last executing test programs: 2m43.027081787s ago: executing program 2 (id=398): close(0xffffffffffffffff) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100100ecd5aa189f68d3196bc22f2b200000000000000000000000a4c000000060a0b04000000007c00000002000000200004801c0001800985f9be00010068617368000000000c00028008000140000000100900010073797a30000000000900020073797a3200000000140000"], 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x80000001, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1a0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x80000001, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x10004, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000380)=""/56, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 2m42.994004314s ago: executing program 2 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/29, 0x1d, 0x0, &(0x7f0000000940)=""/4096, 0x1000}, &(0x7f0000000280)=0x40) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x8014}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x67, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e20, 0x400, @remote, 0x1}}}, 0x84) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x22032, r2, 0x471ac000) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000030000000500000000000000000000000500000000000000ffffffffffffff7f01000000000000808000000003000000c0bd2d85777a02b3ca5f7c44bc968b14103106eac8b5b203923094eceefd483837f36f3ffb82dcf53d0d50c319893ec22468535f7918a73d084aa39fc28b08b7bd219b9ef155dce98e4dd2ce1bdba1d558d51e2b6daf9f79378eb2f90fee55c97f3074bcc451639ff6faa03650b3ed5d3072dc49e903edb7f2"]) 2m42.695500871s ago: executing program 2 (id=402): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfffe, 0x0, 0x2}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x3, 0x8001}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r1, &(0x7f0000000180), 0x12) setuid(0xee01) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2m40.325233947s ago: executing program 2 (id=419): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xa7, 0x501000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f000068d000/0x4000)=nil, 0x4000, 0x4000002, 0x10, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="350284cd", 0x4}, {0x0}], 0x2) 2m39.613003338s ago: executing program 2 (id=426): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0x36) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='2'}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r5, 0x6f000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0x36) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='2'}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r5, 0x6f000) (async) 2m39.385612537s ago: executing program 2 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2m23.573130012s ago: executing program 32 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 5.367003616s ago: executing program 3 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) (async) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000026c0)=0x2000000, 0x12) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, &(0x7f0000000040)=0x1000) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e23, @local}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='erspan0\x00', 0x4, 0x9, 0x8001}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x7fffffff, 0x8) 5.339607392s ago: executing program 3 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 5.079683723s ago: executing program 1 (id=1229): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 5.078005767s ago: executing program 1 (id=1230): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x66, 0x3b, 0x34, 0x8, 0x2040, 0x4982, 0x1799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x9, 0x1, 0xc1, 0xea, 0xa, 0x80, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x6, 0xff}}]}}]}}]}}, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000840)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r6, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000680)=0x41) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) 4.922458977s ago: executing program 1 (id=1231): r0 = socket$inet(0x2, 0x4, 0x81) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f00000001c0)=""/88, 0x58}], 0x4, &(0x7f0000000300)=""/95, 0x5f}, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) 4.825842993s ago: executing program 1 (id=1232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xa, {0xa, 0x0, "2a533dae62335e57"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x80400) 4.779193893s ago: executing program 3 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101582, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000009c0)=[@in_dx={0x82, 0x20, {0x1179, 0x1}}, @code={0xa, 0x78, {"2667f3450f5388f57f0000470f9b4ee5440f01d141f4b9800000c00f3235000800000f30b9800000c00f3235000100000f3066baf80cb8fbcfb082ef66bafc0cec420f234966baf80cb874cf418bef66bafc0c66b8da0066efb9800000c00f3235000400000f30"}}, @uexit={0x0, 0x18}, @set_irq_handler={0xbe, 0x20, {0x65}}, @out_dx={0xaa, 0x28, {0x481a, 0x3, 0x2}}, @code={0xa, 0x61, {"c4a13d6d7000470f01c3c74424007b5a0000c74424026cdadf88c7442406000000000f011424440f41407b66bad004b095ee8fe978c3e9f7c34d00000066ba400066b8000066eff20f005f003e420f07"}}, @wr_crn={0x46, 0x20, {0x7, 0xfffd}}, @out_dx={0xaa, 0x28, {0x7ded, 0x0, 0x91}}, @uexit={0x0, 0x18, 0x3}, @wrmsr={0x1e, 0x20, {0xaca, 0x755}}, @code={0xa, 0x4e, {"660fc773002e0f1b244166ba4300ed66450f35f3a5c09800000000b3c744240059000000c744240200400000ff2c24400f01c366ba430066ed660fc732"}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @code={0xa, 0x5b, {"420f01c566baf80cb8409e5187ef66bafc0c66b81e0066ef660f3880a500800000f4460f07c462bd09f6c4c1fd67df45382e400fc7ac880000000066baf80cb8912ac08aef66bafc0cec"}}, @in_dx={0x82, 0x20, {0x8046, 0x2}}, @out_dx={0xaa, 0x28, {0x8b1, 0x0, 0x1ff}}, @in_dx={0x82, 0x20, {0xc0eb}}, @wrmsr={0x1e, 0x20, {0x89c}}, @uexit={0x0, 0x18, 0x401}, @in_dx={0x82, 0x20, {0x2f34, 0x3}}, @rdmsr={0x32, 0x18, {0x60b}}, @in_dx={0x82, 0x20, {0x5087}}, @set_irq_handler={0xbe, 0x20, {0x3, 0x1}}, @rdmsr={0x32, 0x18, {0x26f}}, @set_irq_handler={0xbe, 0x20, {0x6b}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0x8b0}}, @code={0xa, 0x62, {"652e650f09410f01d10f01f8366441014c6e0f3e2e0f0092c45800000f21d70f20e035000004000f22e0b8010000000f01c166b8fb000f00d848b887903198000000000f23d80f21f835400000b00f23f8"}}], 0x484}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x2, 0x0, [{0x260, 0x0, 0x6f9f}, {0x3ba, 0x0, 0x2}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r8], &(0x7f0000000180), 0x0, 0x8000000000009}) close_range(r3, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r9, 0xaea2, 0x4) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1003, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES8=r11], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x8, "abd6d85f"}]}}, 0x0}, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000040)={"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"}) 2.074897413s ago: executing program 3 (id=1241): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_usb_connect(0x5, 0x164, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406", @ANYBLOB="c9df7a64f62985bcc0ccc9f6d34781766ea4d7370fb649014b12aa963a8159038c0f75396ac25ba7d9e90ce5df53255cda5ef0a2a856e959f9b5d3614a1767c0a31482c789f4e6663d3f3f71a0840b4bccc70352a11f19699f99aa79e299f3a103f95ee161f36976e667baf51149d1b8c5d88806f643d428422cc7ef9f7752ae83b1c9b84be0d82d33ab"], 0x0) socket$packet(0x11, 0x2, 0x300) lsm_list_modules(0x0, 0x0, 0x18) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000003000000580001804400040020000100"], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa}) 1.790492595s ago: executing program 1 (id=1242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x160, 0x10, 0x633, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010102, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffc, 0x0, 0xa, 0x5, 0xfffffffffffffffc, 0x0, 0x1, 0xc}, {0x0, 0x7fff, 0x0, 0xadb8}, {0x5, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd25, 0x5, [0x80]}}, @replay_thresh={0x8, 0xb, 0xa63}]}, 0x160}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.47111119s ago: executing program 0 (id=1244): r0 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x80a00) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x231000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400a41) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 1.413188584s ago: executing program 1 (id=1245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xa, {0xa, 0x0, "2a533dae62335e57"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 1.363225313s ago: executing program 4 (id=1246): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'sit0\x00', {0x2}}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000040)={0x4, {{0xa, 0x4e21, 0x7f, @private1, 0x1}}}, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, &(0x7f0000000200)={&(0x7f0000000140)="92f052e3e9ad5f33a3cac82286d13dc9944f61958967e7eec19866f884f44e013a85c005c60bbd15dafdef0d0fb8c07ea2ddab98c6ab1475a0f280538b6c0bd325a22b3ac31c87f975c065faddebbeddf70307c276a692", 0x57, &(0x7f00000001c0)=""/29, 0x1d}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r0}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="46c7f8f57f0000b9dc0200000f32c463c949b300900000e266baf80cb868659a82ef66bafc0ced2ef3470f09c422bdaaab42237be6660faef366450fc730c1c73448b800000000000000000f23d80f21f835c00000100f23f8", 0x59}], 0x1, 0x21, &(0x7f0000000380)=[@dstype0={0x6, 0x3}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x5}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r5, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x4}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0xffffff00, 0x67a0, 0x8}) read$FUSE(r2, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000480), &(0x7f00000004c0)='./binderfs\x00', &(0x7f0000000500), 0x2, &(0x7f0000002580)={[{@stats}], [{@obj_user}, {@appraise_type}, {@uid_lt={'uid<', r6}}, {@subj_user={'subj_user', 0x3d, '*@./@#%'}}, {@subj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sit0\x00'}}]}) write$bt_hci(r2, &(0x7f0000002600)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x500}}}, 0xe) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000026c0)={0x53, &(0x7f0000002640)="b8afc26a66037db50772c2fa2a3218b55da534d8d476ff112dd6a469420a4632ab3001b65706fb3331591e3a2c0038b9cf659c440459232cd7afee37fbebaffb2b11dd361a91136c71e371b5f37f078ac11a5f"}) syz_open_dev$sndpcmp(&(0x7f0000002700), 0x101, 0x2080) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000002740)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000002780)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}}) mount$9p_rdma(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', &(0x7f0000002840), 0x41000, &(0x7f0000002880)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x101}}, {@sq={'sq', 0x3d, 0x3603}}, {@common=@access_client}, {@rq={'rq', 0x3d, 0x3ff}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r6}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@subj_user={'subj_user', 0x3d, 'appraise_type=imasig'}}, {@dont_hash}, {@measure}]}}) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000002980)=0x7) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xc8, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000003180)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002b80)=""/242, 0xf2}, {&(0x7f0000002c80)=""/63, 0x3f}, {&(0x7f0000002cc0)=""/176, 0xb0}, {&(0x7f0000002d80)=""/101, 0x65}, {&(0x7f0000002e00)=""/84, 0x54}], 0x5, &(0x7f0000002f00)=""/39, 0x27}, 0x46e}, {{&(0x7f0000002f40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002fc0)=""/224, 0xe0}], 0x1}, 0x138}], 0x2, 0x2020, &(0x7f00000031c0)={r8, r9+60000000}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000003200)=0xf) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000003240)={0x3, 0x5}) ioctl(0xffffffffffffffff, 0x9, &(0x7f0000003280)="5b06c5a631bf27365589c55a1b56357e03efd44e503356903f0c474b58f2f96340f8f7191fa0b77d9d4d3f672841501159da3dc14806b06d45e36358ec46bafd05e4839205587fe70e7ab9e2debd1a3e367d4878051ab72f6866cf0ea487a1dd8ce56ecdc8cca678bd0a0e394dbabac5ae5b440078a54d4159380b48f95ff56dacb6c28fc70bc2630364f8ffe5944f0a4a629daad77b7567ba20c7f35580128c6cc494e461d9bc6ed8ac8e61fd334a97b96ec5dfe757e41baf6b4ff8790fe62596ff3975afb6af1f86ca611311afe0beb854d7ac8b320d39f6c8756b97bf") r10 = accept4(r4, &(0x7f0000003380)=@sco, &(0x7f0000003400)=0x80, 0x400) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003480), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000035c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x60, r11, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x78}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x60000084}, 0x8004) 1.31097627s ago: executing program 0 (id=1247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0x1410, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x25, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async, rerun: 32) syz_usb_connect$uac1(0x4, 0xf5, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x6, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x7, "c01cc44b"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x3, 0x2, 0x3ff, 0x66, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb9, 0x4d5, 0x5, 'E'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0x0, "c1694eb0"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x3, 0x5, "466a1621"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x200, 0x6, 0x9, "c0e81d16928c52c7"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x8, 0x84, "fede64f2b5"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x3a, "884e8f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xb9, 0x1, {0x7, 0x25, 0x1, 0x1, 0x8f, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0xfd, "", "d1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x31, 0x6, 0x33, "ddbffe297b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x3, 0x58, 0x7, "fcad69"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x5, 0xf7, {0x7, 0x25, 0x1, 0x82, 0x5, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x6e, 0x81, 0x40, 0xa}, 0x1d, &(0x7f0000000140)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x9, 0x6}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xcf, 0x4, 0xff, 0xff}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.290354895s ago: executing program 4 (id=1248): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x50, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x1}, 0x20000000) 746.634142ms ago: executing program 4 (id=1249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001b40)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xffffffffffffff6c, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 674.727118ms ago: executing program 3 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r2, 0x400, 0x70bd2d, 0xfffffffd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xbd}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a484}, 0xc000) 625.803762ms ago: executing program 3 (id=1251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xa, {0xa, 0x0, "2a533dae62335e57"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x80400) 555.807181ms ago: executing program 4 (id=1252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa4, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4f6f}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) 479.08631ms ago: executing program 4 (id=1253): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x5, 0x0) r4 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100000073abee8a0000100000000c000000000000007fffffff51e0db697357bee9459a"], 0x20}], 0x1}, 0x0) signalfd(r2, &(0x7f0000000040)={[0x3]}, 0x8) 395.077316ms ago: executing program 0 (id=1254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRES32=r2], 0x118}, 0x1, 0x0, 0x0, 0x48080}, 0x1) 355.520846ms ago: executing program 0 (id=1255): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0xa, 0x5}}, @ntf_ch_w}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000040)='/dev/dma_heap/system\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x3c7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000380)={r10, 0x4, 0x2, "a58d"}, 0xa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x8}, &(0x7f00000000c0)=0x8) madvise(&(0x7f0000766000/0x2000)=nil, 0x2000, 0x13) 304.195127ms ago: executing program 4 (id=1256): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x9, 0x6, 0x3, 0x84, 0x8, 0x124}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000100000f411"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRESDEC=r5, @ANYBLOB="b22ab35a9eeecd1de40e009b8b0e05f23dc3889bfde985bc7886a8fe4cc303dc17c7c8b38c5d7e0f1b52d2dbc530e7cdfa3b3732d20de4a46f87f4731b6edbeccd6d885c77d5f409bcb588b4e5a921ade894928bf2773f52d780b23534a8a9a512df52c7d436ed5b713aa9279b0b410cc693e1f3fbe18cc856c5a277fcdd22b68bc58627be6b0c5a7f9e5339bb60cbc82f5c56e34ce2799be627cec29f303df1ba98a0fa0c30a830de7ad6563c7959518d5c0aca24434c1e7471a5e1e9551e3de16bd9fd9333483dcc653c689b69f1ec4a0ee4a15e273141d6a1b01c5d918836e3b400040cb646b31237820f2b256ee1f0a2aae91391d9e5"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) accept$unix(r10, &(0x7f00000006c0)=@abs, &(0x7f0000000240)=0x6e) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000004ac0)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYBLOB="2c9e8791d96f3d", @ANYRES8=r10, @ANYBLOB="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", @ANYRESHEX=r7]) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000980)="ca1e159273563f0f86a1034882a109edc529566d88734c680242f05a9e36206891bd62e1afb7b4eb0ab1f6a2848e3af2619e6dda50e594559530ef75fe7f5f6ac0ab2db5584048ebec5fe6ab11d509b746b33401d92e794e9e228add6425a41305052810021e559aecf483df2eaa3086607526f49cf84c85cce33bf6827ac17bed21a957d4b0d978181236c51dbf18cd8e11c7baf8138d7252c76a1b403dbf3afcac07fb6ffb5d9e7f3b44d7219c4d373fab1e6f11d86caddfb6769d0e395eb719bba11ea223d325af007cc89fb67bdb62a3a4d43fb14ee01d28262ef9861794df332a63ac1593f12ddebaa8717739fd473cd400267ee4be7bf7ec96e414d0be071ade1fa575fc7cfce04b03b31da94aa1a701043edb997eaec293a31ea31aada9504d32f898bc3f0552d42dc4fb2c49a6b574e9105055ec15c1a1ab4c4f558ce3f806bd708ebf8e0b6f3d0c11b7f2a7585a869c2cc8c192fcaf0a3155085e4dac55688d523577369ac492c40f356060a3a80e13fcb6bec6eb1581c72c0494b51fd417d43f27ef9eeef823266c7898dd07eac04c07c3bf07fa1ddd242d3a52d17a4584e7c53c1ba22f48da6a838e77fe47547a98e5ad2189622cb975de8def9fc9fe49a024979de7846f6774d2790c29f9c8b2c10897eeb558f9b6a00ab41223dd9f9d1da5f79fafe958502c9aba9b2f48f8f3af81966b0fda271476dfc127957460d79dc51f9241d572efb3baa998a98db88239a54ac713f368456c14a4b1f1f0f802770b770468b63d21e24fb880b45498199d34566e6360de09b9dff8ae036b7a3776254669d8b03f268cd8ae143703390ace68a0870f6808f75e6ab48bbcc56eecf9f26cd8483400f78cd35ef5237602c3f0019e9e7a788a1f30fb309ef21e068abdcab1a2c978e2b8065666f7f5548daf67b9d37c84cfde6d21a5cce3588835a0188c50aeac67e0c9eefa36f29984ae475d163f8abac4ba263e9028a27c036f647cb73b470e7de50be81f0f145014eff3e699701d69cbc066eaee93f4f94aa31f8771e21007c88ebed4602381a034a55a96303369f176547391695af497dc50f362aadf34eb4b1eff36132df9664193cfe87631cc71f84b0ffdec1860b1642ed7255c787076147031e4238f7f139495cd41295a572290dc6c1a68664c5fe77efcc6b2c7489b421a877a3018f5f540407b5df40a05e5d09dd60ba0a86c1c52e259b044651c83f0b40bab7b14fe2d63c7732bd58cea860bc7a3162fed0b9e74c435bb88bedda4cd4cb8e42b277944a793f09b0e1f9eb88a198d0556abf3daee5b4a20f6796288f30cea7ed997733bb30ed1cde14ee3ab5b71111ef658839eefec3c99938d75247e577e3574f18945251182613375013324fead37ecb4c433252cc3320d880f0c61eee6d3638670fbe40af0274a30e90a24a5b3eb0fb2f5fbe6b98c20d24cd5993a51bef71fe1583beb56e9d910cc6896170493ddc302ccc2658a34f380131951e160bfe177f9415a7a16efdfbc4b2ec86fca113c9935b25cb332b27338c809407ae10806d503969558da2e7d5d1ed722c35790673c58ae6a5517de417d864cda57bf5090b43951f9d5d41cfefb0b7910ec36201f4f2d06ee26663e7fa2daf4a0c42daaf3ceb0a260378d616912f6213d82d60597dcda2be5bfdf0915e178f84ef8b0a566b36be3f714f929b2c07e88ca90eb6a5532655338aaa008c339b99617ab53fde47dec7cf9a1b2dd3e373208edaf9e877a6513e3a74cafcf4d12d53f7915dc05039ee3aa19c0d4947d068a0ddeeace108c9f46dff83184237c78f9dc50eaed94ad22014c7aaa2d17a25f5d069a53608f4f20c25e5baa4fd3a01457dae57c23ecb3ecd753e1b15871cd649d7de411484aae756cf28cfe999e61c1cc52f6572d9f715f1bd6e7010ec8e3a6a2b98095ee727261c99a72e64b3dd85d910a2241c38da49435bfeffe250054724af8452567bd3da815eab528acf978776c818d811d1b44afcf409a83f3a767d9f9fc857d3148125a1b0f8adf335414315a926458095136b0d2cf6c253b3dfe20e75dc8eccebc460f208735d96ea96e18dd01797e9c97e66a3092b7ff1dcbdd4f2340a2df4f692dd2898bf0bdd66e65fc15d6d63a6782b3a1df578b3b3c4add6cb08dc992a3e25baf91be98740bf58af6681201ead54de92312819307025104cb5ca437c2fc0c8b05a5a03b67e7c6ab2fd48285f1d2960440a908836d2db10616168bfee4295bd967b10b780d758b7e5673a9ded3f71bae35e568d797eec1e892aad6769c0a19ae245417bca18d2e9b2f7b3cf3d154e69254b90585c9cf254da4c5282227d4a050a661f8247a321980688c9bdaa5e5493436ea6f64cc188bb6c3a535f0589359b57a622cf3cc3666e030e33a776785381d15f1b167650db1b132087d56bce9708e8f5e3d2584037cba856dc1b5883c5e707f601a5d0af56ca57992eeeeaf9fbce713701fb91e3e9c6db844c405cf894338dd75e9c27d1e40805c1e5359ad40ff5f8dcdc4176a44522c5665ff857a380995c69289d3919ebeb6087f33a3ec552b7f4f774b2c330fc58bbe6173508bc0e18977819f41ee4426fedd38c23123794cfc17245154333d7ac3dc558fa0dbea2df9bd12cacc4da1f39109635293ade383bbf415de995cba6a39e26ffbc16431b83cb070cec2e9b8308df935158f5461a30654b215b0d59d6f3aa57faba54514888d28fa42aa7deb007d1ee571ac22f093bea029766dfe6a794c82159c8c1ef705b9d0504a2e0195190c83e964cf66d9f899e7b06497b3a2e60e433d2abe19498d05c44e4e3b4b8458ee047db2e61c457a07856a164209046ee311fa1f700bcbe46bb6540ba3acc5a67667b5c94136179c9d54edffc9f6d23371daef83ab63fe77af315d39e952a8427213b32eeb53367f18b64ec863413b0cd6930af8b23f843c95b0e12f4a49feed15affe04539ff4edb41202725d175caa2314b40efd99a62ceddb6faf8c907e1be773691e2243bd45dc8b7caa3fd7432ce9fa1b643d68facda7cd76a8e59baebe369587a7bdbe70bcbee250ac36a9b06360627bba0761eb66e4b05c3683dd86a38550307e90cea0edef3e3373501f086a56f1c7c444a43e9fc8a408000d5bc0530cf7598c399738a62a0ee80cebbc30314888bfdd36244d6b4c52ed362d66d9f08bd36b5f5292ba9a3466bc72c96e6405c07ba05858cc667ab1f1f5cfe25a95ba328946eb780365805ecee247d8d912a6d659a12c30c76e34b28f055565d7a783657957453f94d48d060e6e83bdecce62c7dfd568b628b2a7ff79d0abd359aee0856881f8a851fb6b4f06cf9b4d89e56ba5597304d3dde22dcb2afcc5f07c57dc0641680ebb3e9805babb9f861ad1e2ab714c72ef995a4d530c6f154f3cdd95f935692dbf519393791c1f18a2dbf460397d9809d7327ea0fa334081919b7ad0af419825adde80ade77d0801b06ac0584a7fdbdfd05a7afc9aab020900c1f2129973b9445a712828f993dd82a25dc7c6fa357bf31bf16a4f75579bddaaf6a4ecbd2a7e9e4e3298c754c0fe689d0bcbd613950a7f11a4661b47c32ea967efb56ee223a6ec4d7b495f251ada6763ce4dd4e13c4825d30a70091e50ae1811496df31f29bfbe71930abf071c62f39d0808bdb5c6a3a4165f8821d951545daace4244bd674592bc85fba2b92d698f13b5d7c792f28088f20473366721a4127347132f5bd25a23b53aea7a8081b82ac6bcc2afc8b7f6c41371bab5483718f589d9c21455bf257a5e42d0da66095b38789077e96c8c3f61dfffd5cf292afe4f63ebd9e275e87c9c5d77276b540d36b2dea9f724f3c3f6a7224785ad9bc2edb78e41e8db40bde9f9021417c0d92627ac48d7041ffc938f1e81c36bf5d0c70985683d0b86fd90bd22b1d962260d57a7471354a7084c20a639a5b01dfeac041c35eb7b926e5c64c5890fe045540a85f6a1fa86f71fc4d4eb6a31f2bae828c923db75bf8ea0e0d995d55e6a4316332c39bb04cd7a9f3ba7e89df496e1760b5a09982104e2f848893202f6a81923553f0ec7261832480539079eea88ec7554ab2239726d4a91fa1b396c00f569f3943604ecea4c59ba05b57487537da91f2c0f870d8f9d634515420f3b03a84548bb57a69bb375a824db35948d3186f578d9dfda070bd13e586fd50e380a31fa411f30f9999cecd14587cf5b806f3b5a54377e0afba25a00d42b342b056360e08a68576274d15f24944d8c30d8935c626bcc483b77e9266dfe5465c04f6f1457e512efe0ab615c9e4403959a94542f795c594dd838e28d24564ae5455417265e047cb406cd9fabd3dcee374496e389dcdfff0c8ff762ec9991937e1845dc591ab37b054cc5383c8588d65bcdb0c6c9bab86dce09e3b1a8b938caba4537cf8c5e35360ac3a6a4ecdaf68e530843a65dc360e684e975b7db87156cab26551933e711902e138607c0422cce42410c7771ff8744434e1636574079e3c573e61b5e3cb13b8e032516975b190cb8e6259b8cca1f990fb45069f6ba658c21c750132c29afa5436fedbce299d14af05e003c7d676263c3426ce0b01c2d18e2f211bb59b5dad6f0a9d0b7640ac98c21f93f761e1529c2804ceb4d9473795372078e1b6337c9752880b3076110da8a94c7a04e45e4810f103e43973b3f142c8031f70b7b9bce6a90ffb7e2dab2171a408c689c9dd3fac7696c940e8887139ad83146abfb49b50527b9d8ce670b9525239c9a09484fea7b858bb40344c38318937e7e8a28efc80f15161c3759b0065870f3ebe8ec8b0a3a533fae22365b375a54dc1823ebb1cee6dd25e3fcaffb4be957165747d31c0fdbb40a8845956023056418a077ba8832b47dfe53e3b0f77b20cc63687cfcd4480c45262429f98fa4a23ebaddceb4b0205fa8d7db699c3ebf9e94c0b2d8ffa27d5ac87ce25b067393ec845c5ff6a571fb9867af2cb93a6a21e28d69468e6479e1ea5efe386e1baa1f0c9c5dfde8bc66d180681bff61f5b84fafe800381511dc10a94f2f8c8446b980af99ccd1d1498603b109aadb306880c6e38800a03365d0d24d748ba212e2afdd4c4645f0c97c283b512add3df3331cd5a0cbb0c4a30e6616fe409ea3fe3c6560fbe6720cae612d61da5b30ec11a188c718b228d2ae04854915e84ef9aa5caffaeb9ec50b1146f107be4020df5af513496e9eebc0a1ffcbb0db76d488cf95408eca029df3b161879715277a43c4cb1d377ed315de693273f500bd61b0fb9de8c136660432f4da320a52cfebcb1104ef1df8ab81613a921596a4481e8eb6f0b1aa6bc4e9d9e5c01133ac6d4e83a29d3242d62d90d3d0f52db63fe77de584f9b34ee7567384a4cb16b470ee8315cfc934b6d7f2c1f88ab2db00e135b985f51c5b4570763814653ec08153183ceb6e1d1704700d9a094f38abeac6f3768a8c4c9599a8d59abbfae840a6c3f64443061cac3bfe4585bc0fdfa5eabb9d162ad166ad7047a85acc28dad7db3e7ef3a6040f16f0f4c286c05293e23c72189fc82750b5b44749aa334e49d2efd9159f30d35c73ca3b780661a8e440b8712ad42f67e209ae219fe496bbebb5d0d7954ea3f0db2b65b2679ca63b014c021ca1dc7e87884e36cbfd529f0758fa820b16da9909aca341322951ec1f80e46c5e927e0d016c3b4a71d4c3a54ceb61fb73ca2b1a3db13c9b01821c30ad01d0ece8b6f5941803c038a6eece088e5828e1343d3a61957b75d41a4abef081781322f99713ac0e5f6dd7f492d090ac3ad23aa9b810232134", 0x1000}, {&(0x7f0000000400)="3129111408bc1b4acffb98f1e2b10488cc6d91afc134435176202fc5f66e7826121b282073ca2b05c12eb25fb13bb8d75b436d7975b02653d79d77208ab55c5848e16fdd04ea802b6d0a78edbe8fc58ac093570ad99693451cf4cf30a816983d47eade991e1c206365b7b1138339bf108168d0ded02091e34e68c76384b7aa7ad26488a52101b31076384ddf563b264b25734b076863265e4d8ded1f0f4f66e9f3cf00a38da10f6a590f85f5b8a78edff73462331187a3ac7f71d80315b6a9e85c9565a4189c3d714853fbb07d40069e9e75ce923599e51463", 0xd9}], 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="399000000c000000adff00"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x7, 0x0, 0x4, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022402000921"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f00000003c0)={'wlan0\x00'}) pipe2(&(0x7f0000000000), 0x0) 3.005219ms ago: executing program 0 (id=1257): r0 = socket(0x2, 0x3, 0x64) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x10, 0x3f8, 0x2, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004854}, 0x880) (async) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000180)="f2c752475477387762aa7f7a1e91e20ce98db7e0bd32dcbdaae7a446fdc19cd12c07c227ad9afd032b6894ae316044652c78bd8a1313dd78db5b1ddec15c7c6a3e122d38e724827cff14f3c066a52684a3622046a1c66938b7a13ce96bf435090e5203b10523414f344167c8cbefac45b374ebe882ff519703387a10b1453eaed76e7f937f", 0x85}, {&(0x7f0000000240)="27ad2f8c037145944f1a8a83e54580099ee0b83f0c1b00d02d3a466260dabe8b586f2ca3383286e000849b911f633d24b2eb5fc5bafe7efca2f4427e36f2ec2724aef641da01543e5ba831420db0dc93176227874237713b0092f46ee2f0ee05c7e60428799094e3718e55aa41b299e44871f3491aed8062f696f77e49d27019158ed407345d2b77a420babe5af7e68cb9f5ce28fe039da16a6f2ed923e4783eb95947f6cabcf3cb3f029a8b000000000000", 0xb2}, {&(0x7f0000000040)="2cdbee10007975cfbcec17370ff6bafdcbf86d9eacc27092e1ccfb37499ce1be1a972945d427f5ba560cb7a9207105b26594f68567bd0d84ac1ef926ddfb1ca7c28510fdd85119416f3df22f6c735eaeb71e4f53b7225cbd9e8396f1a9091f40f32a0c4a64d4d464daa9f84c", 0x6c}, {&(0x7f0000000300)="71920d7f77f3c7fe5ac4138db79322ce615be464bcfb10d31e44a52e7c65a1453ec6fe02c4fd294e1dae90a7e4958b35fdc39355e87aa5ff7bfb893e358dc6d1db74d8f595447661126457d4b0e423424029bfc6810409b7116048cdbb3458761f83fd228bc13cda8a514d4c202f7a48d0398a9b2bd4b6f187c686a86213f9120afb255d35feb5a4c9dfbd5b8108350e58cf62ea54c2ae35ae927eb24dfb834f05ce4b52f7ba8acb457b8df93a362e78ccc450ea34f0f316e8cb592ea6b7c4bb72a12781b7fcb5e5279714b79e4e666ec74e37c0fe478f6ba881b04961ba8b2c7ceb27b289ba6364", 0xe8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2ba6fe84d79093f2ba72f02c46d91ca33303041f88c7a7bdf3572b37805dc6aa0df0088c1716a98be0eb7dbe8420c9ba5f47cea9a1d759c6b9bde9d1e826c79ac0953f2141948f7a24f06e6b58410251a2c4c7e1e3c35b3c6e052431074dce7f558b4024ca42c5646c283d6dafd8ff64d53e17862d3317b051319838695cdb0a1f61cd927fad61799af6ad1a97d0cc2c7727c9657c90dd", 0x97}], 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="140000e60000a2fe2900000008004521ffff0000000000001c25c8aa595eb08f8870f9121911b6d09b7d69204b70908e37489c3c5b898415"], 0x18}, 0x10) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x8004b706, 0x1000000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x1) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001540)={0x0, &(0x7f0000001700)=[@wr_crn={0x46, 0x20, {0x8, 0x100}}, @wr_drn={0x6e, 0x20, {0x7, 0xb8}}, @uexit={0x0, 0x18, 0xc09}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0xffffffff, 0x2}}, @wrmsr={0x1e, 0x20, {0xbd4, 0x7}}, @in_dx={0x82, 0x20, {0x4c0d, 0x4}}, @set_irq_handler={0xbe, 0x20, {0x5b, 0x2}}, @rdmsr={0x32, 0x18, {0x201}}], 0x100}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000001800)) listen(r2, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 0s ago: executing program 0 (id=1258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff0200"], 0x340a) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x801, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008011}, 0x48000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r5) syz_usb_connect(0x2, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008427d120b7201307ba3a0102030109026f0001000010000904"], 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf25070a000012000200fc000000000000000000000000000001080004006401010212000300fe8000000000000000000000000000aad8dd8ee1004cfba511ec1fed75efe77f6c6cad2c4db215755c089b4b66511926ecfd0c241da29187770a7e63d923118d76e9f0996ba65b8070480c6d53a2c6a5b7b27547d7777d8c0b2ee99abc99"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x4800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x0, 0x13, 0xe1}, @IEEE802154_ATTR_DURATION={0xfffffffffffffdbd, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x815) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001020000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB="46f5a1"], 0x0) kernel console output (not intermixed with test programs): a.94 [ 247.008577][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.018862][ T24] usb 5-1: config 0 descriptor?? [ 247.025722][ T5910] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 247.035336][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.047837][ T5910] usb 4-1: config 0 has no interface number 0 [ 247.054157][ T5910] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 247.064319][ T5910] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.079485][ T5910] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 247.088935][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.097051][ T5910] usb 4-1: Product: syz [ 247.101252][ T5910] usb 4-1: Manufacturer: syz [ 247.105983][ T5910] usb 4-1: SerialNumber: syz [ 247.112539][ T5910] usb 4-1: config 0 descriptor?? [ 247.239031][ T8855] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 247.433408][ T43] usb 1-1: USB disconnect, device number 65 [ 247.520823][ T5910] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 247.537781][ T5910] usb 4-1: USB disconnect, device number 66 [ 247.793128][ T43] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 247.933218][ T43] usb 1-1: device descriptor read/64, error -71 [ 248.173164][ T43] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 248.303178][ T5910] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 248.303178][ T43] usb 1-1: device descriptor read/64, error -71 [ 248.423556][ T43] usb usb1-port1: attempt power cycle [ 248.478327][ T5910] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.487600][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.495641][ T5910] usb 4-1: Product: syz [ 248.499913][ T5910] usb 4-1: Manufacturer: syz [ 248.504554][ T5910] usb 4-1: SerialNumber: syz [ 248.514921][ T5910] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 248.532385][ T5870] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.763184][ T43] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 248.783647][ T43] usb 1-1: device descriptor read/8, error -71 [ 248.940047][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.948881][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.006257][ T5910] usb 4-1: USB disconnect, device number 67 [ 249.023887][ T43] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 249.045087][ T43] usb 1-1: device descriptor read/8, error -71 [ 249.153763][ T43] usb usb1-port1: unable to enumerate USB device [ 249.579145][ T8855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.604182][ T5870] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 249.621409][ T24] usb 5-1: USB disconnect, device number 40 [ 249.631745][ T5870] ath9k_htc: Failed to initialize the device [ 249.639790][ T5910] usb 4-1: ath9k_htc: USB layer deinitialized [ 249.699419][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 249.715302][ T8876] x_tables: duplicate underflow at hook 1 [ 250.123161][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 250.143173][ T5824] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 250.273167][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 250.278388][ T5824] usb 2-1: device descriptor read/64, error -71 [ 250.286558][ T24] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.297739][ T24] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.307686][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.314440][ T24] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 250.323532][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.343162][ T24] usb 5-1: config 0 descriptor?? [ 250.533741][ T5824] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 250.663175][ T5824] usb 2-1: device descriptor read/64, error -71 [ 250.760703][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.770943][ T24] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 250.775968][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.781688][ T5824] usb usb2-port1: attempt power cycle [ 250.791691][ T24] holtek 0003:1241:5015.000F: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 250.804196][ T24] holtek 0003:1241:5015.000F: no inputs found [ 250.959613][ T5910] usb 5-1: USB disconnect, device number 41 [ 251.144244][ T5824] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 251.165442][ T5824] usb 2-1: device descriptor read/8, error -71 [ 251.406152][ T5824] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 251.443950][ T5824] usb 2-1: device descriptor read/8, error -71 [ 251.483368][ T5910] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 251.554528][ T5824] usb usb2-port1: unable to enumerate USB device [ 251.653766][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 251.660147][ T5910] usb 1-1: config 0 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.673368][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.680001][ T5910] usb 1-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 251.683177][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 251.689137][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.707158][ T5910] usb 1-1: config 0 descriptor?? [ 251.823178][ T24] usb 4-1: device descriptor read/64, error -71 [ 252.063400][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 252.069909][ T8929] FAULT_INJECTION: forcing a failure. [ 252.069909][ T8929] name failslab, interval 1, probability 0, space 0, times 0 [ 252.083976][ T8929] CPU: 1 UID: 0 PID: 8929 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(full) [ 252.084000][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.084011][ T8929] Call Trace: [ 252.084019][ T8929] [ 252.084028][ T8929] dump_stack_lvl+0x189/0x250 [ 252.084056][ T8929] ? __pfx____ratelimit+0x10/0x10 [ 252.084072][ T8929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.084085][ T8929] ? __pfx__printk+0x10/0x10 [ 252.084111][ T8929] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 252.084139][ T8929] should_fail_ex+0x414/0x560 [ 252.084173][ T8929] should_failslab+0xa8/0x100 [ 252.084196][ T8929] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 252.084210][ T8929] ? __alloc_skb+0x112/0x2d0 [ 252.084228][ T8929] __alloc_skb+0x112/0x2d0 [ 252.084243][ T8929] mr6_netlink_event+0xb6/0x190 [ 252.084265][ T8929] mroute_clean_tables+0x118b/0x1900 [ 252.084311][ T8929] ? mroute_clean_tables+0x541/0x1900 [ 252.084339][ T8929] ? __pfx_mroute_clean_tables+0x10/0x10 [ 252.084360][ T8929] ? _copy_from_user+0x94/0xb0 [ 252.084376][ T8929] ip6_mroute_setsockopt+0xa95/0xf00 [ 252.084395][ T8929] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 252.084454][ T8929] do_ipv6_setsockopt+0x35a/0x2eb0 [ 252.084489][ T8929] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 252.084510][ T8929] ? aa_label_sk_perm+0x4cc/0x630 [ 252.084521][ T8929] ? get_pid_task+0x20/0x1f0 [ 252.084540][ T8929] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 252.084570][ T8929] ? vfs_write+0x956/0xb30 [ 252.084594][ T8929] ? __pfx___might_resched+0x10/0x10 [ 252.084624][ T8929] ? __lock_acquire+0xab9/0xd20 [ 252.084645][ T8929] ipv6_setsockopt+0x59/0x170 [ 252.084661][ T8929] rawv6_setsockopt+0x23b/0x5b0 [ 252.084678][ T8929] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 252.084693][ T8929] ? aa_sock_opt_perm+0xff/0x1b0 [ 252.084717][ T8929] ? sock_common_setsockopt+0x36/0xc0 [ 252.084739][ T8929] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.084765][ T8929] do_sock_setsockopt+0x17c/0x1b0 [ 252.084792][ T8929] __x64_sys_setsockopt+0x13f/0x1b0 [ 252.084810][ T8929] do_syscall_64+0xfa/0xfa0 [ 252.084820][ T8929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.084831][ T8929] ? clear_bhb_loop+0x60/0xb0 [ 252.084843][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.084860][ T8929] RIP: 0033:0x7fcfcad8f6c9 [ 252.084877][ T8929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.084894][ T8929] RSP: 002b:00007fcfcbb9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.084915][ T8929] RAX: ffffffffffffffda RBX: 00007fcfcafe5fa0 RCX: 00007fcfcad8f6c9 [ 252.084929][ T8929] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 252.084938][ T8929] RBP: 00007fcfcbb9b090 R08: 0000000000000004 R09: 0000000000000000 [ 252.084944][ T8929] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 252.084951][ T8929] R13: 00007fcfcafe6038 R14: 00007fcfcafe5fa0 R15: 00007ffe8a101ce8 [ 252.084968][ T8929] [ 252.392483][ T5910] ntrig 0003:1B96:000D.0010: unknown main item tag 0x0 [ 252.404164][ T5910] ntrig 0003:1B96:000D.0010: hidraw0: USB HID v0.07 Device [HID 1b96:000d] on usb-dummy_hcd.0-1/input0 [ 252.443144][ T24] usb 4-1: device descriptor read/64, error -71 [ 252.553437][ T24] usb usb4-port1: attempt power cycle [ 252.596115][ T5910] usb 1-1: USB disconnect, device number 70 [ 252.723421][ T5890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 252.863185][ T5890] usb 5-1: device descriptor read/64, error -71 [ 252.893680][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 252.923937][ T24] usb 4-1: device descriptor read/8, error -71 [ 253.103198][ T5890] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 253.163583][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 253.185203][ T24] usb 4-1: device descriptor read/8, error -71 [ 253.243344][ T5890] usb 5-1: device descriptor read/64, error -71 [ 253.283250][ T5870] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 253.293748][ T24] usb usb4-port1: unable to enumerate USB device [ 253.353724][ T5890] usb usb5-port1: attempt power cycle [ 253.434797][ T5870] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.443413][ T5870] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 253.452510][ T5870] usb 2-1: config 220 has an invalid descriptor of length 158, skipping remainder of the config [ 253.463171][ T5910] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 253.471237][ T5870] usb 2-1: config 220 has no interface number 2 [ 253.478071][ T5870] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 253.491271][ T5870] usb 2-1: config 220 interface 0 has no altsetting 0 [ 253.498127][ T5870] usb 2-1: config 220 interface 76 has no altsetting 0 [ 253.505123][ T5870] usb 2-1: config 220 interface 1 has no altsetting 0 [ 253.514774][ T5870] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 253.523900][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.531927][ T5870] usb 2-1: Product: syz [ 253.536213][ T5870] usb 2-1: Manufacturer: syz [ 253.541140][ T5870] usb 2-1: SerialNumber: syz [ 253.623301][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 253.630637][ T5910] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 253.639284][ T5910] usb 1-1: config 0 has no interface number 0 [ 253.646120][ T5910] usb 1-1: New USB device found, idVendor=f223, idProduct=1005, bcdDevice=c1.9b [ 253.655397][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.665475][ T5910] usb 1-1: config 0 descriptor?? [ 253.703240][ T5890] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 253.723798][ T5890] usb 5-1: device descriptor read/8, error -71 [ 253.757807][ T5870] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 253.765289][ T5870] uvcvideo 2-1:220.0: No valid video chain found. [ 253.771806][ T5870] usb 2-1: selecting invalid altsetting 0 [ 253.789398][ T5870] usb 2-1: selecting invalid altsetting 0 [ 253.795232][ T5870] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 253.806598][ T5870] usb 2-1: USB disconnect, device number 69 [ 253.950808][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.959694][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.974312][ T5890] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 253.994458][ T5890] usb 5-1: device descriptor read/8, error -71 [ 254.103960][ T5890] usb usb5-port1: unable to enumerate USB device [ 254.111017][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 254.122610][ T5910] usb 1-1: USB disconnect, device number 71 [ 254.343142][ T8947] netlink: 108 bytes leftover after parsing attributes in process `syz.1.940'. [ 254.352229][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 254.395593][ T8949] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 254.703292][ T914] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 254.853210][ T5910] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 254.855728][ T914] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 254.869064][ T914] usb 2-1: config 0 has no interface number 0 [ 254.877867][ T914] usb 2-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=78.08 [ 254.887099][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.895138][ T914] usb 2-1: Product: syz [ 254.899312][ T914] usb 2-1: Manufacturer: syz [ 254.903942][ T914] usb 2-1: SerialNumber: syz [ 254.910427][ T914] usb 2-1: config 0 descriptor?? [ 254.915721][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 254.927270][ T914] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 254.933921][ T914] dw2102: su3000_power_ctrl: 1, initialized 0 [ 254.939996][ T914] dvb-usb: bulk message failed: -22 (2/0) [ 254.947853][ T914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.957687][ T914] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 254.965429][ T914] usb 2-1: media controller created [ 254.970704][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 254.977822][ T914] dw2102: i2c transfer failed. [ 254.982835][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 254.983159][ T5910] usb 4-1: device descriptor read/64, error -71 [ 254.988592][ T914] dw2102: i2c transfer failed. [ 255.000769][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 255.007545][ T914] dw2102: i2c transfer failed. [ 255.012309][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 255.018071][ T914] dw2102: i2c transfer failed. [ 255.022839][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 255.028809][ T914] dw2102: i2c transfer failed. [ 255.033647][ T914] dvb-usb: bulk message failed: -22 (6/0) [ 255.039373][ T914] dw2102: i2c transfer failed. [ 255.044176][ T914] dvb-usb: MAC address: 02:02:02:02:02:02 [ 255.057472][ T914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.065891][ T24] usb 1-1: device descriptor read/64, error -71 [ 255.081873][ T914] dvb-usb: bulk message failed: -22 (1/0) [ 255.087699][ T914] dw2102: command 0x51 transfer failed. [ 255.113844][ T914] DVB: Unable to find symbol m88rs2000_attach() [ 255.120105][ T914] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 255.184969][ T914] rc_core: IR keymap rc-su3000 not found [ 255.190635][ T914] Registered IR keymap rc-empty [ 255.196822][ T914] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 255.207898][ T914] input: TeVii S421 PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 255.218733][ T914] dvb-usb: schedule remote query interval to 150 msecs. [ 255.225820][ T914] dw2102: su3000_power_ctrl: 0, initialized 1 [ 255.231930][ T914] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 255.233258][ T5910] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 255.243983][ T914] usb 2-1: USB disconnect, device number 70 [ 255.306657][ T914] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 255.323138][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 255.383274][ T5910] usb 4-1: device descriptor read/64, error -71 [ 255.463156][ T24] usb 1-1: device descriptor read/64, error -71 [ 255.494331][ T5910] usb usb4-port1: attempt power cycle [ 255.574154][ T24] usb usb1-port1: attempt power cycle [ 255.687676][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694844][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.724823][ T8965] program syz.1.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.844254][ T5910] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 255.863787][ T5910] usb 4-1: device descriptor read/8, error -71 [ 255.893174][ T5890] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 255.913234][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 255.934078][ T24] usb 1-1: device descriptor read/8, error -71 [ 256.086182][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.107976][ T5890] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 256.117753][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.126168][ T5910] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 256.146774][ T5890] usb 5-1: config 0 descriptor?? [ 256.164128][ T5910] usb 4-1: device descriptor read/8, error -71 [ 256.176709][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 256.198379][ T30] audit: type=1800 audit(1762914079.324:90): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.951" name="bus" dev="overlay" ino=1333 res=0 errno=0 [ 256.204538][ T24] usb 1-1: device descriptor read/8, error -71 [ 256.242310][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.951'. [ 256.273475][ T5910] usb usb4-port1: unable to enumerate USB device [ 256.333369][ T24] usb usb1-port1: unable to enumerate USB device [ 256.935438][ T8984] netlink: 52 bytes leftover after parsing attributes in process `syz.1.955'. [ 256.946461][ T8984] netlink: 52 bytes leftover after parsing attributes in process `syz.1.955'. [ 256.958113][ T5890] letsketch 0003:6161:4D15.0011: Device info: 劸 [ 257.099030][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 257.107919][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 257.117358][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 257.194464][ T5890] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 257.202415][ T5890] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -71 [ 257.218394][ T5890] usb 5-1: USB disconnect, device number 46 [ 257.527195][ T8997] netlink: 'syz.3.960': attribute type 46 has an invalid length. [ 257.757646][ T9010] FAULT_INJECTION: forcing a failure. [ 257.757646][ T9010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.785278][ T9010] CPU: 1 UID: 0 PID: 9010 Comm: syz.0.966 Not tainted syzkaller #0 PREEMPT(full) [ 257.785306][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.785319][ T9010] Call Trace: [ 257.785327][ T9010] [ 257.785338][ T9010] dump_stack_lvl+0x189/0x250 [ 257.785368][ T9010] ? __pfx____ratelimit+0x10/0x10 [ 257.785396][ T9010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.785420][ T9010] ? __pfx__printk+0x10/0x10 [ 257.785456][ T9010] should_fail_ex+0x414/0x560 [ 257.785491][ T9010] _copy_to_user+0x31/0xb0 [ 257.785517][ T9010] simple_read_from_buffer+0xe1/0x170 [ 257.785540][ T9010] proc_fail_nth_read+0x1b3/0x220 [ 257.785570][ T9010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.785602][ T9010] ? rw_verify_area+0x2a6/0x4d0 [ 257.785632][ T9010] ? __lock_acquire+0xab9/0xd20 [ 257.785648][ T9010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.785680][ T9010] vfs_read+0x200/0xa30 [ 257.785696][ T9010] ? fdget_pos+0x247/0x320 [ 257.785721][ T9010] ? __pfx___mutex_lock+0x10/0x10 [ 257.785741][ T9010] ? __pfx_vfs_read+0x10/0x10 [ 257.785764][ T9010] ? __fget_files+0x2a/0x420 [ 257.785791][ T9010] ? __fget_files+0x3a0/0x420 [ 257.785818][ T9010] ? __fget_files+0x2a/0x420 [ 257.785853][ T9010] ksys_read+0x145/0x250 [ 257.785874][ T9010] ? __pfx_ksys_read+0x10/0x10 [ 257.785896][ T9010] ? do_syscall_64+0xbe/0xfa0 [ 257.785919][ T9010] do_syscall_64+0xfa/0xfa0 [ 257.785942][ T9010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.785961][ T9010] ? clear_bhb_loop+0x60/0xb0 [ 257.785985][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.786004][ T9010] RIP: 0033:0x7f312978e0dc [ 257.786021][ T9010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.786042][ T9010] RSP: 002b:00007f31279f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.786063][ T9010] RAX: ffffffffffffffda RBX: 00007f31299e5fa0 RCX: 00007f312978e0dc [ 257.786078][ T9010] RDX: 000000000000000f RSI: 00007f31279f60a0 RDI: 0000000000000004 [ 257.786090][ T9010] RBP: 00007f31279f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.786103][ T9010] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 257.786119][ T9010] R13: 00007f31299e6038 R14: 00007f31299e5fa0 R15: 00007ffc869efe58 [ 257.786154][ T9010] [ 258.076413][ T9018] tmpfs: Bad value for 'mpol' [ 258.164114][ T5910] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 258.323169][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 258.331426][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 258.340615][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.348797][ T5910] usb 4-1: Product: syz [ 258.355857][ T5910] usb 4-1: Manufacturer: syz [ 258.360466][ T5910] usb 4-1: SerialNumber: syz [ 258.367622][ T5910] usb 4-1: config 0 descriptor?? [ 258.375646][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 258.473169][ T914] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 258.493207][ T5907] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 258.503203][ T5890] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 258.623177][ T914] usb 1-1: Using ep0 maxpacket: 16 [ 258.630508][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 258.641848][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 258.653356][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 258.654342][ T5907] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 258.668521][ T914] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.669581][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.677786][ T914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.688945][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.689555][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.714532][ T914] usb 1-1: Product: syz [ 258.714744][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.730167][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.735643][ T914] usb 1-1: Manufacturer: syz [ 258.738425][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.742113][ T914] usb 1-1: SerialNumber: syz [ 258.750956][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.763936][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.765247][ T914] usb 1-1: config 0 descriptor?? [ 258.772894][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.783194][ T914] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 258.793173][ T5910] gspca_sonixj: reg_r err -32 [ 258.798274][ T914] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 258.802772][ T5910] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 258.816799][ T5890] usb 2-1: Product: syz [ 258.820969][ T5890] usb 2-1: Manufacturer: syz [ 258.825631][ T5890] usb 2-1: SerialNumber: syz [ 258.831564][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.844613][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.854795][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.867523][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.878246][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.887481][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.899124][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.906989][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.916417][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.927490][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.935447][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.944429][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.955394][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.963188][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.972457][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.983478][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.994811][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.013144][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.026724][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.033684][ T914] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 259.036144][ T5907] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 259.051790][ T5907] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 259.060415][ T5907] usb 5-1: Product: syz [ 259.064994][ T5907] usb 5-1: Manufacturer: syz [ 259.072055][ T5907] usb 5-1: SerialNumber: syz [ 259.077504][ T5890] usb 2-1: 0:2 : does not exist [ 259.082468][ T5890] usb 2-1: unit 9 not found! [ 259.091747][ T5907] usb 5-1: config 0 descriptor?? [ 259.104344][ T5890] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 259.115231][ T5907] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 259.116317][ T914] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 259.132326][ T5890] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 259.153098][ T914] em28xx 1-1:0.0: board has no eeprom [ 259.154290][ T5890] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 259.183244][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.199510][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.215443][ T5890] usb 2-1: USB disconnect, device number 71 [ 259.223256][ T914] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 259.239359][ T914] em28xx 1-1:0.0: dvb set to isoc mode. [ 259.251767][ T5824] em28xx 1-1:0.0: Binding DVB extension [ 259.253887][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.271489][ T914] usb 1-1: USB disconnect, device number 76 [ 259.291968][ T914] em28xx 1-1:0.0: Disconnecting em28xx [ 259.346987][ T5824] em28xx 1-1:0.0: Registering input extension [ 259.355234][ T914] em28xx 1-1:0.0: Closing input extension [ 259.370508][ T914] em28xx 1-1:0.0: Freeing device [ 259.375391][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 259.387924][ T5907] usb 5-1: USB disconnect, device number 47 [ 259.406872][ T5907] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 259.543245][ T5890] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 259.600306][ T9018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.969'. [ 259.704704][ T5890] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 259.713815][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.724119][ T5890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.733301][ T5890] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 259.742436][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.752725][ T5890] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 259.761497][ T5890] usb 2-1: no configuration chosen from 1 choice [ 259.933315][ T5890] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 260.063853][ T5890] usb 1-1: device descriptor read/64, error -71 [ 260.304229][ T5890] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 260.453152][ T5890] usb 1-1: device descriptor read/64, error -71 [ 260.523169][ T5824] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 260.563367][ T5890] usb usb1-port1: attempt power cycle [ 260.653196][ T5824] usb 5-1: device descriptor read/64, error -71 [ 260.798059][ T5907] usb 4-1: USB disconnect, device number 76 [ 260.840858][ T9044] fuse: Bad value for 'fd' [ 260.893415][ T5824] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 260.903651][ T5890] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 260.935072][ T5890] usb 1-1: device descriptor read/8, error -71 [ 261.023176][ T5824] usb 5-1: device descriptor read/64, error -71 [ 261.133540][ T5824] usb usb5-port1: attempt power cycle [ 261.173148][ T5890] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 261.193883][ T5890] usb 1-1: device descriptor read/8, error -71 [ 261.313457][ T5890] usb usb1-port1: unable to enumerate USB device [ 261.419998][ T9049] netlink: 168 bytes leftover after parsing attributes in process `syz.3.979'. [ 261.473636][ T5824] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 261.496482][ T5824] usb 5-1: device descriptor read/8, error -71 [ 261.718060][ T30] audit: type=1326 audit(1762914084.844:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.740954][ T5824] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 261.741283][ T30] audit: type=1326 audit(1762914084.844:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.767040][ T5824] usb 5-1: device descriptor read/8, error -71 [ 261.771247][ T30] audit: type=1326 audit(1762914084.844:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.799553][ T30] audit: type=1326 audit(1762914084.844:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.821870][ T30] audit: type=1326 audit(1762914084.844:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.846995][ T30] audit: type=1326 audit(1762914084.844:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.869259][ T30] audit: type=1326 audit(1762914084.844:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.891654][ T30] audit: type=1326 audit(1762914084.844:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.891861][ T5824] usb usb5-port1: unable to enumerate USB device [ 261.914480][ T30] audit: type=1326 audit(1762914084.844:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 261.943222][ T30] audit: type=1326 audit(1762914084.844:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910c58f6c9 code=0x7fc00000 [ 262.162002][ T5824] usb 2-1: USB disconnect, device number 72 [ 262.326103][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 262.363147][ T116] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 262.516662][ T116] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 262.524397][ T116] usb 4-1: can't read configurations, error -61 [ 262.653763][ T116] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 262.673208][ T5890] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 262.825531][ T116] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 262.834210][ T116] usb 4-1: can't read configurations, error -61 [ 262.840892][ T116] usb usb4-port1: attempt power cycle [ 262.848175][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.859411][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.870749][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 262.880304][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.889060][ T5890] usb 2-1: SerialNumber: syz [ 262.903919][ T5890] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 262.911954][ T5890] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 263.103606][ T914] usb 2-1: USB disconnect, device number 73 [ 263.193223][ T116] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 263.215434][ T116] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 263.223267][ T116] usb 4-1: can't read configurations, error -61 [ 263.223449][ T5824] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 263.353306][ T116] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 263.384423][ T5824] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.392813][ T5824] usb 1-1: config 0 has no interface number 0 [ 263.396741][ T116] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 263.404927][ T5824] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 263.409153][ T116] usb 4-1: can't read configurations, error -61 [ 263.417496][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.422584][ T116] usb usb4-port1: unable to enumerate USB device [ 263.430449][ T5824] usb 1-1: Product: syz [ 263.440881][ T5824] usb 1-1: Manufacturer: syz [ 263.446006][ T5824] usb 1-1: SerialNumber: syz [ 263.456245][ T5824] usb 1-1: config 0 descriptor?? [ 263.664739][ T5824] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 263.686013][ T5824] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.697204][ T5824] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 263.706203][ T5824] usb 1-1: media controller created [ 263.733439][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.917894][ T9111] sctp: [Deprecated]: syz.1.1001 (pid 9111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.917894][ T9111] Use struct sctp_sack_info instead [ 263.953943][ T914] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 264.107812][ T9114] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 264.108033][ T914] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 264.127524][ T914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 264.141142][ T914] usb 5-1: New USB device found, idVendor=056e, idProduct=0020, bcdDevice= 0.00 [ 264.150491][ T914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.170829][ T914] usb 5-1: config 0 descriptor?? [ 264.563548][ T116] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 264.589041][ T914] usbhid 5-1:0.0: can't add hid device: -71 [ 264.595283][ T914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 264.607299][ T914] usb 5-1: USB disconnect, device number 52 [ 264.715194][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.726296][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 264.737388][ T116] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 264.746506][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.756574][ T116] usb 2-1: config 0 descriptor?? [ 264.762318][ T9123] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 265.184996][ T116] lenovo 0003:17EF:60FE.0012: unknown main item tag 0x0 [ 265.190578][ T9128] netlink: 'syz.3.1006': attribute type 29 has an invalid length. [ 265.194510][ T116] lenovo 0003:17EF:60FE.0012: item fetching failed at offset 6/7 [ 265.202789][ T9130] netlink: 'syz.3.1006': attribute type 29 has an invalid length. [ 265.209030][ T116] lenovo 0003:17EF:60FE.0012: hid_parse failed [ 265.230791][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.233273][ T116] lenovo 0003:17EF:60FE.0012: probe with driver lenovo failed with error -22 [ 265.265075][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.276034][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.288688][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.298303][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.308141][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.321178][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.331842][ T9130] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 265.389741][ T5890] usb 2-1: USB disconnect, device number 74 [ 265.467078][ T9138] usb usb8: usbfs: process 9138 (syz.3.1009) did not claim interface 0 before use [ 265.979505][ T5824] usb 1-1: USB disconnect, device number 81 [ 266.170945][ T9156] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 266.229374][ T9161] overlay: filesystem on ./bus not supported as upperdir [ 266.672726][ T9189] netlink: 'syz.1.1022': attribute type 5 has an invalid length. [ 266.773195][ T5890] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 266.947815][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 266.956004][ T5890] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 266.966703][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.980226][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.991618][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.001643][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.014667][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.025179][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.084218][ T5910] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 267.103135][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 267.213332][ T5910] usb 5-1: device descriptor read/64, error -71 [ 267.246750][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 267.252252][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 267.253123][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 267.269346][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 267.279905][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.288308][ T43] usb 1-1: Product: syz [ 267.292608][ T43] usb 1-1: Manufacturer: syz [ 267.297258][ T43] usb 1-1: SerialNumber: syz [ 267.304816][ T43] usb 1-1: config 0 descriptor?? [ 267.453157][ T5910] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 267.512064][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.513512][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.530831][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.552249][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 267.569606][ T43] usb 1-1: USB disconnect, device number 82 [ 267.583187][ T5910] usb 5-1: device descriptor read/64, error -71 [ 267.604896][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.693644][ T5910] usb usb5-port1: attempt power cycle [ 267.873164][ T43] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 268.033220][ T5910] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 268.033219][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 268.047716][ T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 7 [ 268.058685][ T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 268.063948][ T5910] usb 5-1: device descriptor read/8, error -71 [ 268.069719][ T43] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.096233][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.105409][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.113578][ T43] usb 1-1: Product: syz [ 268.117741][ T43] usb 1-1: Manufacturer: syz [ 268.122319][ T43] usb 1-1: SerialNumber: syz [ 268.313161][ T5910] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 268.334988][ T5910] usb 5-1: device descriptor read/8, error -71 [ 268.453497][ T5910] usb usb5-port1: unable to enumerate USB device [ 268.874475][ T43] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 268.915610][ T43] usb 1-1: USB disconnect, device number 83 [ 268.966541][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.049923][ T9214] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 269.087395][ T9216] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 269.096282][ T9216] __nla_validate_parse: 61 callbacks suppressed [ 269.096300][ T9216] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1032'. [ 269.189128][ T9222] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1032'. [ 269.501978][ T24] usb 4-1: USB disconnect, device number 81 [ 269.553153][ T43] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 269.981655][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.006465][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 270.030993][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.066989][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 270.076305][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.099134][ T43] usb 1-1: config 0 descriptor?? [ 270.288998][ T9216] syz.1.1032 (9216): drop_caches: 2 [ 270.320894][ T24] usb 1-1: USB disconnect, device number 84 [ 270.605524][ T9264] vivid-000: disconnect [ 270.774542][ T9269] mkiss: ax0: crc mode is auto. [ 270.913350][ T5910] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 270.953116][ T43] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 271.064394][ T5910] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 271.075747][ T5910] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.086146][ T5910] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 271.099402][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.106087][ T5910] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 271.116357][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.126516][ T5910] usb 5-1: config 0 descriptor?? [ 271.134059][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 271.142647][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.154127][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.163737][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.173061][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.184045][ T43] usb 2-1: config 0 descriptor?? [ 271.323167][ T43] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 271.473166][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 271.480899][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.491194][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.502394][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.511600][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.519829][ T43] usb 1-1: Product: syz [ 271.524146][ T43] usb 1-1: Manufacturer: syz [ 271.528751][ T43] usb 1-1: SerialNumber: syz [ 271.543644][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 271.572305][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.585254][ T5910] usb 5-1: USB disconnect, device number 57 [ 271.596174][ T9259] vivid-000: reconnect [ 271.741338][ T43] usb 1-1: 0:2 : does not exist [ 271.751543][ T43] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 271.774738][ T43] usb 1-1: USB disconnect, device number 85 [ 271.799572][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.943224][ T5824] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 272.094545][ T5824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.104793][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.115242][ T5824] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.124535][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.132537][ T5824] usb 4-1: SerialNumber: syz [ 272.356520][ T5824] usb 4-1: 0:2 : does not exist [ 272.425807][ T5824] usb 4-1: USB disconnect, device number 82 [ 272.460098][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.527566][ T9301] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 272.834138][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 272.893942][ T5824] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 272.993156][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 273.000738][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 273.009121][ T24] usb 5-1: config 0 has no interface number 0 [ 273.017497][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 273.026608][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.034816][ T24] usb 5-1: Product: syz [ 273.038979][ T24] usb 5-1: Manufacturer: syz [ 273.043794][ T24] usb 5-1: SerialNumber: syz [ 273.050609][ T24] usb 5-1: config 0 descriptor?? [ 273.059528][ T24] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 273.067246][ T24] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 273.078037][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.086968][ T5824] usb 1-1: config 252 has an invalid interface number: 35 but max is 0 [ 273.095322][ T5824] usb 1-1: config 252 has no interface number 0 [ 273.102350][ T5824] usb 1-1: config 252 interface 35 has no altsetting 0 [ 273.111484][ T5824] usb 1-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=80.1c [ 273.120601][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.128745][ T5824] usb 1-1: Product: syz [ 273.132936][ T5824] usb 1-1: Manufacturer: syz [ 273.137617][ T5824] usb 1-1: SerialNumber: syz [ 273.258470][ T24] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 273.367637][ T5824] usb 1-1: USB disconnect, device number 86 [ 273.461474][ T24] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 273.669673][ T5824] usb 5-1: USB disconnect, device number 58 [ 273.677221][ T5824] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 273.722282][ T5890] usb 2-1: USB disconnect, device number 75 [ 273.729663][ T5910] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 273.756221][ T9313] nbd: illegal input index 895345970 [ 273.904912][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 273.915332][ T5910] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 273.933123][ T5910] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 273.952201][ T5910] usb 4-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 273.970178][ T5910] usb 4-1: config 0 has no interface number 0 [ 273.983179][ T5910] usb 4-1: config 0 interface 105 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.005336][ T5910] usb 4-1: New USB device found, idVendor=12d1, idProduct=5eb4, bcdDevice=c6.1e [ 274.015795][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.024824][ T5910] usb 4-1: Product: syz [ 274.029162][ T5910] usb 4-1: Manufacturer: syz [ 274.033889][ T5910] usb 4-1: SerialNumber: syz [ 274.042283][ T5910] usb 4-1: config 0 descriptor?? [ 274.051881][ T5910] option 4-1:0.105: GSM modem (1-port) converter detected [ 274.214167][ T43] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 274.405131][ T43] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 274.415723][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.427898][ T43] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 274.441506][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.449697][ T43] usb 1-1: Product: syz [ 274.456038][ T43] usb 1-1: Manufacturer: syz [ 274.460728][ T43] usb 1-1: SerialNumber: syz [ 274.471270][ T43] usb 1-1: config 0 descriptor?? [ 274.513160][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 274.663176][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 274.671272][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.693820][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.694405][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.706001][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.721586][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.725435][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.743571][ T5910] usb 1-1: USB disconnect, device number 87 [ 274.747140][ T43] usb 4-1: USB disconnect, device number 83 [ 274.763796][ T24] usb 5-1: config 0 descriptor?? [ 274.796616][ T43] option 4-1:0.105: device disconnected [ 274.856739][ T9333] syzkaller1: entered promiscuous mode [ 274.862371][ T9333] syzkaller1: entered allmulticast mode [ 274.998415][ T9335] ucma_write: process 749 (syz.3.1068) changed security contexts after opening file descriptor, this is not allowed. [ 275.217488][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.226721][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.243902][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 275.256716][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 275.281323][ T24] usb 5-1: USB disconnect, device number 59 [ 275.473580][ T9321] kexec: Could not allocate control_code_buffer [ 275.503136][ T5910] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 275.614187][ T5907] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 275.673134][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 275.680055][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.692407][ T5910] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.701542][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.711991][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.721940][ T5910] usb 4-1: config 0 descriptor?? [ 275.743162][ T5907] usb 1-1: device descriptor read/64, error -71 [ 275.993205][ T5907] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 276.073244][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 276.123233][ T5907] usb 1-1: device descriptor read/64, error -71 [ 276.226583][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 276.235859][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.244170][ T24] usb 5-1: Product: syz [ 276.247740][ T5907] usb usb1-port1: attempt power cycle [ 276.248347][ T24] usb 5-1: Manufacturer: syz [ 276.248365][ T24] usb 5-1: SerialNumber: syz [ 276.600446][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.609272][ T5907] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 276.615053][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.645018][ T5907] usb 1-1: device descriptor read/8, error -71 [ 276.833152][ T5910] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 276.875339][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: a2:22:16:c1:f3:86 [ 276.893149][ T24] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 276.894424][ T5907] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 276.926038][ T5907] usb 1-1: device descriptor read/8, error -71 [ 276.987759][ T5910] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 277.002260][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 277.015598][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 277.029066][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.042556][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.053345][ T5907] usb usb1-port1: unable to enumerate USB device [ 277.061090][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.072533][ T5910] usb 2-1: config 0 descriptor?? [ 277.082516][ T5907] usb 5-1: USB disconnect, device number 60 [ 277.090976][ T9362] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 277.306096][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 277.320730][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.341798][ T5910] usb 2-1: USB disconnect, device number 76 [ 277.933207][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 278.063129][ T24] usb 5-1: device descriptor read/64, error -71 [ 278.270817][ T5910] usb 4-1: USB disconnect, device number 84 [ 278.303208][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 278.389445][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 278.433146][ T24] usb 5-1: device descriptor read/64, error -71 [ 278.451172][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.465630][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.543846][ T24] usb usb5-port1: attempt power cycle [ 278.783154][ T5910] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 278.883735][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 278.903990][ T24] usb 5-1: device descriptor read/8, error -71 [ 279.143196][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 279.165422][ T24] usb 5-1: device descriptor read/8, error -71 [ 279.283924][ T24] usb usb5-port1: unable to enumerate USB device [ 279.413629][ T5890] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 279.513131][ T116] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 279.530614][ T9425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.573116][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 279.580877][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.593687][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 279.606254][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 279.617699][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 279.627973][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.644153][ T5890] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 279.654073][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 279.662167][ T5890] usb 4-1: Product: syz [ 279.667138][ T5890] usb 4-1: Manufacturer: syz [ 279.671775][ T5890] usb 4-1: SerialNumber: syz [ 279.680847][ T5890] usb 4-1: config 0 descriptor?? [ 279.699989][ T116] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.709471][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.720530][ T116] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 279.729888][ T116] usb 2-1: config 1 has no interface number 1 [ 279.737083][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.751593][ T116] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.761913][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.772893][ T116] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 279.786404][ T116] usb 2-1: config 1 has no interface number 1 [ 279.792564][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.807674][ T9425] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 279.820588][ T9425] overlayfs: missing 'lowerdir' [ 279.821811][ T116] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.835014][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.848095][ T116] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 279.858213][ T116] usb 2-1: config 1 has no interface number 1 [ 279.865602][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.880356][ T116] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.890185][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.901444][ T9420] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 279.910287][ T9420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.919743][ T116] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 279.932128][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.933545][ T5890] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 279.947999][ T116] usb 2-1: config 1 has no interface number 1 [ 279.954819][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.956239][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.968625][ T5890] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 279.990015][ T116] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.999317][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.010452][ T116] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 280.019837][ T116] usb 2-1: config 1 has no interface number 1 [ 280.026526][ T116] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 280.040068][ T116] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 280.067083][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.135743][ T5890] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 280.149445][ T5890] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 280.159420][ T5890] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 280.182767][ T5890] usb 4-1: USB disconnect, device number 85 [ 280.281804][ T116] usb 2-1: string descriptor 0 read error: -71 [ 280.298877][ T116] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 280.306588][ T116] usb 2-1: MIDIStreaming interface descriptor not found [ 280.365698][ T116] usb 2-1: USB disconnect, device number 77 [ 280.443203][ T5939] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 280.593177][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 280.599958][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.610211][ T5939] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.619320][ T5939] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.628422][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.644181][ T5939] usb 1-1: config 0 descriptor?? [ 281.073177][ T5939] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 281.233844][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 281.250320][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 281.272508][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 281.294553][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 281.325653][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.346057][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 281.359414][ T5939] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 281.372815][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.382881][ T5939] usb 4-1: Product: syz [ 281.388168][ T5939] usb 4-1: Manufacturer: syz [ 281.394520][ T5939] usb 4-1: SerialNumber: syz [ 281.406073][ T5939] usb 4-1: config 0 descriptor?? [ 281.409931][ T9456] netlink: 'syz.4.1098': attribute type 16 has an invalid length. [ 281.416292][ T5939] port100 4-1:0.0: NFC: Could not get supported command types [ 281.420188][ T9456] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1098'. [ 281.440049][ T9456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1098'. [ 281.488562][ T9458] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1099'. [ 281.499770][ T9458] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 281.583153][ T5939] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 281.734829][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.745986][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 281.753660][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 281.762701][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.773696][ T5939] usb 2-1: config 0 descriptor?? [ 281.893308][ T24] usb 5-1: device descriptor read/64, error -71 [ 282.153182][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 282.191758][ T5939] magicmouse 0003:05AC:0323.0013: unknown main item tag 0x0 [ 282.199228][ T5939] magicmouse 0003:05AC:0323.0013: unknown main item tag 0x0 [ 282.208830][ T5939] magicmouse 0003:05AC:0323.0013: hidraw0: USB HID v0.0c Device [HID 05ac:0323] on usb-dummy_hcd.1-1/input0 [ 282.293195][ T24] usb 5-1: device descriptor read/64, error -71 [ 282.389208][ T5939] usb 2-1: USB disconnect, device number 78 [ 282.403743][ T24] usb usb5-port1: attempt power cycle [ 282.743136][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 282.763839][ T24] usb 5-1: device descriptor read/8, error -71 [ 282.925741][ T9463] fuse: Bad value for 'fd' [ 283.013175][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 283.033980][ T24] usb 5-1: device descriptor read/8, error -71 [ 283.143513][ T24] usb usb5-port1: unable to enumerate USB device [ 283.183175][ T5939] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 283.227291][ T5907] usb 1-1: USB disconnect, device number 93 [ 283.343178][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 283.351916][ T5939] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 283.361200][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 283.369787][ T5939] usb 2-1: Product: syz [ 283.374225][ T5939] usb 2-1: Manufacturer: syz [ 283.378830][ T5939] usb 2-1: SerialNumber: syz [ 283.386389][ T5939] usb 2-1: config 0 descriptor?? [ 283.594920][ T5833] Bluetooth: hci3: Malformed LE Event: 0x0d [ 283.698397][ T5907] usb 4-1: USB disconnect, device number 86 [ 284.073146][ T116] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 284.183154][ T5939] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 284.245958][ T116] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 284.257317][ T116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.264492][ T116] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 284.273895][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.285092][ T116] usb 1-1: config 0 descriptor?? [ 284.301104][ T9469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 284.334213][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 284.341653][ T5939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.350910][ T5939] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 284.360019][ T5939] usb 4-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 1023 [ 284.372055][ T5939] usb 4-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 284.382289][ T5939] usb 4-1: config 1 interface 0 has no altsetting 0 [ 284.392885][ T5939] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 284.402513][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.411024][ T5939] usb 4-1: Product: syz [ 284.418234][ T5939] usb 4-1: Manufacturer: 툆굌␹㠀䭋昵菿챓低Ǫᆢꭵ㧂螧캉ꇆ卝鋐깛ᔵ謆謔 [ 284.428862][ T5939] usb 4-1: SerialNumber: syz [ 284.438303][ T9473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.447108][ T9473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.524973][ T116] pantherlord 0003:0E8F:0003.0014: unexpected long global item [ 284.543588][ T116] pantherlord 0003:0E8F:0003.0014: parse failed [ 284.550191][ T116] pantherlord 0003:0E8F:0003.0014: probe with driver pantherlord failed with error -22 [ 284.606105][ T116] usb 1-1: USB disconnect, device number 94 [ 284.629078][ T9478] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1105'. [ 284.829201][ T9478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.845539][ T9478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.859180][ T9478] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 284.869261][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.876760][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.889887][ T9478] bond0 (unregistering): Released all slaves [ 285.314802][ T9487] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 285.443296][ T116] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 285.613186][ T43] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 285.625020][ T116] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 285.633196][ T116] usb 5-1: config 0 has no interface number 0 [ 285.639309][ T116] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 285.650940][ T116] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 285.664166][ T116] usb 5-1: config 0 interface 49 has no altsetting 0 [ 285.676536][ T116] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 285.685735][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 285.693643][ T5833] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 285.711994][ T5890] usb 2-1: USB disconnect, device number 79 [ 285.749995][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.763276][ T116] usb 5-1: Product: syz [ 285.763600][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 285.767492][ T116] usb 5-1: Manufacturer: syz [ 285.778895][ T116] usb 5-1: SerialNumber: syz [ 285.793744][ T116] usb 5-1: config 0 descriptor?? [ 285.796599][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.811167][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.824960][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.837444][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.854506][ T43] usb 1-1: config 0 descriptor?? [ 285.870257][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 285.879942][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 285.889738][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 286.018231][ T116] usb 5-1: USB disconnect, device number 69 [ 286.708951][ T9499] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1113'. [ 286.723384][ T5824] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 286.872797][ T9502] overlay: ./file0 is not a directory [ 286.880075][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 286.897714][ T5939] usblp0: Disabling reads from problematic bidirectional printer [ 286.911211][ T5824] usb 2-1: config 9 has an invalid interface number: 202 but max is 0 [ 286.929955][ T5824] usb 2-1: config 9 has no interface number 0 [ 286.937290][ T5824] usb 2-1: config 9 interface 202 has no altsetting 0 [ 286.944576][ T5939] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 13 proto 2 vid 0x03F0 pid 0x0004 [ 286.972180][ T5824] usb 2-1: New USB device found, idVendor=16d8, idProduct=6803, bcdDevice=c5.96 [ 286.985658][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.995458][ T5939] usb 4-1: USB disconnect, device number 87 [ 287.005288][ T5824] usb 2-1: Product: syz [ 287.011535][ T5824] usb 2-1: Manufacturer: syz [ 287.017108][ T5824] usb 2-1: SerialNumber: syz [ 287.022398][ T5939] usblp0: removed [ 287.173201][ T116] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 287.295773][ T5824] usb 2-1: USB disconnect, device number 80 [ 287.323334][ T5939] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 287.336379][ T116] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 287.347758][ T116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.357873][ T116] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.367126][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.375213][ T116] usb 5-1: SerialNumber: syz [ 287.473143][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 287.480123][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.490383][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.503436][ T5939] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.512482][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.523348][ T5939] usb 4-1: config 0 descriptor?? [ 287.534142][ T5939] hub 4-1:0.0: bad descriptor, ignoring hub [ 287.541786][ T5939] hub 4-1:0.0: probe with driver hub failed with error -5 [ 287.550569][ T5939] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 287.591194][ T116] usb 5-1: 0:2 : does not exist [ 287.596834][ T116] usb 5-1: unit 255 not found! [ 287.609426][ T116] usb 5-1: USB disconnect, device number 70 [ 287.633361][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.839039][ T9506] syzkaller1: entered promiscuous mode [ 287.851410][ T9506] syzkaller1: entered allmulticast mode [ 287.860204][ T9506] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 288.373130][ T116] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 288.503190][ T116] usb 5-1: device descriptor read/64, error -71 [ 288.653698][ T5939] usb 1-1: reset high-speed USB device number 95 using dummy_hcd [ 288.665052][ T5939] usb 1-1: device reset changed ep0 maxpacket size! [ 288.674232][ T5939] usb 1-1: USB disconnect, device number 95 [ 288.743207][ T116] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 288.873133][ T116] usb 5-1: device descriptor read/64, error -71 [ 288.973268][ T5939] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 288.984978][ T116] usb usb5-port1: attempt power cycle [ 289.153188][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 289.160517][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.171559][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.182793][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 289.191893][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.202296][ T5939] usb 1-1: config 0 descriptor?? [ 289.323114][ T116] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 289.343166][ T43] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 289.343779][ T116] usb 5-1: device descriptor read/8, error -71 [ 289.422934][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.433841][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.437683][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.442806][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.460796][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.467995][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.475130][ T43] usb 2-1: device descriptor read/64, error -71 [ 289.481463][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.489972][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.497470][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.504394][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.511266][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.518214][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.525209][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.532066][ T5939] apple 0003:05AC:024B.0015: unknown main item tag 0x0 [ 289.542099][ T5939] apple 0003:05AC:024B.0015: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 289.603346][ T116] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 289.623667][ T116] usb 5-1: device descriptor read/8, error -71 [ 289.713388][ T43] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 289.723249][ T5939] usb 1-1: USB disconnect, device number 96 [ 289.734184][ T116] usb usb5-port1: unable to enumerate USB device [ 289.863291][ T43] usb 2-1: device descriptor read/64, error -71 [ 289.975227][ T43] usb usb2-port1: attempt power cycle [ 290.123458][ T116] usb 4-1: USB disconnect, device number 88 [ 290.182481][ T9540] netlink: 'syz.3.1125': attribute type 11 has an invalid length. [ 290.314231][ T43] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 290.344147][ T43] usb 2-1: device descriptor read/8, error -71 [ 290.454531][ T9549] ALSA: mixer_oss: invalid OSS volume '' [ 290.543121][ T914] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 290.583470][ T43] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 290.603535][ T43] usb 2-1: device descriptor read/8, error -71 [ 290.703171][ T914] usb 1-1: Using ep0 maxpacket: 32 [ 290.710440][ T914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.721758][ T43] usb usb2-port1: unable to enumerate USB device [ 290.728200][ T914] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.742184][ T914] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.751301][ T914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.761057][ T914] usb 1-1: config 0 descriptor?? [ 290.772207][ T914] hub 1-1:0.0: bad descriptor, ignoring hub [ 290.778283][ T914] hub 1-1:0.0: probe with driver hub failed with error -5 [ 290.786558][ T914] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 290.794345][ T5939] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 290.933184][ T5939] usb 4-1: device descriptor read/64, error -71 [ 291.175237][ T5939] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 291.313216][ T5939] usb 4-1: device descriptor read/64, error -71 [ 291.423566][ T5939] usb usb4-port1: attempt power cycle [ 291.763148][ T5939] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 291.783670][ T5939] usb 4-1: device descriptor read/8, error -71 [ 291.793419][ T43] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 291.923320][ T43] usb 5-1: device descriptor read/64, error -71 [ 292.023193][ T5939] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 292.047766][ T5939] usb 4-1: device descriptor read/8, error -71 [ 292.106655][ T9570] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1134'. [ 292.130871][ T9570] fuse: Bad value for 'fd' [ 292.163566][ T43] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 292.171820][ T5939] usb usb4-port1: unable to enumerate USB device [ 292.303208][ T43] usb 5-1: device descriptor read/64, error -71 [ 292.414647][ T43] usb usb5-port1: attempt power cycle [ 292.743156][ T116] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 292.763143][ T43] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 292.783696][ T43] usb 5-1: device descriptor read/8, error -71 [ 292.895427][ T116] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.903740][ T116] usb 2-1: not running at top speed; connect to a high speed hub [ 292.915103][ T116] usb 2-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=d5.4c [ 292.924444][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.932441][ T116] usb 2-1: Product: syz [ 292.936706][ T116] usb 2-1: Manufacturer: syz [ 292.941299][ T116] usb 2-1: SerialNumber: syz [ 293.023163][ T43] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 293.049562][ T43] usb 5-1: device descriptor read/8, error -71 [ 293.163584][ T43] usb usb5-port1: unable to enumerate USB device [ 293.281125][ T116] usb 2-1: USB disconnect, device number 85 [ 293.597022][ T5890] usb 1-1: reset high-speed USB device number 97 using dummy_hcd [ 293.763829][ T5890] usb 1-1: device firmware changed [ 293.769794][ T5890] usb 1-1: USB disconnect, device number 97 [ 293.861517][ T9582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 293.953138][ T116] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 294.008772][ T9594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1143'. [ 294.063236][ T5890] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 294.103175][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 294.110334][ T116] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.119114][ T116] usb 4-1: config 6 has an invalid interface number: 106 but max is 0 [ 294.127441][ T116] usb 4-1: config 6 has no interface number 0 [ 294.133869][ T116] usb 4-1: config 6 interface 106 has no altsetting 0 [ 294.143111][ T116] usb 4-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=f8.29 [ 294.152254][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.160385][ T116] usb 4-1: Product: syz [ 294.164601][ T116] usb 4-1: Manufacturer: syz [ 294.169194][ T116] usb 4-1: SerialNumber: syz [ 294.213158][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 294.219983][ T5890] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 294.229183][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.240723][ T5890] usb 1-1: config 0 descriptor?? [ 294.265683][ T914] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 294.268832][ T5890] as10x_usb: device has been detected [ 294.286056][ T5890] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 294.314742][ T5890] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 294.351812][ T5890] as10x_usb: error during firmware upload part1 [ 294.365009][ T5890] Registered device nBox DVB-T Dongle [ 294.395903][ T116] rtsx_usb 4-1:6.106: probe with driver rtsx_usb failed with error -22 [ 294.404244][ T9596] vivid-000: disconnect [ 294.414906][ T116] usb 4-1: USB disconnect, device number 93 [ 294.434746][ T914] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.445541][ T914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.467408][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.477080][ T914] usb 2-1: config 0 descriptor?? [ 294.484419][ T914] cp210x 2-1:0.0: cp210x converter detected [ 294.491125][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.692106][ T914] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 294.700125][ T914] cp210x 2-1:0.0: querying part number failed [ 294.710911][ T914] usb 2-1: cp210x converter now attached to ttyUSB0 [ 294.773220][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 294.923153][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 294.929986][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.940340][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.953450][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.962506][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.973581][ T43] usb 5-1: config 0 descriptor?? [ 294.993170][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 294.999120][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 295.008782][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 295.293127][ T43] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 295.464930][ T43] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 295.473366][ T43] usb 4-1: config 0 has no interface number 0 [ 295.481333][ T43] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 295.490470][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.498767][ T43] usb 4-1: Product: syz [ 295.502952][ T43] usb 4-1: Manufacturer: syz [ 295.507654][ T43] usb 4-1: SerialNumber: syz [ 295.514260][ T43] usb 4-1: config 0 descriptor?? [ 296.437475][ T914] usb 1-1: USB disconnect, device number 98 [ 296.472618][ T914] Unregistered device nBox DVB-T Dongle [ 296.479703][ T914] as10x_usb: device has been disconnected [ 296.525701][ T43] usb 4-1: non-Atmel transceiver xxxxad00 [ 296.737155][ T43] usb 4-1: Firmware version (0.0) predates our first public release. [ 296.745693][ T43] usb 4-1: Please update to version 0.2 or newer [ 296.754400][ T43] usb 4-1: atusb_probe: initialization failed, error = -19 [ 296.768591][ T43] usb 4-1: USB disconnect, device number 94 [ 296.795165][ T914] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 296.933282][ T914] usb 1-1: device descriptor read/64, error -71 [ 297.013122][ T43] usb 2-1: USB disconnect, device number 86 [ 297.026921][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.036731][ T43] cp210x 2-1:0.0: device disconnected [ 297.173218][ T914] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 297.303189][ T914] usb 1-1: device descriptor read/64, error -71 [ 297.406294][ T9615] openvswitch: netlink: Message has 4 unknown bytes. [ 297.413460][ T914] usb usb1-port1: attempt power cycle [ 297.453134][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 297.463224][ T9617] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 297.605624][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.616693][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.628752][ T43] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 297.638077][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.653839][ T43] usb 2-1: config 0 descriptor?? [ 297.663600][ T5890] usb 5-1: USB disconnect, device number 79 [ 297.753650][ T116] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 297.763183][ T914] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 297.783563][ T914] usb 1-1: device descriptor read/8, error -71 [ 297.903120][ T116] usb 4-1: Using ep0 maxpacket: 8 [ 297.911585][ T116] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 297.920732][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.928790][ T116] usb 4-1: Product: syz [ 297.932964][ T116] usb 4-1: Manufacturer: syz [ 297.937796][ T116] usb 4-1: SerialNumber: syz [ 297.943179][ T5824] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 298.023130][ T914] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 298.044177][ T914] usb 1-1: device descriptor read/8, error -71 [ 298.071296][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 298.077882][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.090164][ T43] usb 2-1: USB disconnect, device number 87 [ 298.098049][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.113558][ T5824] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 298.122629][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.133229][ T5824] usb 5-1: config 0 descriptor?? [ 298.154811][ T914] usb usb1-port1: unable to enumerate USB device [ 298.163997][ T116] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 298.357640][ T914] usb 4-1: USB disconnect, device number 95 [ 298.366012][ T914] usblp0: removed [ 298.546531][ T5824] pyra 0003:1E7D:2CF6.0016: item fetching failed at offset 2/3 [ 298.554614][ T5824] pyra 0003:1E7D:2CF6.0016: parse failed [ 298.560412][ T5824] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -22 [ 298.746917][ T116] usb 5-1: USB disconnect, device number 80 [ 299.023270][ T5824] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 299.173139][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 299.181588][ T5824] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 299.190716][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=79, SerialNumber=3 [ 299.198917][ T5824] usb 2-1: Product: syz [ 299.203409][ T5824] usb 2-1: Manufacturer: syz [ 299.208011][ T5824] usb 2-1: SerialNumber: syz [ 299.215457][ T5824] usb 2-1: config 0 descriptor?? [ 299.305504][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 299.305522][ T30] audit: type=1326 audit(1762914122.434:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.4.1159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfcad8f6c9 code=0x0 [ 299.426136][ T9633] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 299.432633][ T9633] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 299.439575][ T9633] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 299.446260][ T9633] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 299.454532][ T9633] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 299.461025][ T9633] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 299.563420][ T5824] usb 2-1: USB disconnect, device number 88 [ 299.670818][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.690547][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.702619][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.713395][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.913211][ T116] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 300.063156][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 300.070330][ T116] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.079230][ T116] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 300.090388][ T116] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 300.101574][ T116] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 300.110789][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.118877][ T116] usb 1-1: Product: syz [ 300.124161][ T116] usb 1-1: Manufacturer: syz [ 300.129253][ T116] usb 1-1: SerialNumber: syz [ 300.253175][ T5910] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 300.357280][ T116] usb 1-1: USB disconnect, device number 103 [ 300.408323][ T5910] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 300.417450][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.425514][ T5910] usb 2-1: Product: syz [ 300.429677][ T5910] usb 2-1: Manufacturer: syz [ 300.434444][ T5890] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 300.442349][ T5910] usb 2-1: SerialNumber: syz [ 300.623454][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 300.630390][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.640615][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.653951][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.663163][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.677256][ T5890] usb 5-1: config 0 descriptor?? [ 300.688314][ T5890] hub 5-1:0.0: bad descriptor, ignoring hub [ 300.694329][ T5890] hub 5-1:0.0: probe with driver hub failed with error -5 [ 300.702604][ T5890] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 300.803241][ T5824] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 300.864055][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 300.877284][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 300.953155][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 300.960257][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 300.980492][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 301.004876][ T5824] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 301.014452][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.022461][ T5824] usb 4-1: Product: syz [ 301.033479][ T5824] usb 4-1: Manufacturer: syz [ 301.043506][ T5824] usb 4-1: SerialNumber: syz [ 301.055926][ T5824] usb 4-1: config 0 descriptor?? [ 301.094867][ T9655] XFS (nbd0): SB validate failed with error -5. [ 301.165432][ T5824] rc_core: IR keymap rc-streamzap not found [ 301.171373][ T5824] Registered IR keymap rc-empty [ 301.190263][ T5824] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 301.206877][ T5824] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 301.324092][ T116] usb 4-1: USB disconnect, device number 96 [ 302.138824][ T9675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 302.145585][ T9675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.157784][ T9675] vhci_hcd vhci_hcd.0: Device attached [ 302.168558][ T9676] vhci_hcd: cannot find the pending unlink 7 [ 302.176159][ T9676] vhci_hcd: connection closed [ 302.178926][ T6126] vhci_hcd vhci_hcd.0: stop threads [ 302.190925][ T6126] vhci_hcd vhci_hcd.0: release socket [ 302.196488][ T6126] vhci_hcd vhci_hcd.0: disconnect device [ 302.343153][ T5824] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 302.493244][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 302.501543][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.511836][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.524878][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.534065][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.544512][ T5824] usb 4-1: config 0 descriptor?? [ 302.552346][ T5824] hub 4-1:0.0: bad descriptor, ignoring hub [ 302.558606][ T5824] hub 4-1:0.0: probe with driver hub failed with error -5 [ 302.567878][ T5824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 302.860382][ T9689] syzkaller1: entered promiscuous mode [ 302.866164][ T9689] syzkaller1: entered allmulticast mode [ 302.928841][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 302.939115][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 303.333650][ T5890] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 303.484067][ T5907] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 303.513143][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 303.520022][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.530145][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.540189][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 53835, setting to 1024 [ 303.551649][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 303.561856][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.575445][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.585019][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.664773][ T5907] usb 5-1: device firmware changed [ 303.670473][ T5907] usb 5-1: USB disconnect, device number 81 [ 303.800231][ T5890] usb 1-1: GET_CAPABILITIES returned 0 [ 303.805910][ T5890] usbtmc 1-1:16.0: can't read capabilities [ 303.973203][ T5907] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 304.123110][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 304.132320][ T5907] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 304.147990][ T5907] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 304.157123][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 304.166245][ T5907] usb 5-1: config 1 has no interface number 0 [ 304.172413][ T5907] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.183815][ T5907] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 304.196801][ T5907] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 304.205956][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.224444][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 304.309546][ T43] usb 1-1: USB disconnect, device number 104 [ 304.437976][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 304.633622][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.643532][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.722982][ T9705] delete_channel: no stack [ 304.730309][ T9705] delete_channel: no stack [ 304.790170][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 304.805294][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 304.818792][ T5910] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 304.839777][ T5910] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 304.859417][ T5910] usb 2-1: USB disconnect, device number 89 [ 304.871995][ T5824] usb 5-1: USB disconnect, device number 82 [ 304.885482][ T5824] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 305.183099][ T5939] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 305.200747][ T9723] binder: 9722:9723 ioctl 40046205 0 returned -22 [ 305.343114][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 305.349531][ T5939] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 305.358678][ T5939] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.369093][ T5939] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.382148][ T5939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.392016][ T43] usb 4-1: reset high-speed USB device number 97 using dummy_hcd [ 305.399902][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.420968][ T43] usb 4-1: device reset changed ep0 maxpacket size! [ 305.436430][ T5939] usbtmc 1-1:16.0: bulk endpoints not found [ 305.444971][ T43] usb 4-1: USB disconnect, device number 97 [ 305.453113][ T5910] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 305.474541][ T9728] binder: BINDER_SET_CONTEXT_MGR already set [ 305.482126][ T9728] binder: 9727:9728 ioctl 4018620d 200000000100 returned -16 [ 305.634622][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.637660][ T5939] usb 1-1: USB disconnect, device number 105 [ 305.645004][ T5910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.663729][ T5910] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.673319][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.681324][ T5910] usb 2-1: SerialNumber: syz [ 305.733437][ T5824] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 305.753145][ T43] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 305.883246][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 305.891667][ T5824] usb 5-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config [ 305.902573][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.902624][ T5910] usb 2-1: 0:2 : does not exist [ 305.912575][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 305.927163][ T43] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 305.933641][ T5910] usb 2-1: USB disconnect, device number 90 [ 305.938623][ T43] usb 4-1: config 0 has no interface number 0 [ 305.948647][ T5824] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.958319][ T43] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.971003][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.975515][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.981129][ T5824] usb 5-1: Product: syz [ 305.999555][ T5824] usb 5-1: Manufacturer: syz [ 306.005847][ T5824] usb 5-1: SerialNumber: syz [ 306.005995][ T43] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 306.021711][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.030681][ T43] usb 4-1: Product: syz [ 306.035950][ T43] usb 4-1: Manufacturer: syz [ 306.040714][ T43] usb 4-1: SerialNumber: syz [ 306.051607][ T43] usb 4-1: config 0 descriptor?? [ 306.222925][ T9732] PM: Enabling pm_trace changes system date and time during resume. [ 306.222925][ T9732] PM: Correct system time has to be restored manually after resume. [ 306.244015][ T9732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 306.248786][ T9728] binder: BINDER_SET_CONTEXT_MGR already set [ 306.250539][ T9732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.250747][ T9732] vhci_hcd vhci_hcd.0: Device attached [ 306.259018][ T9728] binder: 9727:9728 ioctl 4018620d 200000004a80 returned -16 [ 306.266722][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.290315][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.300880][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.311417][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.313353][ T5824] usb 5-1: 0:2 : does not exist [ 306.321647][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.326382][ T5824] usb 5-1: usbmixer: too many channels (33) in unit 5 [ 306.333614][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.355123][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.361789][ T5824] usb 5-1: USB disconnect, device number 83 [ 306.374610][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.390578][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.401130][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.431526][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.486193][ T43] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 306.496797][ T5910] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 306.504658][ T43] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 306.533200][ T5939] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 306.550634][ T43] usb 4-1: USB disconnect, device number 98 [ 306.693224][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 306.700269][ T5939] usb 1-1: config 0 has no interfaces? [ 306.706178][ T5939] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 306.715337][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.725672][ T5939] usb 1-1: config 0 descriptor?? [ 306.932695][ T9733] vhci_hcd: cannot find a urb of seqnum 795897719 max seqnum 1 [ 306.933555][ T5870] usb 1-1: USB disconnect, device number 106 [ 306.946670][ T6126] vhci_hcd vhci_hcd.0: stop threads [ 306.955143][ T6126] vhci_hcd vhci_hcd.0: release socket [ 306.964496][ T6126] vhci_hcd vhci_hcd.0: disconnect device [ 307.313253][ T5939] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 307.373174][ T5907] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 307.463132][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 307.469990][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 307.483241][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.502714][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.513176][ T5939] usb 2-1: Product: syz [ 307.517368][ T5939] usb 2-1: Manufacturer: syz [ 307.521970][ T5939] usb 2-1: SerialNumber: syz [ 307.553356][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 307.562271][ T5939] usb 2-1: config 0 descriptor?? [ 307.575509][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.580938][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.596884][ T9756] tmpfs: Unknown parameter 'quo' [ 307.612608][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.633427][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.634084][ T5939] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 307.642557][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.667749][ T5907] usb 4-1: config 0 descriptor?? [ 307.679908][ T5907] hub 4-1:0.0: bad descriptor, ignoring hub [ 307.707688][ T5907] hub 4-1:0.0: probe with driver hub failed with error -5 [ 307.729534][ T5907] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 308.185288][ T5939] em28xx 2-1:0.0: chip ID is em2840 [ 308.366539][ T5907] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 308.450571][ T5939] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.459669][ T5939] em28xx 2-1:0.0: board has no eeprom [ 308.523134][ T5939] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 308.526290][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.532410][ T5939] em28xx 2-1:0.0: dvb set to bulk mode. [ 308.540861][ T5907] usb 1-1: not running at top speed; connect to a high speed hub [ 308.545671][ T5824] em28xx 2-1:0.0: Binding DVB extension [ 308.556950][ T5907] usb 1-1: config 11 has an invalid interface number: 229 but max is 0 [ 308.563581][ T5939] usb 2-1: USB disconnect, device number 91 [ 308.574665][ T5939] em28xx 2-1:0.0: Disconnecting em28xx [ 308.580578][ T5907] usb 1-1: config 11 has no interface number 0 [ 308.604990][ T5907] usb 1-1: config 11 interface 229 has no altsetting 0 [ 308.617008][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 308.627330][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.637078][ T5907] usb 1-1: Product: syz [ 308.641493][ T5907] usb 1-1: Manufacturer: syz [ 308.646500][ T5907] usb 1-1: SerialNumber: syz [ 308.661430][ T5824] em28xx 2-1:0.0: Registering input extension [ 308.667830][ T5939] em28xx 2-1:0.0: Closing input extension [ 308.681916][ T5939] em28xx 2-1:0.0: Freeing device [ 308.898367][ T5907] usb 1-1: USB disconnect, device number 107 [ 308.898836][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.026597][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 309.080855][ T9782] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1206'. [ 309.843553][ T5890] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 309.943281][ T5907] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 310.003226][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 310.009871][ T5890] usb 2-1: config 255 has an invalid interface number: 207 but max is 0 [ 310.018569][ T5890] usb 2-1: config 255 has no interface number 0 [ 310.025280][ T5890] usb 2-1: config 255 interface 207 has no altsetting 0 [ 310.035745][ T5890] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34 [ 310.044947][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.052922][ T5890] usb 2-1: Product: syz [ 310.057177][ T5890] usb 2-1: Manufacturer: syz [ 310.061770][ T5890] usb 2-1: SerialNumber: syz [ 310.103285][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 310.110271][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.119444][ T5907] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 310.128673][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.136725][ T5907] usb 1-1: Product: syz [ 310.140922][ T5907] usb 1-1: Manufacturer: syz [ 310.146875][ T5907] usb 1-1: SerialNumber: syz [ 310.155475][ T5907] usb 1-1: config 0 descriptor?? [ 310.275405][ T24] usb 4-1: USB disconnect, device number 99 [ 310.281014][ T9800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.297335][ T9800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.403166][ T5890] peak_usb 2-1:255.207 can0: unable to request usb[type=0 value=1] err=-71 [ 310.463123][ T5890] peak_usb 2-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71) [ 310.585007][ T5890] peak_usb 2-1:255.207: probe with driver peak_usb failed with error -71 [ 310.621226][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1220'. [ 310.623191][ T5907] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 310.639233][ T5890] usb 2-1: USB disconnect, device number 92 [ 310.675285][ T9829] netlink: 'syz.3.1220': attribute type 21 has an invalid length. [ 310.687383][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 311.043263][ T5939] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 311.203195][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 311.210340][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.220749][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.238083][ T5939] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.256733][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.273151][ T5907] usb 1-1: USB disconnect, device number 108 [ 311.289642][ T5939] usb 4-1: Product: О [ 311.305870][ T5939] usb 4-1: Manufacturer: ꕐ暙諹糥㚢誮Žጂ瞥㙳읧릐⛾⢷梼禖⛔ᷜ鶶瀝荸恍Ʝ좓맹㄰鳽 [ 311.342221][ T5939] usb 4-1: SerialNumber: 鲹傪莀ⵅ㼁ﳦꋹ뻥閅빪蒻摝우緌圐熹엉覾ꨞ뀊㹂޼】솰䵨釹蔮迁㨅ዙ⩁쭞ͷ℅漎ꪾ瘚ᐪ黠⇻惖ﶺ륍懍⬉鈪絰㴳ỵ咙๤쭭賶苬꘨큶鑗烾쿹蠾뭃鬉 [ 311.349546][ T9839] netlink: 'syz.4.1222': attribute type 13 has an invalid length. [ 311.594394][ T5939] usb 4-1: 0:2 : does not exist [ 311.598313][ T5910] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 311.621853][ T5939] usb 4-1: USB disconnect, device number 100 [ 311.649646][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.763127][ T5907] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 311.903165][ T5907] usb 5-1: device descriptor read/64, error -71 [ 312.103164][ T5939] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 312.153703][ T5907] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 312.193211][ T24] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 312.267470][ T5939] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.277156][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.285251][ T5939] usb 4-1: Product: syz [ 312.289422][ T5939] usb 4-1: Manufacturer: syz [ 312.294088][ T5939] usb 4-1: SerialNumber: syz [ 312.303150][ T5907] usb 5-1: device descriptor read/64, error -71 [ 312.304506][ T5939] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.334294][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.353274][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 312.359892][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.370199][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.383437][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.392562][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.402984][ T24] usb 1-1: config 0 descriptor?? [ 312.412663][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 312.418725][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 312.428126][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 312.435924][ T5907] usb usb5-port1: attempt power cycle [ 312.551755][ T9856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.560850][ T9856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.764298][ T24] usb 4-1: USB disconnect, device number 101 [ 312.783187][ T5907] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 312.809321][ T5907] usb 5-1: device descriptor read/8, error -71 [ 313.064120][ T5907] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 313.083554][ T5907] usb 5-1: device descriptor read/8, error -71 [ 313.193390][ T5907] usb usb5-port1: unable to enumerate USB device [ 313.363377][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 313.371731][ T43] ath9k_htc: Failed to initialize the device [ 313.379999][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 313.678515][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 314.164266][ T5907] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 314.223119][ T5910] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 314.313158][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 314.320334][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.333689][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.342770][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.353818][ T5907] usb 2-1: config 0 descriptor?? [ 314.361784][ T5907] hub 2-1:0.0: bad descriptor, ignoring hub [ 314.368490][ T5907] hub 2-1:0.0: probe with driver hub failed with error -5 [ 314.375942][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 314.382444][ T5907] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 314.391778][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 314.406131][ T5910] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 314.415517][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 314.424663][ T5910] usb 4-1: Product: syz [ 314.428862][ T5910] usb 4-1: Manufacturer: syz [ 314.433986][ T5910] usb 4-1: SerialNumber: syz [ 314.440661][ T5910] usb 4-1: config 0 descriptor?? [ 314.447192][ T9911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 314.455590][ T5910] hub 4-1:0.0: bad descriptor, ignoring hub [ 314.461518][ T5910] hub 4-1:0.0: probe with driver hub failed with error -5 [ 314.903122][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 314.933216][ T5910] usb 4-1: reset high-speed USB device number 102 using dummy_hcd [ 314.941690][ T5910] usb 4-1: device reset changed ep0 maxpacket size! [ 314.949914][ T5910] usb 4-1: USB disconnect, device number 102 [ 315.018436][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 315.030879][ T24] IPVS: starting estimator thread 0... [ 315.053129][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 315.060104][ T43] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 315.070206][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.083782][ T5890] usb 1-1: USB disconnect, device number 109 [ 315.086670][ T43] usb 5-1: config 0 descriptor?? [ 315.107751][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 315.123700][ T9919] IPVS: using max 28 ests per chain, 67200 per kthread [ 315.147874][ T9926] input: syz0 as /devices/virtual/input/input26 [ 315.253118][ T5910] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 315.403194][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 315.409985][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.413149][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 315.421410][ T5910] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 315.437832][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.448440][ T5910] usb 4-1: config 0 descriptor?? [ 315.505869][ T9915] netlink: 10916 bytes leftover after parsing attributes in process `syz.4.1235'. [ 315.515400][ T9915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 315.573106][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 315.580143][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.591337][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 315.601512][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.613169][ T24] usb 1-1: config 0 descriptor?? [ 315.628251][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 315.821654][ T5180] bcm5974 1-1:0.0: could not read from device [ 315.832726][ T5180] bcm5974 1-1:0.0: could not read from device [ 315.853352][ T24] usb 1-1: USB disconnect, device number 110 [ 315.855894][ T5180] bcm5974 1-1:0.0: could not read from device [ 315.869677][ T5180] bcm5974 1-1:0.0: could not read from device [ 315.889135][ T5910] kye 0003:0458:5017.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 315.907456][ T5910] kye 0003:0458:5017.0017: hidraw0: USB HID v10.03 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 315.927947][ T5910] kye 0003:0458:5017.0017: tablet-enabling feature report not found [ 315.945072][ T5910] kye 0003:0458:5017.0017: tablet enabling failed [ 316.547742][ T43] usb 5-1: USB disconnect, device number 88 [ 316.594763][ T5910] usb 4-1: USB disconnect, device number 103 [ 316.967952][ T5910] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 317.044793][ T43] usb 2-1: USB disconnect, device number 93 [ 317.125950][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 317.132204][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138742][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.151324][ T5910] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 317.167071][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.184594][ T5910] usb 4-1: config 0 has no interface number 0 [ 317.202366][ T5910] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 317.212759][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.239280][ T5910] usb 4-1: config 0 descriptor?? [ 317.264061][ T5910] uvcvideo 4-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 317.282594][ T5910] uvcvideo 4-1:0.64: No valid video chain found. [ 317.405346][ T9956] binder: Unknown parameter 'obj_user' [ 317.466155][ T5824] usb 4-1: USB disconnect, device number 104 [ 317.593146][ T5910] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 317.673225][ T5890] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 317.743378][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 317.750437][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.763724][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.772796][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.783751][ T5910] usb 2-1: config 0 descriptor?? [ 317.791821][ T5910] hub 2-1:0.0: bad descriptor, ignoring hub [ 317.797930][ T5910] hub 2-1:0.0: probe with driver hub failed with error -5 [ 317.806860][ T5910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 317.824910][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.836562][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 317.848273][ T5890] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.857572][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.868129][ T5890] usb 1-1: config 0 descriptor?? [ 318.076315][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.096240][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.134308][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.147004][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.159772][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.184518][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.196813][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.206819][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.219143][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.230634][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.282070][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 318.293427][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.321402][ T5890] usb 1-1: USB disconnect, device number 111 [ 318.403642][ T43] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 318.470387][ T9981] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1256'. [ 318.482295][ T9981] program syz.4.1256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.565016][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 318.576098][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.589647][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.599104][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.610187][ T43] usb 4-1: config 0 descriptor?? [ 318.618216][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 318.628262][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 318.643325][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 318.696668][ T9984] raw_sendmsg: syz.0.1257 forgot to set AF_INET. Fix it! [ 318.734284][ T9988] ------------[ cut here ]------------ [ 318.739786][ T9988] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#0: syz.0.1258/9988 [ 318.751028][ T9988] Modules linked in: [ 318.755529][ T9988] CPU: 0 UID: 0 PID: 9988 Comm: syz.0.1258 Not tainted syzkaller #0 PREEMPT(full) [ 318.765113][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.775563][ T9988] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 318.781639][ T9988] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 318.801823][ T9988] RSP: 0018:ffffc9000eaa7d40 EFLAGS: 00010283 [ 318.808411][ T9988] RAX: ffffffff824a202e RBX: ffff888066835208 RCX: 0000000000080000 [ 318.816744][ T9988] RDX: ffffc90004ce3000 RSI: 0000000000000942 RDI: 0000000000000943 [ 318.824802][ T9988] RBP: ffffc9000eaa7e01 R08: ffff88807efe9cbb R09: 1ffff1100fdfd397 [ 318.832819][ T9988] R10: dffffc0000000000 R11: ffffed100fdfd398 R12: dffffc0000000000 [ 318.840903][ T9988] R13: 0000000000000000 R14: ffff88807efe9cb8 R15: ffff88807efe9c00 [ 318.848949][ T9988] FS: 00007f31279f66c0(0000) GS:ffff888125a82000(0000) knlGS:0000000000000000 [ 318.857985][ T9988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.864627][ T9988] CR2: 00007f31279f5f98 CR3: 000000007e706000 CR4: 00000000003526f0 [ 318.872815][ T9988] Call Trace: [ 318.876319][ T9988] [ 318.879272][ T9988] switch_task_namespaces+0x3e/0x110 [ 318.884651][ T9988] __se_sys_setns+0x784/0x17d0 [ 318.889473][ T9988] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.894766][ T9988] ? __pfx___se_sys_setns+0x10/0x10 [ 318.899984][ T9988] ? do_syscall_64+0xbe/0xfa0 [ 318.904784][ T9988] do_syscall_64+0xfa/0xfa0 [ 318.909305][ T9988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.915455][ T9988] ? clear_bhb_loop+0x60/0xb0 [ 318.920180][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.926144][ T9988] RIP: 0033:0x7f3129790ef7 [ 318.930571][ T9988] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.950382][ T9988] RSP: 002b:00007f31279f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 318.958986][ T9988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3129790ef7 [ 318.967191][ T9988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 318.975402][ T9988] RBP: 00007f3129811f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.983631][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.987657][ T9989] ------------[ cut here ]------------ [ 318.991643][ T9988] R13: 00007f31299e6038 R14: 00007f31299e5fa0 R15: 00007ffc869efe58 [ 318.997248][ T9989] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x8ab/0xcb0, CPU#1: syz.0.1258/9989 [ 319.005390][ T9988] [ 319.016670][ T9989] Modules linked in: [ 319.019524][ T9988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.030691][ T9988] CPU: 0 UID: 0 PID: 9988 Comm: syz.0.1258 Tainted: G W syzkaller #0 PREEMPT(full) [ 319.041537][ T9988] Tainted: [W]=WARN [ 319.045357][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.055408][ T9988] Call Trace: [ 319.058683][ T9988] [ 319.061611][ T9988] dump_stack_lvl+0x99/0x250 [ 319.066198][ T9988] ? __asan_memcpy+0x40/0x70 [ 319.070784][ T9988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.075976][ T9988] ? __pfx__printk+0x10/0x10 [ 319.080574][ T9988] vpanic+0x237/0x6d0 [ 319.084550][ T9988] ? __pfx_vpanic+0x10/0x10 [ 319.089042][ T9988] ? is_bpf_text_address+0x292/0x2b0 [ 319.094323][ T9988] ? is_bpf_text_address+0x26/0x2b0 [ 319.099525][ T9988] panic+0xb9/0xc0 [ 319.103235][ T9988] ? __pfx_panic+0x10/0x10 [ 319.107738][ T9988] __warn+0x318/0x4d0 [ 319.111706][ T9988] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 319.117157][ T9988] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 319.122606][ T9988] report_bug+0x2be/0x4f0 [ 319.126937][ T9988] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 319.132386][ T9988] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 319.137837][ T9988] ? nsproxy_ns_active_get+0x891/0xcb0 [ 319.143294][ T9988] handle_bug+0x84/0x160 [ 319.147530][ T9988] exc_invalid_op+0x1a/0x50 [ 319.152022][ T9988] asm_exc_invalid_op+0x1a/0x20 [ 319.156860][ T9988] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 319.162931][ T9988] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 319.182528][ T9988] RSP: 0018:ffffc9000eaa7d40 EFLAGS: 00010283 [ 319.188592][ T9988] RAX: ffffffff824a202e RBX: ffff888066835208 RCX: 0000000000080000 [ 319.196559][ T9988] RDX: ffffc90004ce3000 RSI: 0000000000000942 RDI: 0000000000000943 [ 319.204525][ T9988] RBP: ffffc9000eaa7e01 R08: ffff88807efe9cbb R09: 1ffff1100fdfd397 [ 319.212516][ T9988] R10: dffffc0000000000 R11: ffffed100fdfd398 R12: dffffc0000000000 [ 319.220478][ T9988] R13: 0000000000000000 R14: ffff88807efe9cb8 R15: ffff88807efe9c00 [ 319.228449][ T9988] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 319.233915][ T9988] switch_task_namespaces+0x3e/0x110 [ 319.239199][ T9988] __se_sys_setns+0x784/0x17d0 [ 319.244040][ T9988] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.249236][ T9988] ? __pfx___se_sys_setns+0x10/0x10 [ 319.254428][ T9988] ? do_syscall_64+0xbe/0xfa0 [ 319.259095][ T9988] do_syscall_64+0xfa/0xfa0 [ 319.263591][ T9988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.269649][ T9988] ? clear_bhb_loop+0x60/0xb0 [ 319.274319][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.280203][ T9988] RIP: 0033:0x7f3129790ef7 [ 319.284615][ T9988] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.304304][ T9988] RSP: 002b:00007f31279f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 319.312715][ T9988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3129790ef7 [ 319.320681][ T9988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 319.328643][ T9988] RBP: 00007f3129811f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.336602][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.344565][ T9988] R13: 00007f31299e6038 R14: 00007f31299e5fa0 R15: 00007ffc869efe58 [ 319.352540][ T9988] [ 319.355806][ T9988] Kernel Offset: disabled [ 319.360114][ T9988] Rebooting in 86400 seconds..