last executing test programs: 2m41.943383562s ago: executing program 0 (id=4367): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 2m41.128203497s ago: executing program 0 (id=4371): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) shutdown(r3, 0x1) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1}}], 0x1, 0x48045) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)="4eb678845628237231e2026f94f8f78e6bc9df495fb0b542696244935666787d20ed42f202", 0x25}], 0x1, 0x0, 0xff02, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r6 = dup(0xffffffffffffffff) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x1a357) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78eb000002070102000000000000000004fff6030c00024000000000000000060900010073797a300000000008000540000000020900010073797a30000000000c000240000000000000c1080c00064000000000000000080c000340000000000000000008000540000000040c0006400000000000000007"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x200c0880) 2m39.532819498s ago: executing program 0 (id=4373): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="93fe000030d24ecad0a87af208004500002400000000002f9078009078b94befc170ab61e100"/50], 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="555f4e58000100000000000049bd4c2fd8e9007e33512200"], 0x14}, 0x1, 0x0, 0x0, 0x24048045}, 0x20000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, 0x0, 0x15, 0x0, @val=@tracing={0x0, 0xe}}, 0xc) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) move_mount(r3, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x2, 0x200}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='nsfs\x00', 0x1000008, &(0x7f0000000300)='us\xc2q}pta') chdir(&(0x7f0000000140)='./file1\x00') fsopen(&(0x7f00000003c0)='iso9660\x00', 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x6a1c000, 0x5e96, 0x800000000000001, 0x5c}) 2m39.112235973s ago: executing program 0 (id=4377): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xb56]}, 0x8, 0x80000) faccessat2(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r1, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5}, 0x1}], 0x1, 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x100, 0x3) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@mcast1, r5}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r6 = socket(0x2, 0x3, 0x6) getsockopt$sock_linger(r6, 0x1, 0xd, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) splice(r3, &(0x7f0000000240)=0x4, r6, &(0x7f00000002c0)=0x8, 0x397, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x1f, r7, 0x3, 0x1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10181d, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$security_capability(r8, &(0x7f0000002540), 0x0, 0x0, 0x2) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x101015, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xa) fstatfs(0xffffffffffffffff, 0x0) 2m38.824067905s ago: executing program 0 (id=4382): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000019}) 2m37.803908662s ago: executing program 0 (id=4401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) close(0x3) 2m37.23326739s ago: executing program 32 (id=4401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) close(0x3) 11.407826828s ago: executing program 4 (id=5162): syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000240)={0x0, 0x0, 0x2e, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400a, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x102) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f00000005c0)="13b6261bb52f75275d5f0648066c54406910471fc3937409e89ac123c1bc682b032159d88ef2ac4e5b4d3238caafa60bb6304632d026901ed71b8e06f7543ba25daf05d5dded48481b7c8f780cf4481521bfdbf8040000000000000033299a184b3bfe3784d0ae1fe95a73d04875c68b3585deadf744d957916d3f23d83715b8138d4182b6e8d90475c30000000000000000d75e1c69edefa784e2c19274036626f8", 0xa2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000240)={{0x3, 0x4, 0x1, 0x8000, 'syz1\x00', 0x1000}, 0x6, 0x640, 0x23, r7, 0x0, 0x1000, 'syz1\x00', 0xfffffffffffffffe}) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x2, 0x3, 0xd4, 0x9, r7}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r5, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000900)={0x40, 0xd, 0xc8, {0xc8, 0xb, "ead9e8b653ffceff857c60d3b00a0cbfe5d5de560e72cf44baf176e67c568864817ab220398499788d33cb0b98de7e87c3e948a7188369cb2599af950517bc6ae65b01f107f473e70676f477efe8efc4ac166d5feb69e5048a9c9a570d9c782f19a3fc68b5e5ab959db0987f8c04a1492d7162d4a4509867dab06120ff7da169847f1323fd5387c6dcc9741333bd4754c34a29a8a379ecd4eb014a8c66c264a3ebc101060b88b67a4cb44dabd843727b3ae8bea079aa457daa853f85a1273e792c716b9043a4"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00030400f4ff04030a48"], &(0x7f0000019100)=ANY=[@ANYBLOB="000f17000000050f1700020b10010410000806020002001001041600800b0002003fcac0138a83e5e856ac3e326f5ca118b78b0f6aaa885e36a707acef062cacdbd075e50ba3541ea889a5824765dba568fe7b1a5c5a7c2ed869736ac0cbcac6"], &(0x7f00000002c0)={0x20, 0x29, 0xfffffffffffffcab, {0xf, 0x29, 0x5, 0x8, 0x9, 0x6, "3a5acee7", "bae9fa56"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xf, 0xc0, 0xfe, 0x5, 0x302c}}}, &(0x7f0000000800)={0xffffffffffffffe9, &(0x7f0000000340)={0x0, 0x30, 0xaa, "a0b91d25c57eba9244b978d2fe5065959bb156a188b5c738e1109a09075c0f51904f2ef7c61bc555206b2a77379c482ccfa463d23a51d1c55513e804d2620ddb149acd0643e1faa6bc9d7a99eedf92334654fe4d0edcaa00fc6d931fd30fe1c5ec8d1b1c8be7718eb47b6d50a5a6223c4085325664b5a88c5a1ba819e26d4f0284c63057da718dd9e0a841e204bd4aca2942e942c4326cca4a2a30d313b5ce65e0769d7d7ec2b6a3edde00"/180}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c1e0"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="ec5d0ba060ee"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "669a"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xe4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000000)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xf9}}) 11.216588127s ago: executing program 2 (id=5164): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x26020480) flock(0xffffffffffffffff, 0x5) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000580)={0x378e5f2d9c745e8f, 0x10, 0x6, "e45dbfc3abee"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, &(0x7f0000000180)) 10.852464864s ago: executing program 5 (id=5167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000e6ffffff000a48000000060a0b040000000000000000020000011c00048018000180080001006c6f67000c00028006000140000700000900010073797a30000000000900020073797a32000000001400000011000100000000000000"], 0x70}}, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x20004055) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00') 9.796549166s ago: executing program 5 (id=5168): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) 8.509588788s ago: executing program 2 (id=5176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x1, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0xff, 0x80}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8c0300001000050400000000004ff52f230437000000005779f4d78437f8baf3257dc6110b8a074d2dcfeda469e369c0a69134c178bc222716a75fae65207d9df35db52cf88c716b673f35a7086fdbfdc49c0b465765af3888eb9190539ef2b1f801f38048005cfcf2b85c35e77ad4f2b99aa315c42c06126deae8708397a8dee852cc7a5f1186", @ANYRES32=0x0, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x8816}, 0x0) unshare(0x22020400) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x4, 0x2e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r7, 0x1, 0x800004, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x4) bind$rds(r8, &(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x8001, 0x6, 0x1, 0x5323, 0x0, 0xcc7, 0x8, 0x7, 0xfff, 0x104, 0x2, 0x1, 0x8, 0x4, 0x3, 0x7b, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x0, 0xb, 0x8, 0xcb4, 0x8, 0x4, 0x10000, 0x33]}) ptrace(0x10, r10) wait4(r10, &(0x7f0000000000), 0x1, &(0x7f0000000040)) r12 = dup(r9) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000200)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$netrom_NETROM_T2(r12, 0x103, 0x2, &(0x7f0000000440)=0x8, 0x4) 8.131997303s ago: executing program 4 (id=5178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x3a16ed7c5b3bbe21, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x79, 0x1d, 0x2f, 0x8, 0x23f2, 0x3, 0x9d6b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3e, 0x8, 0xa0, 0x2, "", [{{0x9, 0x4, 0xa3, 0x4, 0x0, 0x79, 0x38, 0x74, 0x80}}]}}]}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.131456208s ago: executing program 2 (id=5179): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 6.501374972s ago: executing program 3 (id=5184): openat$sequencer(0xffffffffffffff9c, 0x0, 0x4780, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 6.400033508s ago: executing program 5 (id=5185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000f00)="49a72b", 0x4000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)=0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x3, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x7], 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x1, 0x2b, 0x82, 0x6, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x54}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x5, 0x1, {0x7, 0x25, 0x1, 0x8, 0xe, 0x9}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000"], 0x0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x90, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7651ae3c9132acaf83d65ce38b5e453361f809a7ab1c02f30caa9acc598dc2c067bafc4219", @ANYRESOCT=r2, @ANYRES8], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 6.375142981s ago: executing program 3 (id=5186): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x26020480) flock(0xffffffffffffffff, 0x5) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000580)={0x378e5f2d9c745e8f, 0x10, 0x6, "e45dbfc3abee"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, &(0x7f0000000180)) 6.233545409s ago: executing program 4 (id=5187): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000001700)={0x14, &(0x7f0000001600)={0x40, 0x6, 0x2, {0x2, 0x9}}, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc4, 0x4e, 0x5a, 0x10, 0xc45, 0x800a, 0xdd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x80, 0xae, "", [{{0x9, 0x4, 0x72, 0xa, 0x0, 0x74, 0x9f, 0xfa, 0x4}}]}}]}}, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xbe, 0x82, 0xfd, 0x40, 0x483, 0x1234, 0xb71d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x21, 0x60, 0xe0, "", [{{0x9, 0x4, 0xd1, 0xf1, 0x0, 0xa6, 0x8a, 0xbc, 0x8}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0xd8, 0xe5, 0x33, 0x20, 0x572, 0x58a6, 0x21fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x81, 0x80, 0x7, "", [{{0x9, 0x4, 0x55, 0x0, 0x0, 0x8e, 0x59, 0xdb, 0x9}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x22, 0x0}) syz_usb_control_io$uac1(r4, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000012c0)={0x14, 0x0, &(0x7f0000001280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000001700)={0x14, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0xc, 0x60, {0x60, 0x9, "b082db10b52548008bf68f0843b0ca5cf04f10fb24e371b0989605706aa5a9a1e28963635f360d52b237d4881acc82c7ef8dccf01b119de7100edf27df1f0228dc47d23f58d9b1c6a4da6a01c4ce74e070fd3931ef67b4c5915affb6416b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x31, 0x3c, "1859cd2c1a171901b9697e7c8e4464172385583ff0dd6ad8f8eb94c7e60e82aea530a4758d7d32a7a828efc497cc8e10f8722531b13253a0d2405aa9"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xb}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "32cf45b29475c3708fad8755fdccde512ceff498f44ba361977bd17e4c4fa226a259e20e64ba4de6f538bce2e59d96"}}) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xe, 0x0, 0x2, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x16, 0x5}, [@source_unit={0xc, 0x24, 0xb, 0x0, 0x2, 0x1, 0xd, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x36, 0xf, 0x5, {0xa, 0x25, 0x25, 0x4, 0x6, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd0, 0xf, 0x60, {0xa, 0x25, 0x25, 0x3, 0x7f, 0x1000}}}}}}}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000015c0)={{0x12, 0x1, 0x150, 0x20, 0xe3, 0x5a, 0x8, 0x5e1, 0x408, 0x3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0xff, 0x28, 0x9, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x56, 0x23, 0x4e, 0x4, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0xff, 0x10}}]}}]}}]}}, 0x0) 4.884482154s ago: executing program 2 (id=5188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x72, 0x20800, 0x0, 0x1a4, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810dc, 0xb4}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x10, "30bc8e685d8a8e3ee6626627330c"}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x3, 0x8, 0x7, 0x0, 0x8}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0xd, 0x4}, 0x20) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000240)={0x39, 0x6, 0xfff}) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6040600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r5, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) unshare(0x28000600) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) sendto$inet6(r7, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x46) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 4.757398766s ago: executing program 2 (id=5189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201100331eeb3103307010439730122030109021200018b049f040904c4010032dfae0428d96d20a2677b2d213a0c91dfa65e9f3995f9da9bf780f7f5d1ffa5a2a30eb243dafe92c3967d446b81a15728eab81604ed33c0f24014139e4a2e795f0bc9c32151ca160f137f8296efd089edc83bdfe9817b4e5de9e117d37400fc835bea68a29c2a91e60acdb660e2e31d5567cdbc48f7afd489b69e45a9debe93e76da472bdb0d51101b8b8db75d491009bd01c7a7de1c6b35fbad4b0ba1336c6a9ffaa"], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "66c57e42"}]}}, 0x0}, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="a8da83579cc7402604000000bf47"], 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0xd7, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/157) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4.002016468s ago: executing program 3 (id=5191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000005c000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000002800048008000140000000040800024061ad3b17140003007866726d30000000000000000000000058000000060a010e00000000000000000100000008000b400000000008000b400000000234000480300001800a0001006c696d6974000000200002800c00024000000000000000ac08000440000000010800054000000001140000001100010000000000000000000000000a"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001080)=""/149, 0x95, 0x0) r5 = dup(r2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r1], 0xffe) 3.515445446s ago: executing program 5 (id=5192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.284921309s ago: executing program 5 (id=5193): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.236606969s ago: executing program 3 (id=5194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000f00)="49a72b", 0x4000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)=0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x3, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x7], 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x1, 0x2b, 0x82, 0x6, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x54}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x5, 0x1, {0x7, 0x25, 0x1, 0x8, 0xe, 0x9}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000"], 0x0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000c04009040000010300000009218100000122a4000905810b"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x90, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7651ae3c9132acaf83d65ce38b5e453361f809a7ab1c02f30caa9acc598dc2c067bafc4219", @ANYRESOCT=r3, @ANYRES8], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000280)={0x20, 0xa, 0x70, {0x70, 0x7, "c97c40816f8ff680db2e4a172389cd949feb273b35ce760308c6d5c159e92dea7286f0ce9eea983a99a427ffe1c866820a29c77baef3723594f3052b3d718954e190873edcf960bd75782df39dc52c059ddbb9dfca5b13ad9df035523c1e358599aeffea472262cd2076142e84af"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.057710815s ago: executing program 2 (id=5195): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) 2.792004779s ago: executing program 4 (id=5196): openat$sequencer(0xffffffffffffff9c, 0x0, 0x4780, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.487758446s ago: executing program 4 (id=5197): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063114a0000a696660d000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) close(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, 0x6b, 0x3, 0x1, 0x100, 0x920, 0x1010020, r1}) 2.21224557s ago: executing program 1 (id=5199): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)='8', 0x1}], 0x1) fsmount(r1, 0x1, 0x6) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000580)='dirsync\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r5, 0x0, 0x106f) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x30) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000006c0), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) execveat(r1, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) 2.120954156s ago: executing program 1 (id=5200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x72, 0x20800, 0x0, 0x1a4, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810dc, 0xb4}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x10, "30bc8e685d8a8e3ee6626627330c"}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x3, 0x8, 0x7, 0x0, 0x8}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0xd, 0x4}, 0x20) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000240)={0x39, 0x6, 0xfff}) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6040600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r5, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) unshare(0x28000600) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) sendto$inet6(r7, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x46) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1.380644387s ago: executing program 1 (id=5201): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) socket(0x1d, 0x2, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgrp(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 1.321980663s ago: executing program 5 (id=5202): r0 = socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002"], 0x4c}}, 0x4040000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r9, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@gettfilter={0x54, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xa, 0xfff2}, {}, {0x7, 0x10}}, [{0x8, 0xb, 0xa9d8}, {0x8, 0xb, 0xffffff80}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0xfffffffffffffe03, 0xb, 0xfffffff8}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r14, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 780.124481ms ago: executing program 3 (id=5203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 678.905119ms ago: executing program 1 (id=5204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r0], 0xffe) 549.290579ms ago: executing program 3 (id=5205): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="65780200"], 0x0, 0x0, 0x0, 0x0}) 312.278771ms ago: executing program 1 (id=5206): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b45, 0x4) syz_open_dev$video4linux(0x0, 0x10000fc3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) 24.514766ms ago: executing program 4 (id=5207): openat$sequencer(0xffffffffffffff9c, 0x0, 0x4780, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 1 (id=5208): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7961][ T825] usb 6-1: SerialNumber: syz [ 1320.839937][T21125] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1320.840143][T21125] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1320.847182][ T825] usb 6-1: Expected 3 endpoints, found: 2 [ 1321.087217][T13668] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1321.114514][T21152] netlink: 'syz.4.4981': attribute type 1 has an invalid length. [ 1321.144500][T21152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.146193][T21152] netlink: 'syz.4.4981': attribute type 1 has an invalid length. [ 1321.187807][T21152] vxlan0: entered promiscuous mode [ 1321.197022][T21152] bond1: (slave vxlan0): making interface the new active one [ 1321.198507][T21152] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 1321.217362][ T2873] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.219171][ T2873] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.220807][ T2885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.220853][ T2885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.259920][T13668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1321.259956][T13668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.259992][T13668] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1321.260006][T13668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.273690][T13668] usb 3-1: config 0 descriptor?? [ 1321.294942][T13668] hub 3-1:0.0: USB hub found [ 1321.457896][ T825] usb 4-1: USB disconnect, device number 19 [ 1321.535291][T21062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.536649][T21062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.566210][T21062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.566812][T21062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.571699][T21062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.576039][T21062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.650786][ T5889] usb 6-1: USB disconnect, device number 18 [ 1321.737673][ T5791] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1321.822819][T13668] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1321.829346][T13668] usbhid 3-1:0.0: can't add hid device: -71 [ 1321.829478][T13668] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1321.867719][T13668] usb 3-1: USB disconnect, device number 50 [ 1321.898788][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 1321.901345][ T5791] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1321.901379][ T5791] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.901432][ T5791] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.901480][ T5791] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1321.901506][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.926830][ T5791] usbtmc 2-1:16.0: bulk endpoints not found [ 1322.138402][T21157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.138973][T21157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.151912][ T5858] usb 2-1: USB disconnect, device number 92 [ 1322.171280][ T5889] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1322.303125][T13668] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1322.345913][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 1322.362337][ T5889] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1322.362371][ T5889] usb 6-1: config 0 has no interface number 0 [ 1322.362421][ T5889] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1322.362446][ T5889] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1322.362475][ T5889] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1322.362505][ T5889] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1322.362532][ T5889] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1322.362559][ T5889] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1322.362593][ T5889] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1322.362620][ T5889] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1322.362643][ T5889] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.366587][ T5889] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1322.366623][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.366645][ T5889] usb 6-1: Product: syz [ 1322.366661][ T5889] usb 6-1: Manufacturer: syz [ 1322.366677][ T5889] usb 6-1: SerialNumber: syz [ 1322.473970][T13668] usb 4-1: Using ep0 maxpacket: 32 [ 1322.475934][T13668] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1322.475958][T13668] usb 4-1: config 0 has no interface number 0 [ 1322.490483][T13668] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1322.490513][T13668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.490533][T13668] usb 4-1: Product: syz [ 1322.490547][T13668] usb 4-1: Manufacturer: syz [ 1322.490560][T13668] usb 4-1: SerialNumber: syz [ 1322.510098][T13668] usb 4-1: config 0 descriptor?? [ 1322.586657][ T5889] usb 6-1: config 0 descriptor?? [ 1322.590665][T21165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1322.606549][ T5889] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1322.606570][ T5889] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1322.719800][ T5858] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1322.821206][ T825] usb 6-1: USB disconnect, device number 19 [ 1322.902408][ T5858] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1322.902444][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1322.907603][ T5858] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1322.907635][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.907657][ T5858] usb 2-1: Product: syz [ 1322.907672][ T5858] usb 2-1: Manufacturer: syz [ 1322.907687][ T5858] usb 2-1: SerialNumber: syz [ 1322.954252][T13668] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1322.954284][T13668] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1322.993353][ T5858] usb 2-1: config 0 descriptor?? [ 1323.010343][ T5858] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1323.010637][ T5858] keyspan 2-1:0.0: unsupported endpoint type 0 [ 1323.010720][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1323.015979][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1323.016086][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1323.016178][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1323.016272][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1323.016367][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1323.081947][ T5858] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1323.089519][T21198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1323.103791][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1323.103895][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1323.103991][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1323.104085][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1323.104174][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1323.146619][ T5858] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1323.232888][ T825] usb 2-1: USB disconnect, device number 93 [ 1323.284123][ T825] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1323.338307][ T825] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1323.345233][ T825] keyspan 2-1:0.0: device disconnected [ 1323.549442][T21209] binder: 21207:21209 ioctl c0306201 0 returned -14 [ 1323.551995][T21209] binder: 21207:21209 ioctl b704 0 returned -22 [ 1323.756471][ T825] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1323.922479][ T825] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1323.922512][ T825] usb 6-1: config 1 has no interface number 0 [ 1323.923671][ T825] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1323.923703][ T825] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1323.923728][ T825] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 245, changing to 11 [ 1323.954220][ T825] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1323.954817][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.954839][ T825] usb 6-1: Product: syz [ 1323.954853][ T825] usb 6-1: Manufacturer: syz [ 1323.954866][ T825] usb 6-1: SerialNumber: syz [ 1324.018363][T21208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1324.025327][T21208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1324.069683][ T825] usb 6-1: Expected 3 endpoints, found: 2 [ 1324.333419][ T825] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1324.494464][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 1324.510054][ T825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.510182][ T825] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1324.510234][ T825] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1324.510260][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.517252][ T5791] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1324.538591][ T825] usb 2-1: config 0 descriptor?? [ 1324.580293][ T825] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1324.678211][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 1324.711638][ T5791] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1324.711671][ T5791] usb 3-1: config 0 has no interface number 0 [ 1324.711786][ T5791] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1324.711812][ T5791] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1324.711842][ T5791] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1324.711930][ T5791] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1324.711958][ T5791] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1324.711985][ T5791] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1324.712010][ T5791] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1324.712092][ T5791] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1324.712118][ T5791] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.747863][ T5791] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1324.747949][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.747970][ T5791] usb 3-1: Product: syz [ 1324.747985][ T5791] usb 3-1: Manufacturer: syz [ 1324.747999][ T5791] usb 3-1: SerialNumber: syz [ 1324.818329][T16162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1324.854749][T16162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1324.864878][T19822] usb 6-1: USB disconnect, device number 20 [ 1324.869839][T16162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1324.874748][ T5791] usb 3-1: config 0 descriptor?? [ 1324.883565][T21232] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1324.913341][T16162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1324.920680][T16162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1325.176321][ T5791] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1325.176424][ T5791] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1325.268534][ T5791] usb 3-1: USB disconnect, device number 51 [ 1325.375852][T13668] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1325.376213][T13668] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1325.445284][ T825] usb 2-1: USB disconnect, device number 94 [ 1325.562550][T19822] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1325.723477][T19822] usb 6-1: Using ep0 maxpacket: 32 [ 1325.725493][T19822] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1325.725522][T19822] usb 6-1: config 0 has no interface number 0 [ 1325.728015][T19822] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1325.728044][T19822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.728057][T19822] usb 6-1: Product: syz [ 1325.728066][T19822] usb 6-1: Manufacturer: syz [ 1325.728075][T19822] usb 6-1: SerialNumber: syz [ 1325.732102][T19822] usb 6-1: config 0 descriptor?? [ 1325.804818][T13668] usb 4-1: USB disconnect, device number 20 [ 1326.000437][ T825] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1326.160875][ T825] usb 2-1: Using ep0 maxpacket: 8 [ 1326.163646][ T825] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1326.163676][ T825] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.163772][ T825] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.163801][ T825] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1326.163822][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.225778][T19822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1326.225817][T19822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1326.254290][ T825] usbtmc 2-1:16.0: bulk endpoints not found [ 1326.310349][ T5889] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1326.331913][T13668] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1326.407733][T21247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.408460][T21247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.444625][ T5858] usb 2-1: USB disconnect, device number 95 [ 1326.497399][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 1326.502911][T13668] usb 4-1: Using ep0 maxpacket: 32 [ 1326.507958][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.508071][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.508113][T13668] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1326.508138][T13668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.541732][T13668] usb 4-1: config 0 descriptor?? [ 1326.557139][T13668] hub 4-1:0.0: USB hub found [ 1326.574280][ T5889] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1326.574315][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.574337][ T5889] usb 3-1: Product: syz [ 1326.574353][ T5889] usb 3-1: Manufacturer: syz [ 1326.574368][ T5889] usb 3-1: SerialNumber: syz [ 1326.641540][ T5889] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1326.641584][ T5889] r8152-cfgselector 3-1: config 0 descriptor?? [ 1326.775600][T13668] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1326.920689][ T2882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.920733][ T2882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.036987][ T5858] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1327.120483][T21254] 9p: Bad value for 'rfdno' [ 1327.132411][ T825] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 1327.133430][T16162] Bluetooth: hci3: command tx timeout [ 1327.217684][ T5858] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1327.217719][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1327.232348][ T5858] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1327.232382][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.232403][ T5858] usb 2-1: Product: syz [ 1327.232417][ T5858] usb 2-1: Manufacturer: syz [ 1327.232432][ T5858] usb 2-1: SerialNumber: syz [ 1327.243834][ T5858] usb 2-1: config 0 descriptor?? [ 1327.251646][ T5858] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1327.251915][ T5858] keyspan 2-1:0.0: unsupported endpoint type 0 [ 1327.251993][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1327.254298][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1327.254386][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1327.254489][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1327.254582][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1327.254671][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1327.257449][ T5858] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1327.260010][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1327.260097][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1327.260186][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1327.260271][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1327.260358][ T5858] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1327.265632][ T5858] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1327.335902][T13668] hid-generic 0003:046D:C31C.003A: unknown main item tag 0x0 [ 1327.464836][ T5858] usb 2-1: USB disconnect, device number 96 [ 1327.516389][ T5858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1327.569372][ T2882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.569414][ T2882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.570715][ T5858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1327.575996][ T5858] keyspan 2-1:0.0: device disconnected [ 1327.625377][T13668] hid-generic 0003:046D:C31C.003A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1327.966016][T13668] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1327.987464][T21258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1328.108595][ T2882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.108636][ T2882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.426574][ T5889] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1328.429413][T13668] usbhid 4-1:0.0: reset_resume error -71 [ 1328.491949][T13668] usb 4-1: USB disconnect, device number 21 [ 1328.548995][ T2882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.549033][ T2882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.610015][ T5858] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1328.629312][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 1328.633481][ T5889] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1328.633513][ T5889] usb 2-1: config 0 has no interface number 0 [ 1328.633567][ T5889] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1328.638495][T21236] chnl_net:caif_netlink_parms(): no params data found [ 1328.644059][T19822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1328.644405][T19822] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1328.657035][ T5889] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1328.657066][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.657085][ T5889] usb 2-1: Product: syz [ 1328.657100][ T5889] usb 2-1: Manufacturer: syz [ 1328.657114][ T5889] usb 2-1: SerialNumber: syz [ 1328.676239][ T5889] usb 2-1: config 0 descriptor?? [ 1328.689793][ T5889] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1328.691651][ T5889] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1328.783720][ T5858] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1328.783751][ T5858] usb 3-1: config 1 has no interface number 0 [ 1328.783801][ T5858] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1328.783828][ T5858] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1328.783852][ T5858] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 245, changing to 11 [ 1328.786758][ T5858] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1328.786790][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.786812][ T5858] usb 3-1: Product: syz [ 1328.786827][ T5858] usb 3-1: Manufacturer: syz [ 1328.786836][ T5858] usb 3-1: SerialNumber: syz [ 1328.846560][T21265] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1328.855506][T21265] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1328.866355][ T5858] usb 3-1: Expected 3 endpoints, found: 2 [ 1328.907773][T19822] usb 2-1: USB disconnect, device number 97 [ 1328.938643][T19822] cypress_m8 2-1:0.35: device disconnected [ 1328.996489][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.996724][T21236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.996958][T21236] bridge_slave_0: entered allmulticast mode [ 1329.002930][T21236] bridge_slave_0: entered promiscuous mode [ 1329.007972][T21236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.008164][T21236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.008361][T21236] bridge_slave_1: entered allmulticast mode [ 1329.011330][T21236] bridge_slave_1: entered promiscuous mode [ 1329.078026][T13668] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1329.138578][T21236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.187303][T21236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.249229][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1329.249265][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.249291][T13668] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1329.249305][T13668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.253499][T13668] usb 4-1: config 0 descriptor?? [ 1329.272089][T13668] hub 4-1:0.0: USB hub found [ 1329.330407][T21236] team0: Port device team_slave_0 added [ 1329.342162][T21236] team0: Port device team_slave_1 added [ 1329.356556][T16162] Bluetooth: hci3: command tx timeout [ 1329.474145][T21252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.474710][T21252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.477760][T21252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.478326][T21252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.483138][T21252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.487766][T21252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.638169][T21236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.638190][T21236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.638220][T21236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.640712][T21236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.640729][T21236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.640759][T21236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.725089][T13668] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1329.764733][ T5889] usb 3-1: USB disconnect, device number 53 [ 1329.771525][T13668] usbhid 4-1:0.0: can't add hid device: -71 [ 1329.771894][T13668] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1329.825702][ T43] usb 6-1: USB disconnect, device number 21 [ 1329.858062][ T5858] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1329.912725][T13668] usb 4-1: USB disconnect, device number 22 [ 1329.961435][ T2882] bridge_slave_1: left allmulticast mode [ 1329.961470][ T2882] bridge_slave_1: left promiscuous mode [ 1329.961759][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.029451][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1330.034327][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.034392][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1330.034426][ T5858] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1330.034441][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.088790][ T5858] usb 2-1: config 0 descriptor?? [ 1330.089307][ T2882] bridge_slave_0: left allmulticast mode [ 1330.089336][ T2882] bridge_slave_0: left promiscuous mode [ 1330.090053][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.122557][ T5858] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1330.349734][ T5889] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1330.467335][T13668] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1330.510563][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 1330.513427][ T5889] usb 3-1: config 9 has an invalid interface number: 15 but max is 0 [ 1330.513457][ T5889] usb 3-1: config 9 has no interface number 0 [ 1330.513493][ T5889] usb 3-1: config 9 interface 15 has no altsetting 0 [ 1330.515784][ T5889] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=cd.af [ 1330.515810][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.515826][ T5889] usb 3-1: Product: syz [ 1330.515835][ T5889] usb 3-1: Manufacturer: syz [ 1330.515844][ T5889] usb 3-1: SerialNumber: syz [ 1330.553764][ T5889] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1330.630816][T13668] usb 6-1: Using ep0 maxpacket: 32 [ 1330.633257][T13668] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1330.633288][T13668] usb 6-1: config 0 has no interface number 0 [ 1330.633335][T13668] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1330.633360][T13668] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1330.633388][T13668] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1330.633430][T13668] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1330.633449][T13668] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1330.633464][T13668] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1330.633477][T13668] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1330.633501][T13668] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 1330.633526][T13668] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.636945][T13668] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1330.636977][T13668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.637000][T13668] usb 6-1: Product: syz [ 1330.637015][T13668] usb 6-1: Manufacturer: syz [ 1330.637031][T13668] usb 6-1: SerialNumber: syz [ 1330.651078][T13668] usb 6-1: config 0 descriptor?? [ 1330.658482][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1330.731499][T21278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1330.731992][T21278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1330.745729][T13668] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1330.745751][T13668] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1330.791578][ T10] usb 2-1: USB disconnect, device number 98 [ 1330.827541][T13668] scsi host1: microtekX6 [ 1330.875898][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1330.878663][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1330.878694][ T43] usb 4-1: config 0 has no interface number 0 [ 1330.883244][ T5889] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1330.885331][ T5889] r8152-cfgselector 3-1: bad CDC descriptors [ 1330.916770][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1330.916804][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.916826][ T43] usb 4-1: Product: syz [ 1330.916842][ T43] usb 4-1: Manufacturer: syz [ 1330.916858][ T43] usb 4-1: SerialNumber: syz [ 1330.972241][T13668] usb 6-1: USB disconnect, device number 22 [ 1330.980303][ T131] microtek usb (rev 0.4.3): error -19 submitting URB [ 1331.094564][ T43] usb 4-1: config 0 descriptor?? [ 1331.147956][ T5889] r8152-cfgselector 3-1: USB disconnect, device number 54 [ 1331.552045][T21293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1331.563802][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1331.563845][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1331.624423][T16162] Bluetooth: hci3: command tx timeout [ 1331.987495][ T2882] bond1 (unregistering): (slave vxlan0): Releasing active interface [ 1332.372110][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.466958][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.512817][ T2882] bond0 (unregistering): Released all slaves [ 1332.525498][ T2882] bond1 (unregistering): Released all slaves [ 1332.770547][T21236] hsr_slave_0: entered promiscuous mode [ 1332.792820][T21236] hsr_slave_1: entered promiscuous mode [ 1332.807179][T21236] debugfs: 'hsr0' already exists in 'hsr' [ 1332.807798][T21236] Cannot create hsr debugfs directory [ 1332.918053][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1332.918135][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1332.957065][T13668] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1333.134381][T13668] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1333.134414][T13668] usb 6-1: config 1 has no interface number 0 [ 1333.134460][T13668] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1333.134484][T13668] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1333.134506][T13668] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 245, changing to 11 [ 1333.137604][T13668] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1333.137634][T13668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.137656][T13668] usb 6-1: Product: syz [ 1333.137673][T13668] usb 6-1: Manufacturer: syz [ 1333.137687][T13668] usb 6-1: SerialNumber: syz [ 1333.192117][ T5791] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1333.268025][T21298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1333.269754][T21298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1333.280613][T13668] usb 6-1: Expected 3 endpoints, found: 2 [ 1333.352665][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 1333.355305][ T5791] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1333.355335][ T5791] usb 3-1: config 0 has no interface number 0 [ 1333.358567][ T5791] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1333.358598][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.358620][ T5791] usb 3-1: Product: syz [ 1333.358636][ T5791] usb 3-1: Manufacturer: syz [ 1333.358652][ T5791] usb 3-1: SerialNumber: syz [ 1333.365569][ T5791] usb 3-1: config 0 descriptor?? [ 1333.801242][T16162] Bluetooth: hci3: command tx timeout [ 1333.827175][ T5791] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1333.827210][ T5791] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1333.988220][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1333.988596][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1334.178345][ T10] usb 6-1: USB disconnect, device number 23 [ 1334.315746][T13668] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1334.454878][ T43] usb 4-1: USB disconnect, device number 23 [ 1334.475011][T13668] usb 2-1: Using ep0 maxpacket: 16 [ 1334.480781][T13668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.480919][T13668] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1334.480967][T13668] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1334.480991][T13668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.591433][T13668] usb 2-1: config 0 descriptor?? [ 1334.662424][T13668] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1334.752934][T21329] FAULT_INJECTION: forcing a failure. [ 1334.752934][T21329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.752974][T21329] CPU: 1 UID: 0 PID: 21329 Comm: syz.5.5048 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.753005][T21329] Tainted: [L]=SOFTLOCKUP [ 1334.753014][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1334.753026][T21329] Call Trace: [ 1334.753035][T21329] [ 1334.753045][T21329] dump_stack_lvl+0xe8/0x150 [ 1334.753084][T21329] should_fail_ex+0x46b/0x600 [ 1334.753119][T21329] _copy_to_user+0x31/0xb0 [ 1334.753143][T21329] simple_read_from_buffer+0xe1/0x170 [ 1334.753177][T21329] proc_fail_nth_read+0x1be/0x230 [ 1334.753209][T21329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1334.753241][T21329] ? rw_verify_area+0x2ac/0x4e0 [ 1334.753271][T21329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1334.753299][T21329] vfs_read+0x212/0xa80 [ 1334.753341][T21329] ? __pfx_vfs_read+0x10/0x10 [ 1334.753377][T21329] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1334.753402][T21329] ? lockdep_hardirqs_on+0x7a/0x110 [ 1334.753426][T21329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1334.753449][T21329] ? mutex_lock_nested+0x152/0x1d0 [ 1334.753477][T21329] ? fdget_pos+0x252/0x320 [ 1334.753515][T21329] ksys_read+0x156/0x270 [ 1334.753558][T21329] ? __pfx_ksys_read+0x10/0x10 [ 1334.753602][T21329] do_syscall_64+0x14d/0xf80 [ 1334.753624][T21329] ? trace_irq_disable+0x3b/0x150 [ 1334.753650][T21329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.753673][T21329] ? clear_bhb_loop+0x40/0x90 [ 1334.753700][T21329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.753722][T21329] RIP: 0033:0x7f2d20b7d04e [ 1334.753744][T21329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1334.753764][T21329] RSP: 002b:00007f2d1ee15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1334.753793][T21329] RAX: ffffffffffffffda RBX: 00007f2d1ee166c0 RCX: 00007f2d20b7d04e [ 1334.753809][T21329] RDX: 000000000000000f RSI: 00007f2d1ee160a0 RDI: 0000000000000004 [ 1334.753824][T21329] RBP: 00007f2d1ee16090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.753838][T21329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.753851][T21329] R13: 00007f2d20e36038 R14: 00007f2d20e35fa0 R15: 00007ffcd571eca8 [ 1334.753888][T21329] [ 1335.288846][T13668] usb 2-1: USB disconnect, device number 99 [ 1335.455597][ T2882] hsr_slave_0: left promiscuous mode [ 1335.489870][ T2882] hsr_slave_1: left promiscuous mode [ 1335.491131][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.491161][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.544349][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.544390][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.735815][ T2882] veth1_macvtap: left promiscuous mode [ 1335.738271][ T2882] veth0_macvtap: left promiscuous mode [ 1335.738627][ T2882] veth1_vlan: left promiscuous mode [ 1335.741122][ T2882] veth0_vlan: left promiscuous mode [ 1336.204567][ T5791] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1336.204940][ T5791] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1336.657233][T13668] usb 3-1: USB disconnect, device number 55 [ 1336.740444][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 1336.783360][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 1337.067859][T13668] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1337.243254][T13668] usb 3-1: Using ep0 maxpacket: 32 [ 1337.249063][T13668] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1337.249096][T13668] usb 3-1: config 0 has no interface number 0 [ 1337.252935][T13668] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1337.252969][T13668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.252991][T13668] usb 3-1: Product: syz [ 1337.253006][T13668] usb 3-1: Manufacturer: syz [ 1337.253022][T13668] usb 3-1: SerialNumber: syz [ 1337.272112][T13668] usb 3-1: config 0 descriptor?? [ 1337.388147][T21364] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1337.396349][T21364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5058'. [ 1337.451642][T21364] team0: Device vlan2 is up. Set it down before adding it as a team port [ 1337.738190][T21374] FAULT_INJECTION: forcing a failure. [ 1337.738190][T21374] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.738232][T21374] CPU: 0 UID: 0 PID: 21374 Comm: syz.5.5062 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1337.738262][T21374] Tainted: [L]=SOFTLOCKUP [ 1337.738271][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1337.738284][T21374] Call Trace: [ 1337.738297][T21374] [ 1337.738307][T21374] dump_stack_lvl+0xe8/0x150 [ 1337.738344][T21374] should_fail_ex+0x46b/0x600 [ 1337.738376][T21374] should_failslab+0xa8/0x100 [ 1337.738402][T21374] __kmalloc_noprof+0xdf/0x7b0 [ 1337.738422][T21374] ? tomoyo_encode+0x28b/0x550 [ 1337.738466][T21374] tomoyo_encode+0x28b/0x550 [ 1337.738501][T21374] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1337.738541][T21374] ? tomoyo_path_number_perm+0x219/0x630 [ 1337.738565][T21374] tomoyo_path_number_perm+0x246/0x630 [ 1337.738591][T21374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1337.738617][T21374] ? __lock_acquire+0x6b5/0x2cf0 [ 1337.738675][T21374] ? __fget_files+0x2a/0x420 [ 1337.738706][T21374] ? __fget_files+0x2a/0x420 [ 1337.738729][T21374] ? __fget_files+0x3a6/0x420 [ 1337.738755][T21374] ? __fget_files+0x2a/0x420 [ 1337.738785][T21374] security_file_ioctl+0xc3/0x2a0 [ 1337.738811][T21374] __se_sys_ioctl+0x47/0x170 [ 1337.738835][T21374] do_syscall_64+0x14d/0xf80 [ 1337.738858][T21374] ? trace_irq_disable+0x3b/0x150 [ 1337.738880][T21374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.738904][T21374] ? clear_bhb_loop+0x40/0x90 [ 1337.738930][T21374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.738951][T21374] RIP: 0033:0x7f2d20bbc819 [ 1337.738973][T21374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.738992][T21374] RSP: 002b:00007f2d1ee16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.739019][T21374] RAX: ffffffffffffffda RBX: 00007f2d20e35fa0 RCX: 00007f2d20bbc819 [ 1337.739035][T21374] RDX: 0000000000000000 RSI: 000000005000940f RDI: 0000000000000004 [ 1337.739049][T21374] RBP: 00007f2d1ee16090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.739063][T21374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.739076][T21374] R13: 00007f2d20e36038 R14: 00007f2d20e35fa0 R15: 00007ffcd571eca8 [ 1337.739112][T21374] [ 1337.741221][T21374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1337.831394][T13668] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1337.831426][T13668] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1339.465266][T21404] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1339.467519][T21405] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1340.274221][T13668] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1340.274585][T13668] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1340.612544][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5070'. [ 1340.681759][ T43] usb 3-1: USB disconnect, device number 56 [ 1340.996269][T21236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1341.109920][T21236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1341.138551][T21236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1341.244236][T21236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1341.249176][T21435] FAULT_INJECTION: forcing a failure. [ 1341.249176][T21435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.249234][T21435] CPU: 0 UID: 0 PID: 21435 Comm: syz.3.5075 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1341.249270][T21435] Tainted: [L]=SOFTLOCKUP [ 1341.249278][T21435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1341.249292][T21435] Call Trace: [ 1341.249301][T21435] [ 1341.249311][T21435] dump_stack_lvl+0xe8/0x150 [ 1341.249351][T21435] should_fail_ex+0x46b/0x600 [ 1341.249388][T21435] _copy_from_iter+0x1d3/0x1670 [ 1341.249437][T21435] ? __pfx__copy_from_iter+0x10/0x10 [ 1341.249468][T21435] ? trace_kmalloc+0x2a/0x110 [ 1341.249507][T21435] ? __kmalloc_noprof+0x408/0x7b0 [ 1341.249528][T21435] ? kernfs_fop_write_iter+0x159/0x540 [ 1341.249570][T21435] kernfs_fop_write_iter+0x19c/0x540 [ 1341.249614][T21435] vfs_write+0x629/0xba0 [ 1341.249658][T21435] ? __pfx_vfs_write+0x10/0x10 [ 1341.249696][T21435] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.249723][T21435] ? lockdep_hardirqs_on+0x7a/0x110 [ 1341.249760][T21435] ? mutex_lock_nested+0x152/0x1d0 [ 1341.249790][T21435] ? fdget_pos+0x252/0x320 [ 1341.249829][T21435] ksys_write+0x156/0x270 [ 1341.249867][T21435] ? __pfx_ksys_write+0x10/0x10 [ 1341.249915][T21435] do_syscall_64+0x14d/0xf80 [ 1341.249938][T21435] ? trace_irq_disable+0x3b/0x150 [ 1341.249966][T21435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.249989][T21435] ? clear_bhb_loop+0x40/0x90 [ 1341.250019][T21435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.250042][T21435] RIP: 0033:0x7f4d5fd6c819 [ 1341.250064][T21435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.250083][T21435] RSP: 002b:00007f4d5dfbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.250109][T21435] RAX: ffffffffffffffda RBX: 00007f4d5ffe5fa0 RCX: 00007f4d5fd6c819 [ 1341.250126][T21435] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1341.250141][T21435] RBP: 00007f4d5dfbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.250155][T21435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.250169][T21435] R13: 00007f4d5ffe6038 R14: 00007f4d5ffe5fa0 R15: 00007ffcb22a0598 [ 1341.250206][T21435] [ 1341.837820][ T5122] Bluetooth: hci2: command 0x1003 tx timeout [ 1341.844377][T16162] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1342.683351][T21236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.810984][T21236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.829229][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.829461][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.841629][ T5889] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1342.845049][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.845324][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.013259][ T5867] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1343.016639][ T5889] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1343.016694][ T5889] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1343.016727][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.079919][ T5889] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1343.172906][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 1343.176619][ T5867] usb 6-1: config 4 has an invalid interface number: 132 but max is 2 [ 1343.176652][ T5867] usb 6-1: config 4 has an invalid interface number: 108 but max is 2 [ 1343.176675][ T5867] usb 6-1: config 4 has an invalid interface number: 46 but max is 2 [ 1343.176698][ T5867] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1343.176718][ T5867] usb 6-1: config 4 has no interface number 0 [ 1343.176737][ T5867] usb 6-1: config 4 has no interface number 1 [ 1343.176755][ T5867] usb 6-1: config 4 has no interface number 2 [ 1343.176855][ T5867] usb 6-1: config 4 interface 132 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 1343.176886][ T5867] usb 6-1: config 4 interface 132 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1343.176912][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1343.176940][ T5867] usb 6-1: config 4 interface 132 altsetting 0 endpoint 0x6 has invalid maxpacket 12968, setting to 1024 [ 1343.176967][ T5867] usb 6-1: config 4 interface 132 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1343.176996][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1343.177020][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1343.177045][ T5867] usb 6-1: config 4 interface 132 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1343.177075][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1343.177100][ T5867] usb 6-1: config 4 interface 132 altsetting 0 endpoint 0xF has an invalid bInterval 248, changing to 7 [ 1343.177130][ T5867] usb 6-1: config 4 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1343.177157][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1343.177181][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1343.177204][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1343.177228][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1343.177252][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1343.177274][ T5867] usb 6-1: config 4 interface 132 altsetting 0 has 19 endpoint descriptors, different from the interface descriptor's value: 14 [ 1343.177303][ T5867] usb 6-1: too many endpoints for config 4 interface 108 altsetting 28: 108, using maximum allowed: 30 [ 1343.177346][ T5867] usb 6-1: config 4 interface 108 altsetting 28 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1343.177374][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x6, skipping [ 1343.177398][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1343.177421][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x4, skipping [ 1343.177445][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1343.177469][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x7, skipping [ 1343.177493][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x1, skipping [ 1343.177518][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 1343.177540][ T5867] usb 6-1: config 4 interface 108 altsetting 28 has 8 endpoint descriptors, different from the interface descriptor's value: 108 [ 1343.177585][ T5867] usb 6-1: config 4 interface 46 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1343.177613][ T5867] usb 6-1: config 4 interface 46 altsetting 0 endpoint 0xB has invalid maxpacket 41864, setting to 1024 [ 1343.177641][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1343.177664][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1343.177688][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1343.177712][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1343.177734][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1343.177758][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1343.177816][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1343.177841][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1343.177864][ T5867] usb 6-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1343.177889][ T5867] usb 6-1: config 4 interface 108 has no altsetting 0 [ 1343.181980][ T5867] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=5d.1a [ 1343.182010][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.182032][ T5867] usb 6-1: Product: syz [ 1343.182048][ T5867] usb 6-1: Manufacturer: syz [ 1343.182063][ T5867] usb 6-1: SerialNumber: syz [ 1343.361412][T13668] usb 4-1: USB disconnect, device number 24 [ 1343.743869][T21456] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1343.744009][T21456] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1343.922141][T21236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.987957][ T5867] aiptek 6-1:4.132: interface has no int in endpoints, but must have minimum 1 [ 1344.025628][ T5867] aiptek 6-1:4.108: interface has no int in endpoints, but must have minimum 1 [ 1344.045650][ T5867] aiptek 6-1:4.46: interface has no int in endpoints, but must have minimum 1 [ 1344.071984][ T5867] usb 6-1: USB disconnect, device number 24 [ 1344.435290][T13668] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1344.618921][T13668] usb 2-1: config 2 has an invalid interface number: 97 but max is 0 [ 1344.618954][T13668] usb 2-1: config 2 has no interface number 0 [ 1344.619001][T13668] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1344.619031][T13668] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 1344.619057][T13668] usb 2-1: config 2 interface 97 has no altsetting 0 [ 1344.621551][T13668] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1344.621581][T13668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.621604][T13668] usb 2-1: Product: syz [ 1344.621620][T13668] usb 2-1: Manufacturer: syz [ 1344.621636][T13668] usb 2-1: SerialNumber: syz [ 1344.670662][T21479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1344.670860][T21479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1344.928777][T21236] veth0_vlan: entered promiscuous mode [ 1344.988057][T21236] veth1_vlan: entered promiscuous mode [ 1345.131492][T13668] usb-storage 2-1:2.97: USB Mass Storage device detected [ 1345.137264][T13668] usb-storage 2-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 1345.139136][ T5867] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1345.164059][T13668] scsi host1: usb-storage 2-1:2.97 [ 1345.168354][T21236] veth0_macvtap: entered promiscuous mode [ 1345.187799][T21236] veth1_macvtap: entered promiscuous mode [ 1345.207934][T13668] usb 2-1: USB disconnect, device number 100 [ 1345.232772][T21236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.254111][T21236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.284427][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.284736][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.284779][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.284818][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.334907][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1345.339895][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.339929][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.339957][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1345.339971][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.342300][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1345.387398][ T5867] usb 6-1: config 0 descriptor?? [ 1345.442176][ T5867] hub 6-1:0.0: USB hub found [ 1345.524190][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1345.526508][ T43] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1345.526527][ T43] usb 3-1: config 0 has no interface number 0 [ 1345.528584][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1345.528602][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.528614][ T43] usb 3-1: Product: syz [ 1345.528623][ T43] usb 3-1: Manufacturer: syz [ 1345.528632][ T43] usb 3-1: SerialNumber: syz [ 1345.535081][ T43] usb 3-1: config 0 descriptor?? [ 1345.688586][ T5867] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1345.953026][ T2887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.953116][ T2887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.042416][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1346.042462][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1346.119583][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.119608][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.175346][ T5867] hid-generic 0003:046D:C31C.003B: unknown main item tag 0x0 [ 1346.271645][ T5867] hid-generic 0003:046D:C31C.003B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1346.368396][T13668] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1346.541795][T13668] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1346.541850][T13668] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1346.541875][T13668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.596172][T13668] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1346.667281][ T31] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1346.782795][ T5858] usb 4-1: USB disconnect, device number 25 [ 1346.841049][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1346.842595][ T31] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 1346.842624][ T31] usb 5-1: config 8 has no interface number 0 [ 1346.842755][ T31] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1346.842775][ T31] usb 5-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1346.842789][ T31] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.846310][ T31] usb 5-1: string descriptor 0 read error: -22 [ 1346.846458][ T31] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1346.846474][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.898315][T21517] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1346.924782][T21496] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 1346.963031][ T31] metro_usb 5-1:8.109: required endpoints missing [ 1347.192012][T13668] usb 5-1: USB disconnect, device number 54 [ 1347.370353][ T31] usb 6-1: USB disconnect, device number 25 [ 1347.371259][T21496] usbhid 6-1:0.0: reset_resume error -19 [ 1347.439934][ T5858] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1347.597278][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1347.599906][ T5858] usb 2-1: config 4 has an invalid interface number: 132 but max is 2 [ 1347.599935][ T5858] usb 2-1: config 4 has an invalid interface number: 108 but max is 2 [ 1347.599948][ T5858] usb 2-1: config 4 has an invalid interface number: 46 but max is 2 [ 1347.599960][ T5858] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1347.600012][ T5858] usb 2-1: config 4 has no interface number 0 [ 1347.600023][ T5858] usb 2-1: config 4 has no interface number 1 [ 1347.600033][ T5858] usb 2-1: config 4 has no interface number 2 [ 1347.600081][ T5858] usb 2-1: config 4 interface 132 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 1347.600097][ T5858] usb 2-1: config 4 interface 132 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1347.600111][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1347.600167][ T5858] usb 2-1: config 4 interface 132 altsetting 0 endpoint 0x6 has invalid maxpacket 12968, setting to 1024 [ 1347.600182][ T5858] usb 2-1: config 4 interface 132 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1347.600197][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.600209][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1347.600222][ T5858] usb 2-1: config 4 interface 132 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1347.600238][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1347.600251][ T5858] usb 2-1: config 4 interface 132 altsetting 0 endpoint 0xF has an invalid bInterval 248, changing to 7 [ 1347.600266][ T5858] usb 2-1: config 4 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1347.600318][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1347.600332][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.600344][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1347.600357][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1347.600370][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.600382][ T5858] usb 2-1: config 4 interface 132 altsetting 0 has 19 endpoint descriptors, different from the interface descriptor's value: 14 [ 1347.600398][ T5858] usb 2-1: too many endpoints for config 4 interface 108 altsetting 28: 108, using maximum allowed: 30 [ 1347.600634][ T5858] usb 2-1: config 4 interface 108 altsetting 28 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1347.600652][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x6, skipping [ 1347.600666][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1347.600686][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x4, skipping [ 1347.600700][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1347.600713][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x7, skipping [ 1347.600727][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x1, skipping [ 1347.600739][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 1347.601116][ T5858] usb 2-1: config 4 interface 108 altsetting 28 has 8 endpoint descriptors, different from the interface descriptor's value: 108 [ 1347.601152][ T5858] usb 2-1: config 4 interface 46 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1347.601168][ T5858] usb 2-1: config 4 interface 46 altsetting 0 endpoint 0xB has invalid maxpacket 41864, setting to 1024 [ 1347.601184][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1347.601197][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1347.601210][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1347.601223][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1347.601598][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1347.601613][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1347.601626][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1347.601639][ T5858] usb 2-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1347.601652][ T5858] usb 2-1: config 4 interface 108 has no altsetting 0 [ 1347.605708][ T5858] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=5d.1a [ 1347.605730][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.606097][ T5858] usb 2-1: Product: syz [ 1347.606108][ T5858] usb 2-1: Manufacturer: syz [ 1347.606117][ T5858] usb 2-1: SerialNumber: syz [ 1347.687542][T21527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1347.688777][T21527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1348.007618][ T31] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1348.534045][ T5858] aiptek 2-1:4.132: interface has no int in endpoints, but must have minimum 1 [ 1348.605115][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1348.605139][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.605211][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1348.605226][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.643837][ T31] usb 6-1: config 0 descriptor?? [ 1348.693149][ T31] hub 6-1:0.0: USB hub found [ 1348.693652][T21537] tmpfs: Bad value for 'mpol' [ 1349.336612][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1349.337162][ T43] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1349.456832][ T31] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1349.491910][ T43] usb 3-1: USB disconnect, device number 57 [ 1349.563749][ T5858] aiptek 2-1:4.108: interface has no int in endpoints, but must have minimum 1 [ 1349.584226][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 1349.590730][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1349.671029][ T5858] aiptek 2-1:4.46: interface has no int in endpoints, but must have minimum 1 [ 1349.693475][ T31] usb 6-1: USB disconnect, device number 26 [ 1349.818596][ T5858] usb 2-1: USB disconnect, device number 101 [ 1350.215116][ T31] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 1350.322223][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1350.397578][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.397611][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1350.397676][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1350.397722][ T31] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1350.397746][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.404976][T21548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1350.466293][ T31] hub 6-1:1.0: bad descriptor, ignoring hub [ 1350.466336][ T31] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1350.467355][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 1350.467371][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 1350.492792][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1350.496067][ T43] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1350.496097][ T43] usb 3-1: config 1 has no interface number 0 [ 1350.496147][ T43] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1350.496173][ T43] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1350.496199][ T43] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1350.525969][ T43] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1350.526004][ T43] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1350.526027][ T43] usb 3-1: Product: syz [ 1350.526043][ T43] usb 3-1: Manufacturer: syz [ 1350.526059][ T43] usb 3-1: SerialNumber: syz [ 1350.578364][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1350.605657][ T31] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1350.605681][ T31] cdc_wdm 6-1:1.0: Unknown control protocol [ 1350.607096][T21552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1350.607230][T21552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1350.662709][T21548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.672489][T21548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.745470][ T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1350.745506][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.772260][ T10] usb 5-1: config 0 descriptor?? [ 1350.812498][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1350.913650][T21548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.931387][T21548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.049966][T19822] usb 6-1: USB disconnect, device number 27 [ 1351.089805][T21552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1351.091479][T21552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1351.214848][ T10] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1351.262316][T19822] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1351.422678][T19822] usb 4-1: Using ep0 maxpacket: 16 [ 1351.425687][T19822] usb 4-1: config 4 has an invalid interface number: 132 but max is 2 [ 1351.425722][T19822] usb 4-1: config 4 has an invalid interface number: 108 but max is 2 [ 1351.425808][T19822] usb 4-1: config 4 has an invalid interface number: 46 but max is 2 [ 1351.425831][T19822] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1351.425851][T19822] usb 4-1: config 4 has no interface number 0 [ 1351.425870][T19822] usb 4-1: config 4 has no interface number 1 [ 1351.425888][T19822] usb 4-1: config 4 has no interface number 2 [ 1351.426004][T19822] usb 4-1: config 4 interface 132 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 1351.426036][T19822] usb 4-1: config 4 interface 132 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1351.426062][T19822] usb 4-1: config 4 interface 132 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1351.426143][T19822] usb 4-1: config 4 interface 132 altsetting 0 endpoint 0x6 has invalid maxpacket 12968, setting to 1024 [ 1351.426159][T19822] usb 4-1: config 4 interface 132 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1351.426177][T19822] usb 4-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.426200][T19822] usb 4-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1351.426225][T19822] usb 4-1: config 4 interface 132 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1351.426317][T19822] usb 4-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1351.426333][T19822] usb 4-1: config 4 interface 132 altsetting 0 endpoint 0xF has an invalid bInterval 248, changing to 7 [ 1351.426349][T19822] usb 4-1: config 4 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1351.426376][T19822] usb 4-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1351.426400][T19822] usb 4-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.426490][T19822] usb 4-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1351.426504][T19822] usb 4-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1351.426517][T19822] usb 4-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.426529][T19822] usb 4-1: config 4 interface 132 altsetting 0 has 19 endpoint descriptors, different from the interface descriptor's value: 14 [ 1351.426563][T19822] usb 4-1: too many endpoints for config 4 interface 108 altsetting 28: 108, using maximum allowed: 30 [ 1351.426665][T19822] usb 4-1: config 4 interface 108 altsetting 28 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1351.426690][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x6, skipping [ 1351.426704][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1351.426725][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x4, skipping [ 1351.426749][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1351.426830][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x7, skipping [ 1351.426852][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x1, skipping [ 1351.426866][T19822] usb 4-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 1351.426879][T19822] usb 4-1: config 4 interface 108 altsetting 28 has 8 endpoint descriptors, different from the interface descriptor's value: 108 [ 1351.426993][T19822] usb 4-1: config 4 interface 46 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1351.427022][T19822] usb 4-1: config 4 interface 46 altsetting 0 endpoint 0xB has invalid maxpacket 41864, setting to 1024 [ 1351.427039][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1351.427052][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1351.427066][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1351.427089][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1351.427170][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1351.427194][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1351.427209][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1351.427223][T19822] usb 4-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1351.427236][T19822] usb 4-1: config 4 interface 108 has no altsetting 0 [ 1351.431882][T19822] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=5d.1a [ 1351.431977][T19822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.431999][T19822] usb 4-1: Product: syz [ 1351.432013][T19822] usb 4-1: Manufacturer: syz [ 1351.432022][T19822] usb 4-1: SerialNumber: syz [ 1351.487932][T21569] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1351.488125][T21569] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1351.817065][T19822] aiptek 4-1:4.132: interface has no int in endpoints, but must have minimum 1 [ 1351.871394][ T10] gspca_cpia1: usb_control_msg 02, error -71 [ 1351.873062][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 1351.873079][ T10] cpia1 5-1:0.0: unexpected systemstate: 00 [ 1351.905810][ T10] usb 5-1: USB disconnect, device number 55 [ 1351.935497][T13668] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1351.964073][T19822] aiptek 4-1:4.108: interface has no int in endpoints, but must have minimum 1 [ 1351.984526][T19822] aiptek 4-1:4.46: interface has no int in endpoints, but must have minimum 1 [ 1352.031615][T19822] usb 4-1: USB disconnect, device number 26 [ 1352.121887][T13668] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.121917][T13668] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1352.121971][T13668] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1352.122020][T13668] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1352.122045][T13668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.179109][T21548] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1352.193687][T13668] hub 6-1:1.0: bad descriptor, ignoring hub [ 1352.193731][T13668] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1352.194592][T13668] cdc_wdm 6-1:1.0: skipping garbage [ 1352.194608][T13668] cdc_wdm 6-1:1.0: skipping garbage [ 1352.217558][T13668] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1352.217584][T13668] cdc_wdm 6-1:1.0: Unknown control protocol [ 1352.247693][ T43] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1352.251572][ T43] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1352.252165][ T43] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1352.270528][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1352.312937][ T43] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1352.316335][ T43] usb 3-1: USB disconnect, device number 58 [ 1352.334334][ T43] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1352.427011][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1352.429272][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1352.429302][ T9] usb 2-1: config 0 has no interface number 0 [ 1352.429343][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1352.429360][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1352.432131][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1352.432161][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.432182][ T9] usb 2-1: Product: syz [ 1352.432193][ T9] usb 2-1: Manufacturer: syz [ 1352.432202][ T9] usb 2-1: SerialNumber: syz [ 1352.441095][ T9] usb 2-1: config 0 descriptor?? [ 1352.528850][ T43] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1352.529003][ T43] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1352.529161][ T43] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1352.745363][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.748030][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.100454][T19822] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1353.186383][T21597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.187610][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 1353.189170][T21597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.202588][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input136 [ 1353.222706][T21597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.230146][T21597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.263147][T19822] usb 5-1: Using ep0 maxpacket: 16 [ 1353.269029][T19822] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1353.269148][T19822] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1353.269175][T19822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.316678][T19822] usb 5-1: config 0 descriptor?? [ 1353.373408][T19822] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1353.406458][ T43] usb 2-1: USB disconnect, device number 102 [ 1353.511314][T21601] loop5: detected capacity change from 0 to 7 [ 1353.525424][T15785] Dev loop5: unable to read RDB block 7 [ 1353.525484][T15785] loop5: unable to read partition table [ 1353.525785][T15785] loop5: partition table beyond EOD, truncated [ 1353.552801][T21601] Dev loop5: unable to read RDB block 7 [ 1353.552851][T21601] loop5: unable to read partition table [ 1353.553111][T21601] loop5: partition table beyond EOD, truncated [ 1353.553148][T21601] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1353.623577][ T43] appletouch 2-1:0.85: input: appletouch disconnected [ 1353.720016][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1353.881201][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1353.885980][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1353.886014][ T31] usb 4-1: config 1 has no interface number 0 [ 1353.886050][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1353.886075][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1353.886090][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1353.889181][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1353.889202][ T31] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1353.889215][ T31] usb 4-1: Product: syz [ 1353.889224][ T31] usb 4-1: Manufacturer: syz [ 1353.889233][ T31] usb 4-1: SerialNumber: syz [ 1353.955168][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1353.981100][T21603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1353.981219][T21603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1354.317679][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1354.619972][ T9] usb 3-1: config 4 has an invalid interface number: 132 but max is 2 [ 1354.620007][ T9] usb 3-1: config 4 has an invalid interface number: 108 but max is 2 [ 1354.620031][ T9] usb 3-1: config 4 has an invalid interface number: 46 but max is 2 [ 1354.620053][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1354.620073][ T9] usb 3-1: config 4 has no interface number 0 [ 1354.620092][ T9] usb 3-1: config 4 has no interface number 1 [ 1354.620109][ T9] usb 3-1: config 4 has no interface number 2 [ 1354.620189][ T9] usb 3-1: config 4 interface 132 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 1354.620220][ T9] usb 3-1: config 4 interface 132 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1354.620247][ T9] usb 3-1: config 4 interface 132 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1354.620274][ T9] usb 3-1: config 4 interface 132 altsetting 0 endpoint 0x6 has invalid maxpacket 12968, setting to 1024 [ 1354.620301][ T9] usb 3-1: config 4 interface 132 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1354.620329][ T9] usb 3-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1354.620353][ T9] usb 3-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1354.620378][ T9] usb 3-1: config 4 interface 132 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1354.620408][ T9] usb 3-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1354.620433][ T9] usb 3-1: config 4 interface 132 altsetting 0 endpoint 0xF has an invalid bInterval 248, changing to 7 [ 1354.620460][ T9] usb 3-1: config 4 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1354.620490][ T9] usb 3-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1354.620514][ T9] usb 3-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1354.620537][ T9] usb 3-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1354.620561][ T9] usb 3-1: config 4 interface 132 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1354.620586][ T9] usb 3-1: config 4 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1354.620608][ T9] usb 3-1: config 4 interface 132 altsetting 0 has 19 endpoint descriptors, different from the interface descriptor's value: 14 [ 1354.620637][ T9] usb 3-1: too many endpoints for config 4 interface 108 altsetting 28: 108, using maximum allowed: 30 [ 1354.620690][ T9] usb 3-1: config 4 interface 108 altsetting 28 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1354.620720][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x6, skipping [ 1354.620744][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1354.620768][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x4, skipping [ 1354.620790][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0xF, skipping [ 1354.620813][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x7, skipping [ 1354.620838][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x1, skipping [ 1354.620862][ T9] usb 3-1: config 4 interface 108 altsetting 28 has a duplicate endpoint with address 0x3, skipping [ 1354.620886][ T9] usb 3-1: config 4 interface 108 altsetting 28 has 8 endpoint descriptors, different from the interface descriptor's value: 108 [ 1354.620934][ T9] usb 3-1: config 4 interface 46 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1354.620976][ T9] usb 3-1: config 4 interface 46 altsetting 0 endpoint 0xB has invalid maxpacket 41864, setting to 1024 [ 1354.621006][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1354.621116][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1354.621143][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1354.621166][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1354.621191][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1354.621216][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1354.621242][ T9] usb 3-1: config 4 interface 46 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1354.621266][ T9] usb 3-1: config 4 interface 108 has no altsetting 0 [ 1354.637211][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=5d.1a [ 1354.637335][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.637357][ T9] usb 3-1: Product: syz [ 1354.637372][ T9] usb 3-1: Manufacturer: syz [ 1354.637385][ T9] usb 3-1: SerialNumber: syz [ 1354.784942][T21606] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1354.785220][T21606] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1354.993516][T21603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1354.997984][T21603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1355.151887][ T9] aiptek 3-1:4.132: interface has no int in endpoints, but must have minimum 1 [ 1355.241141][T13668] usb 6-1: USB disconnect, device number 28 [ 1355.874730][T21616] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1355.910889][ T9] aiptek 3-1:4.108: interface has no int in endpoints, but must have minimum 1 [ 1355.979356][ T9] aiptek 3-1:4.46: interface has no int in endpoints, but must have minimum 1 [ 1356.035730][ T9] usb 3-1: USB disconnect, device number 59 [ 1356.163060][T19822] usb 5-1: USB disconnect, device number 56 [ 1356.716175][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1356.863318][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1356.866070][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1357.485111][ T31] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1357.556744][ T31] usb 4-1: USB disconnect, device number 27 [ 1357.619579][ T31] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1358.170721][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1358.463263][ T31] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1358.463418][ T31] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1358.463562][ T31] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1358.522062][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1358.523873][ T43] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1358.523892][ T43] usb 6-1: config 0 has no interface number 0 [ 1358.523922][ T43] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1358.523939][ T43] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1358.526979][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1358.526999][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.527011][ T43] usb 6-1: Product: syz [ 1358.527020][ T43] usb 6-1: Manufacturer: syz [ 1358.527029][ T43] usb 6-1: SerialNumber: syz [ 1358.629381][ T43] usb 6-1: config 0 descriptor?? [ 1359.086759][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.090642][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.292285][T21654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1359.545849][ T43] appletouch 6-1:0.85: Geyser mode initialized. [ 1359.550115][ T43] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input140 [ 1359.901206][T21667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1360.694724][ T5889] usb 6-1: USB disconnect, device number 29 [ 1360.881673][ T5889] appletouch 6-1:0.85: input: appletouch disconnected [ 1360.965242][ T43] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1360.986635][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1361.082768][T19822] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1361.128939][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1361.128978][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.129022][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1361.129048][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.139908][ T43] usb 5-1: config 0 descriptor?? [ 1361.146777][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1361.149566][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1361.149595][ T10] usb 2-1: config 1 has no interface number 0 [ 1361.149643][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1361.149670][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1361.149695][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1361.152923][ T43] hub 5-1:0.0: USB hub found [ 1361.161020][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1361.161052][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1361.161075][ T10] usb 2-1: Product: syz [ 1361.161091][ T10] usb 2-1: Manufacturer: syz [ 1361.161107][ T10] usb 2-1: SerialNumber: syz [ 1361.274246][T21671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.274450][T21671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.328736][T19822] usb 3-1: device descriptor read/64, error -71 [ 1361.371427][ T43] hub 5-1:0.0: 1 port detected [ 1361.394444][T21678] team0: Device gtp0 is of different type [ 1361.586112][T19822] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1361.716832][T21671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.717121][T21671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.738475][T19822] usb 3-1: device descriptor read/64, error -71 [ 1361.852863][T19822] usb usb3-port1: attempt power cycle [ 1361.916517][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1362.080055][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.080523][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.080555][ T31] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1362.080580][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.106910][ T31] usb 4-1: config 0 descriptor?? [ 1362.738708][T19822] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1362.849381][ T43] hub 5-1:0.0: hub_hub_status failed (err = -110) [ 1362.849479][ T43] hub 5-1:0.0: config failed, can't get hub status (err -110) [ 1362.958846][T19822] usb 3-1: device descriptor read/8, error -71 [ 1363.006253][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 1363.007038][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1363.053497][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1363.054174][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1363.055098][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1363.096970][ T43] usb 5-1: USB disconnect, device number 57 [ 1363.191259][ T31] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 1363.191297][ T31] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 1363.191323][ T31] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 1363.191351][ T31] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 1363.191385][ T31] hid-steam 0003:28DE:1142.003C: unknown main item tag 0x0 [ 1363.197421][ T31] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1363.209267][T19822] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1363.231522][T19822] usb 3-1: device descriptor read/8, error -71 [ 1363.239026][ T10] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1363.357411][T19822] usb usb3-port1: unable to enumerate USB device [ 1363.954906][ T10] usb 2-1: USB disconnect, device number 103 [ 1363.968150][ T10] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1364.101475][T13668] usb 4-1: USB disconnect, device number 28 [ 1364.304621][ T10] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1364.304772][ T10] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1364.304914][ T10] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1364.780139][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1364.897679][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1364.905294][ T36] audit: type=1326 audit(1775226377.689:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.905620][ T36] audit: type=1326 audit(1775226377.689:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.907293][ T36] audit: type=1326 audit(1775226377.689:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.909064][ T36] audit: type=1326 audit(1775226377.689:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.911169][ T36] audit: type=1326 audit(1775226377.698:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.911217][ T36] audit: type=1326 audit(1775226377.698:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.911259][ T36] audit: type=1326 audit(1775226377.698:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.911300][ T36] audit: type=1326 audit(1775226377.698:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.911571][ T36] audit: type=1326 audit(1775226377.698:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.912070][ T36] audit: type=1326 audit(1775226377.698:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5fd6c819 code=0x7ffc0000 [ 1364.940438][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1364.951936][ T10] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 1364.951965][ T10] usb 2-1: config 0 has no interface number 0 [ 1364.951996][ T10] usb 2-1: too many endpoints for config 0 interface 73 altsetting 78: 253, using maximum allowed: 30 [ 1364.952057][ T10] usb 2-1: config 0 interface 73 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1364.952083][ T10] usb 2-1: config 0 interface 73 has no altsetting 0 [ 1364.952117][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1364.952140][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.971681][ T10] usb 2-1: config 0 descriptor?? [ 1365.090305][ T43] usb 5-1: device descriptor read/64, error -71 [ 1365.186186][ T5791] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1365.202571][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1365.217844][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1365.256992][ T10] gspca_vc032x: reg_r err -71 [ 1365.257015][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257028][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257039][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257049][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257058][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257069][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257078][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257089][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257098][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257108][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257118][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257128][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257138][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257148][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257158][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257168][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257176][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257186][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1365.257195][ T10] gspca_vc032x: Unknown sensor... [ 1365.257291][ T10] vc032x 2-1:0.73: probe with driver vc032x failed with error -22 [ 1365.269355][ T10] usb 2-1: USB disconnect, device number 104 [ 1365.390785][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1365.428612][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 1365.878796][T13668] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1365.892063][ T5791] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1365.892103][ T5791] usb 3-1: config 1 has no interface number 0 [ 1365.892155][ T5791] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1365.892183][ T5791] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1365.892209][ T5791] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1365.911395][ T5791] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1365.911427][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1365.911446][ T5791] usb 3-1: Product: syz [ 1365.911461][ T5791] usb 3-1: Manufacturer: syz [ 1365.911476][ T5791] usb 3-1: SerialNumber: syz [ 1365.975080][T21729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1365.975272][T21729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1366.051722][ T43] usb 5-1: device descriptor read/64, error -71 [ 1366.078931][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.078954][T13668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.078979][T13668] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1366.078993][T13668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.103692][T13668] usb 4-1: config 0 descriptor?? [ 1366.169696][ T43] usb usb5-port1: attempt power cycle [ 1366.421450][T21729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1366.421587][T21729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1366.532684][ T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1366.554703][ T43] usb 5-1: device descriptor read/8, error -71 [ 1366.564065][T13668] hid-steam 0003:28DE:1142.003D: unknown main item tag 0x0 [ 1366.564103][T13668] hid-steam 0003:28DE:1142.003D: unknown main item tag 0x0 [ 1366.564187][T13668] hid-steam 0003:28DE:1142.003D: unknown main item tag 0x0 [ 1366.564214][T13668] hid-steam 0003:28DE:1142.003D: unknown main item tag 0x0 [ 1366.564240][T13668] hid-steam 0003:28DE:1142.003D: unknown main item tag 0x0 [ 1366.578566][T13668] hid-steam 0003:28DE:1142.003D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1366.664987][T21742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1366.692842][ T5858] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1366.821076][ T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1366.831895][ T5858] usb 6-1: device descriptor read/64, error -71 [ 1366.843258][ T43] usb 5-1: device descriptor read/8, error -71 [ 1366.960695][ T43] usb usb5-port1: unable to enumerate USB device [ 1367.109706][ T5858] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1367.243629][T21750] FAULT_INJECTION: forcing a failure. [ 1367.243629][T21750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.243670][T21750] CPU: 1 UID: 0 PID: 21750 Comm: syz.1.5174 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1367.243701][T21750] Tainted: [L]=SOFTLOCKUP [ 1367.243710][T21750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1367.243723][T21750] Call Trace: [ 1367.243733][T21750] [ 1367.243742][T21750] dump_stack_lvl+0xe8/0x150 [ 1367.243782][T21750] should_fail_ex+0x46b/0x600 [ 1367.243816][T21750] _copy_from_iter+0x1d3/0x1670 [ 1367.243856][T21750] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1367.243889][T21750] ? __alloc_skb+0x27d/0x7d0 [ 1367.243910][T21750] ? __pfx__copy_from_iter+0x10/0x10 [ 1367.243940][T21750] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1367.243972][T21750] ? __alloc_skb+0x27d/0x7d0 [ 1367.243998][T21750] ? netlink_sendmsg+0x650/0xb40 [ 1367.244028][T21750] ? skb_put+0x11b/0x210 [ 1367.244053][T21750] netlink_sendmsg+0x6c0/0xb40 [ 1367.244095][T21750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1367.244131][T21750] ? unwind_get_return_address+0x4d/0x90 [ 1367.244157][T21750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1367.244193][T21750] ____sys_sendmsg+0x94c/0x9c0 [ 1367.244225][T21750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1367.244260][T21750] ? import_iovec+0x73/0xa0 [ 1367.244286][T21750] ___sys_sendmsg+0x2a5/0x360 [ 1367.244315][T21750] ? __pfx____sys_sendmsg+0x10/0x10 [ 1367.244387][T21750] ? __fget_files+0x2a/0x420 [ 1367.244416][T21750] ? __fget_files+0x3a6/0x420 [ 1367.244456][T21750] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1367.244483][T21750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1367.244519][T21750] ? __pfx_ksys_write+0x10/0x10 [ 1367.244564][T21750] do_syscall_64+0x14d/0xf80 [ 1367.244588][T21750] ? trace_irq_disable+0x3b/0x150 [ 1367.244615][T21750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.244636][T21750] ? clear_bhb_loop+0x40/0x90 [ 1367.244662][T21750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.244685][T21750] RIP: 0033:0x7f2ac367c819 [ 1367.244707][T21750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.244726][T21750] RSP: 002b:00007f2ac18ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1367.244751][T21750] RAX: ffffffffffffffda RBX: 00007f2ac38f5fa0 RCX: 00007f2ac367c819 [ 1367.244768][T21750] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1367.244782][T21750] RBP: 00007f2ac18ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.244796][T21750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.244809][T21750] R13: 00007f2ac38f6038 R14: 00007f2ac38f5fa0 R15: 00007ffe55bb18d8 [ 1367.244842][T21750] [ 1367.276688][T13668] usb 4-1: USB disconnect, device number 29 [ 1367.301926][ T5858] usb 6-1: device descriptor read/64, error -71 [ 1367.430711][ T5858] usb usb6-port1: attempt power cycle [ 1367.531588][ T5791] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1367.532355][ T5791] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1367.532844][ T5791] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1367.606097][T21754] netlink: 876 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1367.666241][ T5791] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1367.679916][ T5791] usb 3-1: USB disconnect, device number 64 [ 1367.683278][ T5791] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1367.827316][ T5791] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1367.827401][ T5791] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1367.827485][ T5791] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1367.879092][ T5858] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1367.901155][ T5858] usb 6-1: device descriptor read/8, error -71 [ 1367.946953][T21761] openvswitch: netlink: Flow actions attr not present in new flow. [ 1368.289513][ T5858] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1368.512050][ T5858] usb 6-1: device descriptor read/8, error -71 [ 1368.619621][T21765] sctp: [Deprecated]: syz.3.5180 (pid 21765) Use of int in max_burst socket option. [ 1368.619621][T21765] Use struct sctp_assoc_value instead [ 1368.641859][ T5858] usb usb6-port1: unable to enumerate USB device [ 1368.744829][ T5791] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1369.403597][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5183'. [ 1369.403615][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5183'. [ 1369.403625][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5183'. [ 1369.428487][ T5791] usb 3-1: Using ep0 maxpacket: 8 [ 1369.441718][ T5791] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1369.441751][ T5791] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.441805][ T5791] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.441854][ T5791] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1369.441881][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.448458][ T5791] usbtmc 3-1:16.0: bulk endpoints not found [ 1369.610239][T19822] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1369.705724][T13668] usb 3-1: USB disconnect, device number 65 [ 1369.750335][T19822] usb 2-1: device descriptor read/64, error -71 [ 1370.005597][T19822] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1370.005619][ T5858] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1370.005780][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1370.123107][ T31] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1370.144479][T19822] usb 2-1: device descriptor read/64, error -71 [ 1370.176587][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1370.179041][ T5858] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1370.179072][ T5858] usb 4-1: config 1 has no interface number 0 [ 1370.179246][ T5858] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1370.179277][ T5858] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1370.179304][ T5858] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1370.179472][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.179489][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.179512][ T43] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1370.179526][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.186303][ T5858] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1370.186324][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1370.186336][ T5858] usb 4-1: Product: syz [ 1370.186345][ T5858] usb 4-1: Manufacturer: syz [ 1370.186354][ T5858] usb 4-1: SerialNumber: syz [ 1370.197993][T13668] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1370.262563][T19822] usb usb2-port1: attempt power cycle [ 1370.320392][ T43] usb 6-1: config 0 descriptor?? [ 1370.332628][T21778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1370.332790][T21778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1370.360723][T13668] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1370.360758][T13668] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.360808][T13668] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.360853][T13668] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1370.360878][T13668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.370870][T13668] usbtmc 3-1:16.0: bulk endpoints not found [ 1370.409383][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.409499][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1370.409553][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1370.414827][ T31] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1370.414862][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.481771][T21780] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1370.496124][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 1370.496231][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1370.512047][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 1370.512070][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 1370.541907][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1370.542171][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 1370.591164][T13668] usb 3-1: USB disconnect, device number 66 [ 1370.625967][T19822] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1370.649239][T19822] usb 2-1: device descriptor read/8, error -71 [ 1370.771716][T21781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.773009][T21778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1370.773405][T21778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1370.774342][T21781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.789065][ T43] hid-steam 0003:28DE:1142.003E: unknown main item tag 0x0 [ 1370.789105][ T43] hid-steam 0003:28DE:1142.003E: unknown main item tag 0x0 [ 1370.789134][ T43] hid-steam 0003:28DE:1142.003E: unknown main item tag 0x0 [ 1370.789161][ T43] hid-steam 0003:28DE:1142.003E: unknown main item tag 0x0 [ 1370.789189][ T43] hid-steam 0003:28DE:1142.003E: unknown main item tag 0x0 [ 1370.801660][ C0] wdm_int_callback: 1803 callbacks suppressed [ 1370.801685][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1370.801703][ C0] wdm_int_callback: 1803 callbacks suppressed [ 1370.801718][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1370.879018][ T43] hid-steam 0003:28DE:1142.003E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1370.904863][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1370.904895][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1370.907829][T19822] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1370.944172][T19822] usb 2-1: device descriptor read/8, error -71 [ 1371.013509][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.013542][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.013785][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.013807][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.014045][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.014066][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.014302][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.014323][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.053456][T19822] usb usb2-port1: unable to enumerate USB device [ 1371.198610][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.199642][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.203804][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.209054][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.421716][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.422304][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.425804][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.426400][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.429282][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.430276][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.490401][T21784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.494199][T21784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.523329][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.523366][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.523582][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.523601][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.523856][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.523875][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.524121][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1371.524135][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1371.529144][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1371.587373][T19822] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1371.665485][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.666571][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.676031][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.676601][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.711489][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.712882][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.768782][T19822] usb 3-1: Using ep0 maxpacket: 32 [ 1371.778149][T19822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.778185][T19822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.778231][T19822] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1371.778258][T19822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.792957][T19822] usb 3-1: config 0 descriptor?? [ 1371.797391][T19822] hub 3-1:0.0: USB hub found [ 1371.923109][ T5791] usb 6-1: USB disconnect, device number 34 [ 1371.966534][ T5858] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1371.967306][ T5858] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1371.967915][ T5858] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1372.089812][ T5858] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1372.099148][T19822] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1372.128359][ T5858] usb 4-1: USB disconnect, device number 30 [ 1372.144841][ T5858] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1372.260987][ T5858] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1372.261122][ T5858] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1372.261249][ T5858] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1372.441997][ T43] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1372.541416][T19822] hid-generic 0003:046D:C31C.003F: unknown main item tag 0x0 [ 1372.561443][T19822] hid-generic 0003:046D:C31C.003F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1372.604894][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1372.608708][ T43] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1372.608740][ T43] usb 2-1: config 0 has no interface number 0 [ 1372.608800][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1372.608823][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1372.608851][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1372.608882][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1372.608908][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1372.608934][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1372.608956][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1372.608981][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1372.609003][ T43] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.611709][ T43] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1372.611741][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.611762][ T43] usb 2-1: Product: syz [ 1372.611777][ T43] usb 2-1: Manufacturer: syz [ 1372.611793][ T43] usb 2-1: SerialNumber: syz [ 1372.778585][ T43] usb 2-1: config 0 descriptor?? [ 1372.782386][T21791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1372.799202][ T43] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1372.799225][ T43] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1372.967059][ T10] usb 3-1: USB disconnect, device number 67 [ 1373.020431][T21797] fido_id[21797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1373.028751][ T31] usb 2-1: USB disconnect, device number 109 [ 1373.136529][ T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1373.147417][T19822] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1373.267054][T13668] usb 5-1: USB disconnect, device number 62 [ 1373.297161][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1373.302237][ T43] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1373.302269][ T43] usb 6-1: config 0 has no interface number 0 [ 1373.302301][ T43] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1373.302315][ T43] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1373.302330][ T43] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1373.302346][ T43] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1373.302361][ T43] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1373.302375][ T43] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.302388][ T43] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1373.302405][ T43] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1373.302420][ T43] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1373.305022][ T43] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1373.305054][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.305066][ T43] usb 6-1: Product: syz [ 1373.305075][ T43] usb 6-1: Manufacturer: syz [ 1373.305083][ T43] usb 6-1: SerialNumber: syz [ 1373.331551][T19822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.331593][T19822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.331631][T19822] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1373.331653][T19822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.425106][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1373.440573][ T43] usb 6-1: config 0 descriptor?? [ 1373.446120][T21799] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1373.458999][T19822] usb 4-1: config 0 descriptor?? [ 1373.544554][ T43] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1373.544576][ T43] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1373.564142][ T10] usb 3-1: device descriptor read/64, error -71 [ 1373.676459][T13668] usb 6-1: USB disconnect, device number 35 [ 1373.820631][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1373.901060][ T5791] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1373.953929][T19822] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 1373.953970][T19822] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 1373.953997][T19822] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 1373.954023][T19822] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 1373.970103][ T10] usb 3-1: device descriptor read/64, error -71 [ 1373.973880][T19822] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1374.105586][ T10] usb usb3-port1: attempt power cycle [ 1374.111067][ T5791] usb 5-1: Using ep0 maxpacket: 32 [ 1374.600339][ T5791] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1374.600441][ T5791] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1374.600468][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.612073][ T5791] usb 5-1: config 0 descriptor?? [ 1374.617229][ T5791] hub 5-1:0.0: bad descriptor, ignoring hub [ 1374.617267][ T5791] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1374.620391][ T5791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1374.734883][ T5791] usb 4-1: USB disconnect, device number 31 [ 1375.273818][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1375.296151][ T10] usb 3-1: device descriptor read/8, error -71 [ 1375.297268][T21807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.298193][T21807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.435290][ T31] usb 5-1: USB disconnect, device number 63 [ 1375.553378][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1375.573821][ T10] usb 3-1: device descriptor read/8, error -71 [ 1375.673728][T21829] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1375.745856][ T10] usb usb3-port1: unable to enumerate USB device [ 1375.904317][T19822] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1376.031285][ T31] [ 1376.031297][ T31] ====================================================== [ 1376.031303][ T31] WARNING: possible circular locking dependency detected [ 1376.031312][ T31] syzkaller #0 Tainted: G L [ 1376.031320][ T31] ------------------------------------------------------ [ 1376.031324][ T31] kworker/1:0/31 is trying to acquire lock: [ 1376.031332][ T31] ffff888019c480a8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1376.031376][ T31] [ 1376.031376][ T31] but task is already holding lock: [ 1376.031381][ T31] ffffffff8ddbdc60 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 1376.031408][ T31] [ 1376.031408][ T31] which lock already depends on the new lock. [ 1376.031408][ T31] [ 1376.031413][ T31] [ 1376.031413][ T31] the existing dependency chain (in reverse order) is: [ 1376.031417][ T31] [ 1376.031417][ T31] -> #2 (console_lock){+.+.}-{0:0}: [ 1376.031433][ T31] console_lock+0x76/0x90 [ 1376.031448][ T31] con_flush_chars+0x9d/0xd0 [ 1376.031465][ T31] n_tty_write+0xf84/0x12b0 [ 1376.031476][ T31] file_tty_write+0x562/0xa30 [ 1376.031491][ T31] vfs_write+0x629/0xba0 [ 1376.031508][ T31] ksys_write+0x156/0x270 [ 1376.031523][ T31] do_syscall_64+0x14d/0xf80 [ 1376.031541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.031553][ T31] [ 1376.031553][ T31] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1376.031569][ T31] down_write+0x3a/0x50 [ 1376.031581][ T31] tty_unthrottle+0x23/0x110 [ 1376.031594][ T31] tty_ldisc_receive_buf+0x119/0x160 [ 1376.031611][ T31] tty_port_default_receive_buf+0x6e/0xa0 [ 1376.031635][ T31] flush_to_ldisc+0x24a/0x6e0 [ 1376.031660][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1376.031681][ T31] worker_thread+0xa53/0xfc0 [ 1376.031696][ T31] kthread+0x388/0x470 [ 1376.031707][ T31] ret_from_fork+0x51e/0xb90 [ 1376.031722][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.031733][ T31] [ 1376.031733][ T31] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1376.031750][ T31] __lock_acquire+0x15a5/0x2cf0 [ 1376.031761][ T31] lock_acquire+0xf0/0x2e0 [ 1376.031770][ T31] mutex_lock_nested+0x5a/0x1d0 [ 1376.031785][ T31] tty_buffer_flush+0x74/0x2b0 [ 1376.031800][ T31] tty_ldisc_flush+0x6b/0xc0 [ 1376.031815][ T31] __do_SAK+0xe3/0x6d0 [ 1376.031831][ T31] vc_SAK+0x78/0x220 [ 1376.031844][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1376.031858][ T31] worker_thread+0xa53/0xfc0 [ 1376.031873][ T31] kthread+0x388/0x470 [ 1376.031883][ T31] ret_from_fork+0x51e/0xb90 [ 1376.031898][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.031908][ T31] [ 1376.031908][ T31] other info that might help us debug this: [ 1376.031908][ T31] [ 1376.031912][ T31] Chain exists of: [ 1376.031912][ T31] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1376.031912][ T31] [ 1376.031931][ T31] Possible unsafe locking scenario: [ 1376.031931][ T31] [ 1376.031935][ T31] CPU0 CPU1 [ 1376.031939][ T31] ---- ---- [ 1376.031943][ T31] lock(console_lock); [ 1376.031951][ T31] lock(&tty->termios_rwsem); [ 1376.031960][ T31] lock(console_lock); [ 1376.031968][ T31] lock(&buf->lock); [ 1376.031976][ T31] [ 1376.031976][ T31] *** DEADLOCK *** [ 1376.031976][ T31] [ 1376.031979][ T31] 4 locks held by kworker/1:0/31: [ 1376.031986][ T31] #0: ffff888019c07938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1376.032019][ T31] #1: ffffc90000a5fc40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1376.032051][ T31] #2: ffffffff8ddbdc60 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 1376.032079][ T31] #3: ffff8880216dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 1376.032110][ T31] [ 1376.032110][ T31] stack backtrace: [ 1376.032120][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.032137][ T31] Tainted: [L]=SOFTLOCKUP [ 1376.032142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1376.032150][ T31] Workqueue: events vc_SAK [ 1376.032165][ T31] Call Trace: [ 1376.032171][ T31] [ 1376.032176][ T31] dump_stack_lvl+0xe8/0x150 [ 1376.032194][ T31] print_circular_bug+0x2e1/0x300 [ 1376.032209][ T31] check_noncircular+0x12e/0x150 [ 1376.032224][ T31] __lock_acquire+0x15a5/0x2cf0 [ 1376.032240][ T31] lock_acquire+0xf0/0x2e0 [ 1376.032251][ T31] ? tty_buffer_flush+0x74/0x2b0 [ 1376.032273][ T31] ? tty_buffer_flush+0x74/0x2b0 [ 1376.032301][ T31] ? tty_buffer_flush+0x74/0x2b0 [ 1376.032328][ T31] mutex_lock_nested+0x5a/0x1d0 [ 1376.032352][ T31] ? tty_buffer_flush+0x74/0x2b0 [ 1376.032378][ T31] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1376.032401][ T31] tty_buffer_flush+0x74/0x2b0 [ 1376.032432][ T31] tty_ldisc_flush+0x6b/0xc0 [ 1376.032459][ T31] __do_SAK+0xe3/0x6d0 [ 1376.032486][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1376.032501][ T31] vc_SAK+0x78/0x220 [ 1376.032514][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1376.032530][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1376.032553][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1376.032571][ T31] ? assign_work+0x3d5/0x5e0 [ 1376.032587][ T31] worker_thread+0xa53/0xfc0 [ 1376.032609][ T31] kthread+0x388/0x470 [ 1376.032629][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1376.032645][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.032657][ T31] ret_from_fork+0x51e/0xb90 [ 1376.032674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.032689][ T31] ? __switch_to+0xc7d/0x1450 [ 1376.032704][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.032716][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.032730][ T31] [ 1376.218997][T19822] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.226054][T19822] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1376.226087][T19822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.470554][ T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1376.472521][T19822] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1376.653200][ T31] usb 2-1: no configurations [ 1376.653221][ T31] usb 2-1: can't read configurations, error -22 [ 1376.791175][ T31] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1378.144554][T19822] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1378.144584][T19822] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1378.145507][T19822] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1378.145532][T19822] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1378.736109][T21831] syz_tun (unregistering): left promiscuous mode [ 1378.836059][T18884] usb 4-1: USB disconnect, device number 32 [ 1379.187386][ T2873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.410584][ T2873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.613446][ T2873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.818007][ T2873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.018582][ T2873] bridge_slave_1: left allmulticast mode [ 1380.018601][ T2873] bridge_slave_1: left promiscuous mode [ 1380.018721][ T2873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.115264][ T2873] bridge_slave_0: left allmulticast mode [ 1380.115290][ T2873] bridge_slave_0: left promiscuous mode [ 1380.115611][ T2873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.693158][ T2873] team0: Port device geneve0 removed [ 1380.809569][ T2873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.895085][ T2873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.917300][ T2873] bond0 (unregistering): Released all slaves [ 1380.919565][ T2873] bond1 (unregistering): Released all slaves [ 1381.984678][ T2873] macvlan0: left promiscuous mode [ 1382.007613][ T2873] dummy0: left promiscuous mode [ 1382.176937][ T2873] hsr_slave_0: left promiscuous mode [ 1382.219694][ T2873] hsr_slave_1: left promiscuous mode [ 1382.220187][ T2873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.220201][ T2873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.252519][ T2873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.252545][ T2873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.337585][ T2873] veth1_macvtap: left promiscuous mode [ 1382.337644][ T2873] veth0_macvtap: left promiscuous mode [ 1382.337775][ T2873] veth1_vlan: left allmulticast mode [ 1382.337805][ T2873] veth1_vlan: left promiscuous mode [ 1382.337899][ T2873] veth0_vlan: left promiscuous mode [ 1382.882834][ T2873] team0 (unregistering): Port device team_slave_1 removed [ 1382.925688][ T2873] team0 (unregistering): Port device team_slave_0 removed [ 1385.277105][ T2873] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.490727][ T2873] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.694038][ T2873] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.896691][ T2873] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0