnect, device number 67 [ 470.747961][ T5926] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 470.898062][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 470.904709][ T5926] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.916928][ T5926] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.928647][ T5926] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.939715][ T5926] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 470.949682][ T5926] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 470.963232][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 470.970039][ T5926] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 470.979398][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.989880][ T5926] usb 4-1: config 0 descriptor?? [ 471.401672][ T5926] hid_parser_main: 59 callbacks suppressed [ 471.401699][ T5926] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 471.431435][ T5926] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 471.446084][ T5926] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 471.455646][ T5926] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 471.464446][ T5926] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0 [ 471.479256][ T5926] hid-thrustmaster 0003:044F:B65D.001A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 471.492324][ T5926] hid-thrustmaster 0003:044F:B65D.001A: setup data couldn't be sent [ 471.633684][T14280] syz.3.3022 (14280): drop_caches: 2 [ 471.641795][ C0] hid-thrustmaster 0003:044F:B65D.001A: URB to get model id failed with error -71 [ 471.653991][ T5926] usb 4-1: USB disconnect, device number 103 [ 472.396057][T14388] syz.4.3074 (14388): drop_caches: 2 [ 473.045534][T14448] Invalid source name [ 473.050961][T14448] UBIFS error (pid: 14448): cannot open "./file1", error -22 [ 474.466586][T14554] syzkaller0: entered promiscuous mode [ 474.488162][T14554] syzkaller0: entered allmulticast mode [ 474.906638][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3166'. [ 475.413314][ T30] audit: type=1326 audit(1755705713.452:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.435636][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.584751][ T30] audit: type=1326 audit(1755705713.452:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.607806][ T30] audit: type=1326 audit(1755705713.502:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.714481][ T30] audit: type=1326 audit(1755705713.502:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.737101][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.746032][ T30] audit: type=1326 audit(1755705713.502:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.768635][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.812158][ T30] audit: type=1326 audit(1755705713.512:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 475.834655][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.049725][ T30] audit: type=1326 audit(1755705713.752:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 476.074906][ T30] audit: type=1326 audit(1755705713.752:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 476.108012][ T30] audit: type=1326 audit(1755705713.752:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 476.132837][ T30] audit: type=1326 audit(1755705713.752:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14580 comm="syz.5.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490838ebe9 code=0x7ffc0000 [ 478.057816][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 479.436578][T14653] syzkaller1: entered promiscuous mode [ 479.465343][T14653] syzkaller1: entered allmulticast mode [ 479.709237][T14661] ALSA: mixer_oss: invalid index 40000 [ 480.775236][T14684] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3199'. [ 480.816272][T14683] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3199'. [ 481.487238][T14688] vxcan1 speed is unknown, defaulting to 1000 [ 483.664834][T14748] ISOFS: Unable to identify CD-ROM format. [ 486.144514][T14794] 9p: Unknown parameter 'k' [ 486.150849][T14794] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3227'. [ 486.431280][T14805] usb usb8: usbfs: process 14805 (syz.6.3234) did not claim interface 63 before use [ 486.942329][T14815] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 486.943523][T14811] ------------[ cut here ]------------ [ 486.955860][T14811] 'send_pkt()' returns 0, but 65536 expected [ 486.973459][T14811] WARNING: net/vmw_vsock/virtio_transport_common.c:428 at virtio_transport_send_pkt_info+0xd11/0xf00, CPU#1: syz.4.3235/14811 [ 486.987232][T14811] Modules linked in: [ 486.991912][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.4.3235 Not tainted syzkaller #0 PREEMPT(full) [ 487.001495][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.011832][T14811] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.018770][T14811] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 7a 0e 5b f6 c6 05 fa fa 69 04 01 90 48 c7 c7 20 53 da 8c 44 89 f6 4c 89 ea e8 d0 b1 1e f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 51 0e 5b f6 90 0f 0b 90 e9 c5 f7 ff [ 487.038614][T14811] RSP: 0018:ffffc9000ab07530 EFLAGS: 00010246 [ 487.044804][T14811] RAX: 80a24344ce4f6900 RBX: 0000000000010000 RCX: 0000000000080000 [ 487.052895][T14811] RDX: ffffc9000d828000 RSI: 000000000003477e RDI: 000000000003477f [ 487.060994][T14811] RBP: ffffffff8fc8fc50 R08: ffffc9000ab07247 R09: 1ffff92001560e48 [ 487.069037][T14811] R10: dffffc0000000000 R11: fffff52001560e49 R12: dffffc0000000000 [ 487.077059][T14811] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88807896d6e4 [ 487.085509][T14811] FS: 00007f8392e546c0(0000) GS:ffff8881258cc000(0000) knlGS:0000000000000000 [ 487.094872][T14811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.102154][T14811] CR2: 000020000003f000 CR3: 00000000645c4000 CR4: 00000000003526f0 [ 487.110421][T14811] Call Trace: [ 487.113751][T14811] [ 487.116718][T14811] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 487.123216][T14811] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 487.130333][T14811] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.136709][T14811] ? do_raw_spin_unlock+0x122/0x240 [ 487.141975][T14811] ? remove_wait_queue+0x33/0x120 [ 487.147038][T14811] vsock_connectible_sendmsg+0xac7/0x1050 [ 487.152869][T14811] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 487.159124][T14811] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.164038][T14811] ? __pfx_woken_wake_function+0x10/0x10 [ 487.169770][T14811] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.174750][T14811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.180205][T14811] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 487.186438][T14811] __sock_sendmsg+0x21c/0x270 [ 487.191679][T14811] ____sys_sendmsg+0x52d/0x830 [ 487.196504][T14811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.202335][T14811] ? import_iovec+0x74/0xa0 [ 487.206892][T14811] ___sys_sendmsg+0x21f/0x2a0 [ 487.211649][T14811] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.216890][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.221766][T14811] ? __fget_files+0x2a/0x420 [ 487.226487][T14811] ? __fget_files+0x3a0/0x420 [ 487.231239][T14811] __sys_sendmmsg+0x227/0x430 [ 487.235962][T14811] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.241257][T14811] ? do_futex+0x395/0x420 [ 487.245645][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.250485][T14811] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.255375][T14811] do_syscall_64+0xfa/0x3b0 [ 487.260096][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.264952][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.271176][T14811] ? clear_bhb_loop+0x60/0xb0 [ 487.275913][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.281912][T14811] RIP: 0033:0x7f8391f8ebe9 [ 487.286367][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.306559][T14811] RSP: 002b:00007f8392e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.315453][T14811] RAX: ffffffffffffffda RBX: 00007f83921b5fa0 RCX: 00007f8391f8ebe9 [ 487.323636][T14811] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 487.331697][T14811] RBP: 00007f8392011e19 R08: 0000000000000000 R09: 0000000000000000 [ 487.339958][T14811] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 487.348011][T14811] R13: 00007f83921b6038 R14: 00007f83921b5fa0 R15: 00007ffefcad6198 [ 487.356034][T14811] [ 487.359157][T14811] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.366471][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.4.3235 Not tainted syzkaller #0 PREEMPT(full) [ 487.375874][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.385961][T14811] Call Trace: [ 487.389272][T14811] [ 487.392214][T14811] dump_stack_lvl+0x99/0x250 [ 487.396839][T14811] ? __asan_memcpy+0x40/0x70 [ 487.401435][T14811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.406741][T14811] ? __pfx__printk+0x10/0x10 [ 487.411353][T14811] vpanic+0x281/0x750 [ 487.415342][T14811] ? __pfx__printk+0x10/0x10 [ 487.419938][T14811] ? __pfx_vpanic+0x10/0x10 [ 487.424473][T14811] ? is_bpf_text_address+0x292/0x2b0 [ 487.429777][T14811] ? is_bpf_text_address+0x26/0x2b0 [ 487.434985][T14811] panic+0xb9/0xc0 [ 487.438710][T14811] ? __pfx_panic+0x10/0x10 [ 487.443160][T14811] __warn+0x334/0x4c0 [ 487.447147][T14811] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.453408][T14811] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.459657][T14811] report_bug+0x2be/0x4f0 [ 487.464000][T14811] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.470251][T14811] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.476497][T14811] ? virtio_transport_send_pkt_info+0xd13/0xf00 [ 487.482741][T14811] handle_bug+0x84/0x160 [ 487.486989][T14811] exc_invalid_op+0x1a/0x50 [ 487.491493][T14811] asm_exc_invalid_op+0x1a/0x20 [ 487.496352][T14811] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 487.503269][T14811] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 7a 0e 5b f6 c6 05 fa fa 69 04 01 90 48 c7 c7 20 53 da 8c 44 89 f6 4c 89 ea e8 d0 b1 1e f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 51 0e 5b f6 90 0f 0b 90 e9 c5 f7 ff [ 487.523064][T14811] RSP: 0018:ffffc9000ab07530 EFLAGS: 00010246 [ 487.529337][T14811] RAX: 80a24344ce4f6900 RBX: 0000000000010000 RCX: 0000000000080000 [ 487.537325][T14811] RDX: ffffc9000d828000 RSI: 000000000003477e RDI: 000000000003477f [ 487.545304][T14811] RBP: ffffffff8fc8fc50 R08: ffffc9000ab07247 R09: 1ffff92001560e48 [ 487.553278][T14811] R10: dffffc0000000000 R11: fffff52001560e49 R12: dffffc0000000000 [ 487.561257][T14811] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88807896d6e4 [ 487.569336][T14811] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 487.575764][T14811] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 487.582705][T14811] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.589048][T14811] ? do_raw_spin_unlock+0x122/0x240 [ 487.594261][T14811] ? remove_wait_queue+0x33/0x120 [ 487.599293][T14811] vsock_connectible_sendmsg+0xac7/0x1050 [ 487.605034][T14811] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 487.611201][T14811] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.616150][T14811] ? __pfx_woken_wake_function+0x10/0x10 [ 487.621882][T14811] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.626820][T14811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.632120][T14811] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 487.638380][T14811] __sock_sendmsg+0x21c/0x270 [ 487.643154][T14811] ____sys_sendmsg+0x52d/0x830 [ 487.647924][T14811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.653401][T14811] ? import_iovec+0x74/0xa0 [ 487.657921][T14811] ___sys_sendmsg+0x21f/0x2a0 [ 487.662603][T14811] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.667824][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.672637][T14811] ? __fget_files+0x2a/0x420 [ 487.677497][T14811] ? __fget_files+0x3a0/0x420 [ 487.682188][T14811] __sys_sendmmsg+0x227/0x430 [ 487.686891][T14811] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.692095][T14811] ? do_futex+0x395/0x420 [ 487.696467][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.701246][T14811] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.706127][T14811] do_syscall_64+0xfa/0x3b0 [ 487.710632][T14811] ? rcu_is_watching+0x15/0xb0 [ 487.715406][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.721493][T14811] ? clear_bhb_loop+0x60/0xb0 [ 487.726173][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.732124][T14811] RIP: 0033:0x7f8391f8ebe9 [ 487.736582][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.756375][T14811] RSP: 002b:00007f8392e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.764804][T14811] RAX: ffffffffffffffda RBX: 00007f83921b5fa0 RCX: 00007f8391f8ebe9 [ 487.772873][T14811] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 487.780938][T14811] RBP: 00007f8392011e19 R08: 0000000000000000 R09: 0000000000000000 [ 487.788921][T14811] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 487.797376][T14811] R13: 00007f83921b6038 R14: 00007f83921b5fa0 R15: 00007ffefcad6198 [ 487.805380][T14811] [ 487.808811][T14811] Kernel Offset: disabled [ 487.813152][T14811] Rebooting in 86400 seconds..