last executing test programs: 1m19.973576304s ago: executing program 2 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m19.799044439s ago: executing program 2 (id=848): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0xa000000) 1m19.645853368s ago: executing program 2 (id=849): openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'8255\x00', [0x2000, 0x0, 0x4, 0x8000, 0xffff, 0x2, 0xc6b9, 0x6, 0x54c6cff3, 0xfa, 0xffffffff, 0x3, 0xfbfffff7, 0x400001, 0x10000006, 0x400, 0x0, 0x7f, 0x3, 0x40000003, 0x20008d, 0x4, 0x7, 0x20001e5b, 0x80003, 0xe69, 0xffffffff, 0x7, 0x4006, 0x8a]}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m19.606610596s ago: executing program 2 (id=850): syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000002c0)='\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) accept4$alg(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000007100), 0x0, 0x4006010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1m18.507163331s ago: executing program 2 (id=862): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m17.415868628s ago: executing program 2 (id=866): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_dir/portlist\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) write(r0, &(0x7f0000000700)='tcp 2', 0x5) 1m2.233637979s ago: executing program 32 (id=866): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_dir/portlist\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) write(r0, &(0x7f0000000700)='tcp 2', 0x5) 34.670281706s ago: executing program 0 (id=1055): r0 = syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x4e, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x9, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x6, 0x3f, {0x8, 0x25, 0x1, 0x3, 0x0, 0x0, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x6, 0x2, {0x8, 0x25, 0x1, 0x2, 0xc, 0xd, 0x6}}}}}}}}]}}, 0x0) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0x0, 0x9, 0x1}, {0x9, 0x5, 0x4, 0x2, 0x10, 0xa, 0x1, 0xe}, {0x9, 0x5, 0x80, 0x3, 0x400, 0x6c, 0x6, 0x3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x3, 0xa1, {0xa1, 0x9, "5b06447494cfc24f2392100427db8dc3b70651300880f9e636ce8c233042718e246636a98c88d9c6925fd8b6f9b5177cf9a5ef6288ea62eab97e0beeac7cc075b1495920f3ff956cdba99bf71ced8c66265153bd3827d46d9ca8d816ca3bb0c31a5cf20435f8c8a40e6636fd35d9bfd944bbee7d34e3744e0dd4e6df6a349987e32e6f2619822d86a69a43e553645b94d7c623d78019b53c62ee3813639d2f"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="4006780000003e1ec1308c8b702c4f6690a4d9d4f5405be3cf5d2265c871fffc640ba45cb66923d7003d89e2296438a4f27576be0abad9d75e07b163d5694c2c89afc3e73a18067235e1e48d407a26cbf4f3da38cd5a7fa7d1654db15ce6aa73af05f0f888dce8b0493776936101a36c806ceae0fa05edb527fb917621b6"], &(0x7f0000000280)={0xa1, 0x1, 0x400, "c96010c288a0b3f2482377d95b2147c81e1399e1978f060bd2ad1d34a7e8f5794435418ae34c413ef51f46f00f09ca86310358faf7b6fb122fbd76c9f615e4a20e6abcc55d57d5c38404b525ff4aa24cee7439172354c6335126a1aae5951bcbed635b41737508e1b9d3a0aa0624c3204603bb1c1ebd86796c2c891d6aef1f1b5a65c3b1e23e36741ac4981fae695f2fdb6961513a32fcb4615c6000a50f94419d059eb4edf07844e3eb14fd9d71936f10af8738e96d71ff39250223035e195b1853067e1fd2b3bb58d6dae044c08f8538aee6e230718935dff6030f80c15eb64c1fc009d6ada50baa6b775a31262e290ece0e85d1e7747cf1c500c344524752afc155e41833dbe098a18f2c0d7212a65ad19ec5e3f80a0ef98c970ba81d706a5a2f18c1bd2553bd1124de26b5a1ce2c47d15872cd54da66a52bc9d378e9cf5de509ba52af0e32f4b71e1ffeb358009e201a5869421ecc860cde24a92494b67ef6896b5605afbbed84a5e4d9d1ba03b774c57a267c2339223eabd8d6a2cfc9d2877d01f1f5de96ca355baabd00df3e2def40442ee57cc619a28aeab1a1dcf006c91e4eb4b695c7d47a8434e11a5a4cf730d51802511d2e28671dd0fb5a5d8ddcdb0deca8521f1c750ff30fbda002e67151fe3dfeb12611730da3440360544772a30d7c2501f1a115c14f2353751066e41eba5010e7563ac87073dd76569532d385c537325dd125fe5e1a29396737c7be11ba7b2fbc763b8c436e0adc599621d68e94eaa53818daef9c3a06bdd69c114ba3278997698e8aa16e6e0a899965a7be24d0ad4123168c51fa062c6d3ff955ba3ddf0fa707d60ac46ad9d5156f355ac9fe31dce109f61014a983b780cb6b5cd5918f6b03e60bbb8e9aa2da8cc1c63347edb6505e73be612e42859be8df6c55fad6df77f9a7f1f0c587ab24a0d3e5824c98ac05a285bb3f4a1d58afeafb4428de7a033671097cc818fa1c2e1a763526395b8b178c785afee7fc07c7d71f1d7dd3df97290b65d89988a299117aadc01d40d614af203de79b2c38a5c2f36cc08322db045eb658fea603722150c8630a5203eabc6f3e015f9a1db385707ae8ea0442820cfd219fced05e23613d2c978193e01217399b026f3293631d4e4f9de81c598475761a16c14eb9e5a049877f35535d6a64315f450f9a350de6c93cafc88eb68d32557e2897937d16faca71bf874c047b93c427dbe2b6a265fa05e28782dcb59b9df7bfda140509a0418f5f9e3cd6b604aa5129283ac8cdb378c88f2e90f37b1945281eb34e24065a0c5814d1afca3b0490312608dae6a8e4a6aad8f9d384a267f11647c052424b284202d37fb1c21e68e5593b21c5694dbedef600d479ed9affd5b194afb17d3d93d5de69a6e8ef0450e1881feafca3cee34c571259ebee0d811a42959c03013eb6235664cf5dc64d"}, &(0x7f00000006c0)={0x21, 0x0, 0x1, 'K'}}) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r2 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xc, 0x2, "fb83"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 30.88306033s ago: executing program 0 (id=1076): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) syz_usb_connect(0x0, 0x56, 0x0, 0x0) 29.916792281s ago: executing program 0 (id=1086): r0 = syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x4e, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x9, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x6, 0x3f, {0x8, 0x25, 0x1, 0x3, 0x0, 0x0, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x6, 0x2, {0x8, 0x25, 0x1, 0x2, 0xc, 0xd, 0x6}}}}}}}}]}}, 0x0) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0x0, 0x9, 0x1}, {0x9, 0x5, 0x4, 0x2, 0x10, 0xa, 0x1, 0xe}, {0x9, 0x5, 0x80, 0x3, 0x400, 0x6c, 0x6, 0x3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x3, 0xa1, {0xa1, 0x9, "5b06447494cfc24f2392100427db8dc3b70651300880f9e636ce8c233042718e246636a98c88d9c6925fd8b6f9b5177cf9a5ef6288ea62eab97e0beeac7cc075b1495920f3ff956cdba99bf71ced8c66265153bd3827d46d9ca8d816ca3bb0c31a5cf20435f8c8a40e6636fd35d9bfd944bbee7d34e3744e0dd4e6df6a349987e32e6f2619822d86a69a43e553645b94d7c623d78019b53c62ee3813639d2f"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="4006780000003e1ec1308c8b702c4f6690a4d9d4f5405be3cf5d2265c871fffc640ba45cb66923d7003d89e2296438a4f27576be0abad9d75e07b163d5694c2c89afc3e73a18067235e1e48d407a26cbf4f3da38cd5a7fa7d1654db15ce6aa73af05f0f888dce8b0493776936101a36c806ceae0fa05edb527fb917621b6"], &(0x7f0000000280)={0xa1, 0x1, 0x400, "c96010c288a0b3f2482377d95b2147c81e1399e1978f060bd2ad1d34a7e8f5794435418ae34c413ef51f46f00f09ca86310358faf7b6fb122fbd76c9f615e4a20e6abcc55d57d5c38404b525ff4aa24cee7439172354c6335126a1aae5951bcbed635b41737508e1b9d3a0aa0624c3204603bb1c1ebd86796c2c891d6aef1f1b5a65c3b1e23e36741ac4981fae695f2fdb6961513a32fcb4615c6000a50f94419d059eb4edf07844e3eb14fd9d71936f10af8738e96d71ff39250223035e195b1853067e1fd2b3bb58d6dae044c08f8538aee6e230718935dff6030f80c15eb64c1fc009d6ada50baa6b775a31262e290ece0e85d1e7747cf1c500c344524752afc155e41833dbe098a18f2c0d7212a65ad19ec5e3f80a0ef98c970ba81d706a5a2f18c1bd2553bd1124de26b5a1ce2c47d15872cd54da66a52bc9d378e9cf5de509ba52af0e32f4b71e1ffeb358009e201a5869421ecc860cde24a92494b67ef6896b5605afbbed84a5e4d9d1ba03b774c57a267c2339223eabd8d6a2cfc9d2877d01f1f5de96ca355baabd00df3e2def40442ee57cc619a28aeab1a1dcf006c91e4eb4b695c7d47a8434e11a5a4cf730d51802511d2e28671dd0fb5a5d8ddcdb0deca8521f1c750ff30fbda002e67151fe3dfeb12611730da3440360544772a30d7c2501f1a115c14f2353751066e41eba5010e7563ac87073dd76569532d385c537325dd125fe5e1a29396737c7be11ba7b2fbc763b8c436e0adc599621d68e94eaa53818daef9c3a06bdd69c114ba3278997698e8aa16e6e0a899965a7be24d0ad4123168c51fa062c6d3ff955ba3ddf0fa707d60ac46ad9d5156f355ac9fe31dce109f61014a983b780cb6b5cd5918f6b03e60bbb8e9aa2da8cc1c63347edb6505e73be612e42859be8df6c55fad6df77f9a7f1f0c587ab24a0d3e5824c98ac05a285bb3f4a1d58afeafb4428de7a033671097cc818fa1c2e1a763526395b8b178c785afee7fc07c7d71f1d7dd3df97290b65d89988a299117aadc01d40d614af203de79b2c38a5c2f36cc08322db045eb658fea603722150c8630a5203eabc6f3e015f9a1db385707ae8ea0442820cfd219fced05e23613d2c978193e01217399b026f3293631d4e4f9de81c598475761a16c14eb9e5a049877f35535d6a64315f450f9a350de6c93cafc88eb68d32557e2897937d16faca71bf874c047b93c427dbe2b6a265fa05e28782dcb59b9df7bfda140509a0418f5f9e3cd6b604aa5129283ac8cdb378c88f2e90f37b1945281eb34e24065a0c5814d1afca3b0490312608dae6a8e4a6aad8f9d384a267f11647c052424b284202d37fb1c21e68e5593b21c5694dbedef600d479ed9affd5b194afb17d3d93d5de69a6e8ef0450e1881feafca3cee34c571259ebee0d811a42959c03013eb6235664cf5dc64d"}, &(0x7f00000006c0)={0x21, 0x0, 0x1, 'K'}}) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r2 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xc, 0x2, "fb83"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 28.195641488s ago: executing program 0 (id=1089): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = io_uring_setup(0x5559, &(0x7f0000000240)={0x0, 0x1666, 0x4, 0x3, 0x1d2}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000001980)=0x2) r2 = socket$inet6(0xa, 0x5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r6 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r6, &(0x7f00000018c0), &(0x7f0000001940)=0x6e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r2, 0x96676000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x318f, 0x8, 0x0, 0x263, 0x0, r1}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x580f, 0x200, 0x0, 0x61, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe4e, 0x2000, 0x3, 0x30f, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a22, 0x8, 0x2, 0x3cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf990, 0x1000, 0x3, 0x19, 0x0, r1}, 0xffffffffffffffff}], 0x4, &(0x7f0000001700)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x2d9, 0x0, &(0x7f0000000700)=@buf_max_buf="6a2a131f2d420d5c3172682efefa42185d5a00b9fd240217559b0d6cd4fe6fc7d61075882a38220b7817e09d7c60c26e06a99580fca599b867ceb3ccda42d8a0eb5852107503d8a27b89cc8d29c7d3c82cd721c72720ab3a4629e24e85d64953c80a1b16113de7d6882ff24d774ff37888e70485859e8fe38ee3a76b5d057339bede8b25ab438551a5bfeb5dee234d3176aa57047dc2b7d6acb7e5c0f2ef173f8db5dd415a5ef3e8e6c1a39f74e1d91094b3976566b5223d5a5068430e23df6ce47aa274323090183a553c9cd361060d8f0a5609eb7bfbd1b49d22c75eec15a6401a0c6fd75380ca9da0cad69b3ac82b4c9c5adf82ec7dca38744d6cddc24e3b5d71095bfc77f7e46d6ed4544283354b1b94ae8e19c2b01de3a9962bbb4e0783a366f10f68713eb605fa82dc7d0898e3b74f1391983408394c6bc7820a3acb9804ca30bd33762532d24807ba0d4f86eccb8c49bc339dffff3db4c2d72ed2eae011c840e021fceee273de8923a685362b0266c6b65f9dfe90e0d6f172c6a61175ccecb4e2af72e31beeda8f520d1c296f44769e5f9697fbfb608dbe2e65d998728df2e93b5adc260791d654f4b47ce83932d6bd68a31a507eebf7d66d16584dcda423cc0c6344c48f39d63606a4f7c383ebb7bdf56e6568848177b63ab74a78a413e5da5390b7344df52eb241c2fd173771af4a2573a43e85a6ceeec32b08612ae4c973c396162a10e24a9b62a39dd878d843d0b6ef00e6d0a9c8122ed903cdc68c9e1468e7dc84967422f94ca3561616982f82ef7110b7e76228a1a8a57ac2809144fb07dbcf0df172f50d96c5f1cc3680b172399b5cbe288eb3446fe40145f016deab77fe41fa3072a6e3c0d171eb473a11823d042313437d804b5d21154d0d3c77eef0ef82a876a8c1736ed28914181e626db087482a4beaa1a66994e6bd14c7978714636f3977842c1ae7f638a2c449afba115b05176d307425d9cafed0b0434deccea58bf0d8aede444ebd0ad0d5b5a9a952aaf2285273e141930c1830826276dd6838f3b70d446cd4a55d047cee4e6bea5715478de005daefa531d93ca4ed4ef0a583678d25474a6e63a40419f6de7c2ed978b85384604b8eaa86830abcf27ab702e67f182125e564e68fe0115cd0e2a8ffe3e3ae393497ea5839b9fc5731a49e5a42f1da55872dff3de36ea60f1ceb237ef4589a4566c062ea58142c2aa88a0c6eb093402c96620786f21a4d6085c56cc53aae5eddd908d19e0fd9f48eae2c20eaaf43da183d005cc965baf9055d50098725f7bbf5e270447ea99e2219e34e1fa027ac7afc93f15bb4b91ad288a01153bab1626e772c470449b9e019b38d898fdb0d49e88a4cb998cb5f012ad21609044b6ba41bd1afa0500bf4cf7f9dc2698b58c48e0e162d02334faf358775f801d574ff34ef189b029b397ff67609e138a644343c4e1fb759cfa32119136f7baab693bfd4e5781c1eb784bcf1d1be19aa88921d3c488d5a965232a14a06f574af6f26684f049998dc1f1b3007842542ab3638b71831a367e6d8ac5550f06d067bc912ff8177812376f02a4645988bd88fafba951e697d9001230688318c056d7940fc6e9763e9f4a991e18abfe0d9ff992d54a2be44d300d35575f525ef8dbe311c92fb662a3d41dfa90144283a8a495957e55732e82eebef06096f76d5a2ca5587bafde6d509b0d76040b5ff0ae9674c8851fbab92e01d0f07d5baa52853c50fc794ff218d650b9717bae1ad0e664a05faf3cd141ac392220f239508e79eff2f1a13a1efd9f8b7d46cc7356c4a4f0c7f1538e339ab7444b5e9927221bbc0b99b49024a4ba97f93dc3399a1f1c956bc67785b1fb0ac9457616c748e8dc78767c2fc3284458fbb6e9c295e4ad2cc686c5218a8191f5d49066d817d20acf6d3902c034b8044f8367e578b098692f4ddbcf7214d798ca7bfcc91d9942e603b760707682773e8a3c9c91eaca98992ee7f7f247b277c87b889cf598f21c19c1cb1bca899113750f7796aeb2c8e2ef17d21315d8b5f84d6bbb26b401d8c70eb3756766dd74b3df1784eef4dda5e1e9ba07e2dd7c4384e3e126c6cb75e525a035f90aed412c2ff5a896ce9efae16afaf34d680e5f976d7d93aca6667617c74dab26cb6548c1feb8909fd33d6a0b8c2b721cbec1fcf41c01cec6ce9138926e208f5eb605f3ac69b52b0d8bb49fea3738bd4484a4976574b32d6f5392ba7929accc4e060c1b3e4003a815b34a86d60430e2a89f0f21bc1c0935bbcbea2ebd994d247c56a41c717dc0837f84ba2a7007497b6d80b37713787cf63af8f4dfbad2299017088728be0215e05c3dd83169686001e552190998664bb76fd5f1b504df39088632fef4ae37781215166ef75c02946c15f5cf2e1502969f45f5f429882de1e5f839dfb6f8be1fb58df285b6a64d208760fe625276c6aa66f085012546290aba10df76dd333cfb2280715fd99e9123bdc5f29dc28b481442d89403e64a33c9f3cf2079d78f4dc02177baa0f69a5a4af65fcc50e39e351d3b8f4ed39e0102f985aec2174dacd2795259c444a543f25edf15c37e9b136722e33cee8c31fb8499bdf995811dd7678d898e18d50e58840a9320fe55ab481f81bfe147e43cc02692bac2ab90b05bcb0998c13902b6a2146de2253457f7aaa51887d7cae353419222f5770735439bc83314ef78cc2e79c9febf0bed701ceaa90cdf35d254af8a5234d8785181ec21eccf377e49a89799b1fc0f9f4b547976403d4ca28bee86c956d201a528c5f3e6195229f72b7eb4c1e15d3fc1b7abe48e81788bb247102f099c40e7f7e164e4d9b550d703826fcbcddf57e2a2031729450ba873bf760a51f5a852eec9908c3ed600579bd97746ccc9295bac06d4f92fcfccb98b482bcc89bd990dc06db699d5977d5c922a842c898ffaccf1687c4e6ad280b3a029153a39caf42857da0304aacb090fb9a1cbd96dace687d71607f5288b54fb3a3fe49eecd5a63f216e96372799f0b021832eb1ffc8fba8bf79949894cc5d99c0676271a514c293bc982b3804616fd026038c6acd9a8a4f678a2b9eaac85ee5a2688233355826964cc507f8be5cee41229270592aa3cb34dd7787834df83b228b0358785630d6e678663367d5f746d3bcd15ca65e9e12c24f82589fe97c530f9d22fbfb2996eb81643858e069e6a471d4c99a887987699e263a00eb0d5b157cb0bd0537749b06e7de25a0f7c560bd1dcd9a1e6d56548a1478e498be91417c9f9d91dda0defabb1f53d5d69be1eddf82378dddd272c6ee207ebec01910ac31e44d272bb962a29aa4ddc0df598197cda3341188fec8caeea1fe5a67c58ff2df5bd84db5a213a176da46f78fdf74764b7672e4e0db3947209c8eedbf79d56cb73c4f7066ccc2f2b271477190e2356745bfe394bc07b5976391a97016c64b6b84430d049fbe56522438490d0b49760245d873cb4d909bb952b9b73b1aa340ddee9e327a76bd29513685f7890837df1901d3e3b4060f1a7a9ec90bbcbe2b127b0fceab87b4bff7f0b1084946b7ac2ba1af77ff15ef2a64f385aa9d51b865cb02f383a7a71e3a02cbbc421677cbfd1cea1a5ceb0a559cd136970677198a1a7e15ae09b04978a536bd368bb991aa8c94ba939696b9009262c047eae11b81bb1a73566b347e9dfcec0f07c6285023b4f2c60d08e7df86e77741fa8d56d0e8089e8d404162aa1bdae4712ddd6b8ed6a6ab904a7b254f94827b3d0d12e12bf0bf9f412fd6ce9eb16a98d254e10a4587950142c95966c39ce04cbdbfb3e9c3bffbb4c61ae5d8f8cee5d2a9bfcb6bac84c181546b4df4c8ddfd5b3cd9fb4e410223c4db0d8018585a2a6631e884285d72424d418e0021512c768614f9e60f8c219d043ca2d24b4625ab13ed0e5b6136e4b29c725b25d227e2724a7240288274e562647a8751d0714914728b89d26f955a66b2a9541616280048ddde0099b9ae0b19e5480c95503382bbddb81d0f6caa815001b4f95aeb1cefd733498f761e12218408f7ba30b982b42a394e41bc2339fbeba1cee53b24cef7178455ad3e00294b21001842bdb5ed170b827e29d8a2f7d8bd795bab0ddb8117723f6e9596b2044d67e8183fd80d02f0637d364c50e8c7b7d29d7ec357549c71243176f2c3afda5e983143371670828d0f92e7628d74c91d319382795ef751e797b0b15bae15d37214b460a0339baa7ae1aec21720f2de10769a105170750933937196de7771e7c747aef48ddd70881dff6948864167907e66f449fc8666f75deb42877eb7db77fd302e20b5582a61e638d47eba89359dbe6b74ba52fb1d2e01d4ddd545310d8a489b44914786809cd5299a1463f822c1d5da22f72be05966429d267c7128bc2ad593db118394e29fdce7c7e451c8ccc5be4d25b86fb946a8ad291dcef8df0ddb9fb6fe95428cd242f909e33097b3b5cc26581b1a652dc81b89e8422984a0f22d1256c317655b4754265e2f65fa5f285c80e2127bbec6810d955323b5213d6c7a72d245f3e9f7c5f2996d23494d1b23c38f516e3e5c1ee6077a04518d64c96e6cc1bbced3c3dc09133cdc18de9ec72cec7a1da4feebd583203ce62eabd5084ce39dbfc7b9e7101f2673dc65d687d8bcf97cd89a684de4a11d786abd28fc6015279c232d1f3fd58f35ed2084f252ea6460398e94896eaa11086f3175be69f8ca37c17336723a7b5377487806c6696d8e8fcc95ecc29168d7bd036b3e940a6384445eea16c5c967367f11667a24c7d25fa0ed6206263765ccd512276a080cd44da23812c7bd0a402a8fbd2fa4979168746842426042ab68a4d28bd6e7e3da5161b0d60ba027bfc5614ac757a05f38f14b737d140bbc724078372b5997aeec086159e099d9dcbc78593537dea175714467686614913b2f0ec6cd0a1db2c0774d446ef49f69a0fc120bfd030c728b6617b1471a4b1769e1af5d10856c3aae7540cb7a546235e4c6e8d87393aa2c7afccdc004b63b3e8b114bbc904aa55368aa27a31b91be1bc17ece772e2d0b421fb6712922692fa5966e272776cdadd1e0a068bdd674edff34ccfa549bea0df39cdf5cd6dabe5b8397f2af74870aca0ee53deb4555d76b8a6a9011f0f5bc7ca3c4e57203f2ab5334135c206e846a53fdf8eca35a5ce10b82cb7e61c7a30de69614813271fc1daccd1ab8176e3c549af4f9d89ee2bd0396e3a7c93bf58a0c25fb4bebfd13379b0902cc18092ba3e7edc42187f51c210748259f5154d0552ee34de977a8de1f9706424995f310f65e459d9a547f2ff71f54b9e3c80151cfc6fd5e4a842d196ac71fa9dedec42d85e54536072c5834d39ded527cc538f3836ea4d2350d9dad4c5c76ede4ab57f67dd6c76f4da8694842e70c2f1882d74e45fd7dee9073cdfb326d0ffc77e054c5f1227e98b6d914ddfaee28037972774a6442e67c70a7dd5537f429ecdb0a502a818218b9d8952c40649a76157aa811c5e853609086cdfae4c22e61d3d85f312f69506995a034fa999025d87263e8eb564ba4ff5640d3410393eb7594f1659f6a36e48394f01d4b7a336f442f07960b8eb6b46b516e67672ebf42e0598510a0f908f53ab9f5af70417221a1cecc234e883d0a52129c03e79609931d6e6cf52e39f27c88eb5acdb55b06326ec34c99c082ce1602dd2f02c8e772498f97654c7ce3dda6bed138abe5ddff7667376994300ef4dd85a46ef877cbb1f799a9d4bd4d602eed0653ce3d6ee78de636539a5cf48d2e4c784cd0820fc1ae6778475e2749a44863a03e55ddc83cffc"}}, &(0x7f0000001780)) r12 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf094, 0x0, 0x2, 0x40057, 0x0, r11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r12, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r16, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000017c0)=0x4) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 26.947371755s ago: executing program 0 (id=1094): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="ac0eaefe669c", 0x6) 26.824143425s ago: executing program 0 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 12.229812069s ago: executing program 3 (id=1160): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r1}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 12.229449637s ago: executing program 3 (id=1161): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a2132001000000000109022000010100"], 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000200)="0e00100000dc0121000000020000") 11.367434061s ago: executing program 33 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 9.164802473s ago: executing program 3 (id=1173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0xa08, 0xa7, 0x9, 0x6}, {0x1, 0x1, 0x4, 0x5, 0x2b, 0x1ff}, 0x0, 0x4, 0x11b2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 5.993706387s ago: executing program 1 (id=1183): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 5.915456958s ago: executing program 3 (id=1184): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109302) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffef2, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c650007050200700004060066", 0x25) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 5.632177077s ago: executing program 4 (id=1185): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x80, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) 5.469383655s ago: executing program 4 (id=1187): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109302) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffef2, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 5.389302261s ago: executing program 4 (id=1188): mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debugfs\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 5.288214009s ago: executing program 4 (id=1189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.10852784s ago: executing program 6 (id=1163): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) getpid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0x851, 0x2) 3.880494987s ago: executing program 4 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0xa08, 0xa7, 0x9, 0x6}, {0x1, 0x1, 0x4, 0x5, 0x2b, 0x1ff}, 0x0, 0x4, 0x11b2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3.816239687s ago: executing program 6 (id=1194): write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a", 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 3.814463584s ago: executing program 5 (id=1195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f000000b280)=[{{&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}], 0x1, 0x400c011) 3.751507096s ago: executing program 6 (id=1196): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = io_uring_setup(0x5559, &(0x7f0000000240)={0x0, 0x1666, 0x4, 0x3, 0x1d2}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000001980)=0x2) r2 = socket$inet6(0xa, 0x5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r6 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r6, &(0x7f00000018c0), &(0x7f0000001940)=0x6e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x3c}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r2, 0x96676000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x318f, 0x8, 0x0, 0x263, 0x0, r1}, 0x0, 0x4, &(0x7f0000001700)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x2d9, 0x0, &(0x7f0000000700)=@buf_max_buf="6a2a131f2d420d5c3172682efefa42185d5a00b9fd240217559b0d6cd4fe6fc7d61075882a38220b7817e09d7c60c26e06a99580fca599b867ceb3ccda42d8a0eb5852107503d8a27b89cc8d29c7d3c82cd721c72720ab3a4629e24e85d64953c80a1b16113de7d6882ff24d774ff37888e70485859e8fe38ee3a76b5d057339bede8b25ab438551a5bfeb5dee234d3176aa57047dc2b7d6acb7e5c0f2ef173f8db5dd415a5ef3e8e6c1a39f74e1d91094b3976566b5223d5a5068430e23df6ce47aa274323090183a553c9cd361060d8f0a5609eb7bfbd1b49d22c75eec15a6401a0c6fd75380ca9da0cad69b3ac82b4c9c5adf82ec7dca38744d6cddc24e3b5d71095bfc77f7e46d6ed4544283354b1b94ae8e19c2b01de3a9962bbb4e0783a366f10f68713eb605fa82dc7d0898e3b74f1391983408394c6bc7820a3acb9804ca30bd33762532d24807ba0d4f86eccb8c49bc339dffff3db4c2d72ed2eae011c840e021fceee273de8923a685362b0266c6b65f9dfe90e0d6f172c6a61175ccecb4e2af72e31beeda8f520d1c296f44769e5f9697fbfb608dbe2e65d998728df2e93b5adc260791d654f4b47ce83932d6bd68a31a507eebf7d66d16584dcda423cc0c6344c48f39d63606a4f7c383ebb7bdf56e6568848177b63ab74a78a413e5da5390b7344df52eb241c2fd173771af4a2573a43e85a6ceeec32b08612ae4c973c396162a10e24a9b62a39dd878d843d0b6ef00e6d0a9c8122ed903cdc68c9e1468e7dc84967422f94ca3561616982f82ef7110b7e76228a1a8a57ac2809144fb07dbcf0df172f50d96c5f1cc3680b172399b5cbe288eb3446fe40145f016deab77fe41fa3072a6e3c0d171eb473a11823d042313437d804b5d21154d0d3c77eef0ef82a876a8c1736ed28914181e626db087482a4beaa1a66994e6bd14c7978714636f3977842c1ae7f638a2c449afba115b05176d307425d9cafed0b0434deccea58bf0d8aede444ebd0ad0d5b5a9a952aaf2285273e141930c1830826276dd6838f3b70d446cd4a55d047cee4e6bea5715478de005daefa531d93ca4ed4ef0a583678d25474a6e63a40419f6de7c2ed978b85384604b8eaa86830abcf27ab702e67f182125e564e68fe0115cd0e2a8ffe3e3ae393497ea5839b9fc5731a49e5a42f1da55872dff3de36ea60f1ceb237ef4589a4566c062ea58142c2aa88a0c6eb093402c96620786f21a4d6085c56cc53aae5eddd908d19e0fd9f48eae2c20eaaf43da183d005cc965baf9055d50098725f7bbf5e270447ea99e2219e34e1fa027ac7afc93f15bb4b91ad288a01153bab1626e772c470449b9e019b38d898fdb0d49e88a4cb998cb5f012ad21609044b6ba41bd1afa0500bf4cf7f9dc2698b58c48e0e162d02334faf358775f801d574ff34ef189b029b397ff67609e138a644343c4e1fb759cfa32119136f7baab693bfd4e5781c1eb784bcf1d1be19aa88921d3c488d5a965232a14a06f574af6f26684f049998dc1f1b3007842542ab3638b71831a367e6d8ac5550f06d067bc912ff8177812376f02a4645988bd88fafba951e697d9001230688318c056d7940fc6e9763e9f4a991e18abfe0d9ff992d54a2be44d300d35575f525ef8dbe311c92fb662a3d41dfa90144283a8a495957e55732e82eebef06096f76d5a2ca5587bafde6d509b0d76040b5ff0ae9674c8851fbab92e01d0f07d5baa52853c50fc794ff218d650b9717bae1ad0e664a05faf3cd141ac392220f239508e79eff2f1a13a1efd9f8b7d46cc7356c4a4f0c7f1538e339ab7444b5e9927221bbc0b99b49024a4ba97f93dc3399a1f1c956bc67785b1fb0ac9457616c748e8dc78767c2fc3284458fbb6e9c295e4ad2cc686c5218a8191f5d49066d817d20acf6d3902c034b8044f8367e578b098692f4ddbcf7214d798ca7bfcc91d9942e603b760707682773e8a3c9c91eaca98992ee7f7f247b277c87b889cf598f21c19c1cb1bca899113750f7796aeb2c8e2ef17d21315d8b5f84d6bbb26b401d8c70eb3756766dd74b3df1784eef4dda5e1e9ba07e2dd7c4384e3e126c6cb75e525a035f90aed412c2ff5a896ce9efae16afaf34d680e5f976d7d93aca6667617c74dab26cb6548c1feb8909fd33d6a0b8c2b721cbec1fcf41c01cec6ce9138926e208f5eb605f3ac69b52b0d8bb49fea3738bd4484a4976574b32d6f5392ba7929accc4e060c1b3e4003a815b34a86d60430e2a89f0f21bc1c0935bbcbea2ebd994d247c56a41c717dc0837f84ba2a7007497b6d80b37713787cf63af8f4dfbad2299017088728be0215e05c3dd83169686001e552190998664bb76fd5f1b504df39088632fef4ae37781215166ef75c02946c15f5cf2e1502969f45f5f429882de1e5f839dfb6f8be1fb58df285b6a64d208760fe625276c6aa66f085012546290aba10df76dd333cfb2280715fd99e9123bdc5f29dc28b481442d89403e64a33c9f3cf2079d78f4dc02177baa0f69a5a4af65fcc50e39e351d3b8f4ed39e0102f985aec2174dacd2795259c444a543f25edf15c37e9b136722e33cee8c31fb8499bdf995811dd7678d898e18d50e58840a9320fe55ab481f81bfe147e43cc02692bac2ab90b05bcb0998c13902b6a2146de2253457f7aaa51887d7cae353419222f5770735439bc83314ef78cc2e79c9febf0bed701ceaa90cdf35d254af8a5234d8785181ec21eccf377e49a89799b1fc0f9f4b547976403d4ca28bee86c956d201a528c5f3e6195229f72b7eb4c1e15d3fc1b7abe48e81788bb247102f099c40e7f7e164e4d9b550d703826fcbcddf57e2a2031729450ba873bf760a51f5a852eec9908c3ed600579bd97746ccc9295bac06d4f92fcfccb98b482bcc89bd990dc06db699d5977d5c922a842c898ffaccf1687c4e6ad280b3a029153a39caf42857da0304aacb090fb9a1cbd96dace687d71607f5288b54fb3a3fe49eecd5a63f216e96372799f0b021832eb1ffc8fba8bf79949894cc5d99c0676271a514c293bc982b3804616fd026038c6acd9a8a4f678a2b9eaac85ee5a2688233355826964cc507f8be5cee41229270592aa3cb34dd7787834df83b228b0358785630d6e678663367d5f746d3bcd15ca65e9e12c24f82589fe97c530f9d22fbfb2996eb81643858e069e6a471d4c99a887987699e263a00eb0d5b157cb0bd0537749b06e7de25a0f7c560bd1dcd9a1e6d56548a1478e498be91417c9f9d91dda0defabb1f53d5d69be1eddf82378dddd272c6ee207ebec01910ac31e44d272bb962a29aa4ddc0df598197cda3341188fec8caeea1fe5a67c58ff2df5bd84db5a213a176da46f78fdf74764b7672e4e0db3947209c8eedbf79d56cb73c4f7066ccc2f2b271477190e2356745bfe394bc07b5976391a97016c64b6b84430d049fbe56522438490d0b49760245d873cb4d909bb952b9b73b1aa340ddee9e327a76bd29513685f7890837df1901d3e3b4060f1a7a9ec90bbcbe2b127b0fceab87b4bff7f0b1084946b7ac2ba1af77ff15ef2a64f385aa9d51b865cb02f383a7a71e3a02cbbc421677cbfd1cea1a5ceb0a559cd136970677198a1a7e15ae09b04978a536bd368bb991aa8c94ba939696b9009262c047eae11b81bb1a73566b347e9dfcec0f07c6285023b4f2c60d08e7df86e77741fa8d56d0e8089e8d404162aa1bdae4712ddd6b8ed6a6ab904a7b254f94827b3d0d12e12bf0bf9f412fd6ce9eb16a98d254e10a4587950142c95966c39ce04cbdbfb3e9c3bffbb4c61ae5d8f8cee5d2a9bfcb6bac84c181546b4df4c8ddfd5b3cd9fb4e410223c4db0d8018585a2a6631e884285d72424d418e0021512c768614f9e60f8c219d043ca2d24b4625ab13ed0e5b6136e4b29c725b25d227e2724a7240288274e562647a8751d0714914728b89d26f955a66b2a9541616280048ddde0099b9ae0b19e5480c95503382bbddb81d0f6caa815001b4f95aeb1cefd733498f761e12218408f7ba30b982b42a394e41bc2339fbeba1cee53b24cef7178455ad3e00294b21001842bdb5ed170b827e29d8a2f7d8bd795bab0ddb8117723f6e9596b2044d67e8183fd80d02f0637d364c50e8c7b7d29d7ec357549c71243176f2c3afda5e983143371670828d0f92e7628d74c91d319382795ef751e797b0b15bae15d37214b460a0339baa7ae1aec21720f2de10769a105170750933937196de7771e7c747aef48ddd70881dff6948864167907e66f449fc8666f75deb42877eb7db77fd302e20b5582a61e638d47eba89359dbe6b74ba52fb1d2e01d4ddd545310d8a489b44914786809cd5299a1463f822c1d5da22f72be05966429d267c7128bc2ad593db118394e29fdce7c7e451c8ccc5be4d25b86fb946a8ad291dcef8df0ddb9fb6fe95428cd242f909e33097b3b5cc26581b1a652dc81b89e8422984a0f22d1256c317655b4754265e2f65fa5f285c80e2127bbec6810d955323b5213d6c7a72d245f3e9f7c5f2996d23494d1b23c38f516e3e5c1ee6077a04518d64c96e6cc1bbced3c3dc09133cdc18de9ec72cec7a1da4feebd583203ce62eabd5084ce39dbfc7b9e7101f2673dc65d687d8bcf97cd89a684de4a11d786abd28fc6015279c232d1f3fd58f35ed2084f252ea6460398e94896eaa11086f3175be69f8ca37c17336723a7b5377487806c6696d8e8fcc95ecc29168d7bd036b3e940a6384445eea16c5c967367f11667a24c7d25fa0ed6206263765ccd512276a080cd44da23812c7bd0a402a8fbd2fa4979168746842426042ab68a4d28bd6e7e3da5161b0d60ba027bfc5614ac757a05f38f14b737d140bbc724078372b5997aeec086159e099d9dcbc78593537dea175714467686614913b2f0ec6cd0a1db2c0774d446ef49f69a0fc120bfd030c728b6617b1471a4b1769e1af5d10856c3aae7540cb7a546235e4c6e8d87393aa2c7afccdc004b63b3e8b114bbc904aa55368aa27a31b91be1bc17ece772e2d0b421fb6712922692fa5966e272776cdadd1e0a068bdd674edff34ccfa549bea0df39cdf5cd6dabe5b8397f2af74870aca0ee53deb4555d76b8a6a9011f0f5bc7ca3c4e57203f2ab5334135c206e846a53fdf8eca35a5ce10b82cb7e61c7a30de69614813271fc1daccd1ab8176e3c549af4f9d89ee2bd0396e3a7c93bf58a0c25fb4bebfd13379b0902cc18092ba3e7edc42187f51c210748259f5154d0552ee34de977a8de1f9706424995f310f65e459d9a547f2ff71f54b9e3c80151cfc6fd5e4a842d196ac71fa9dedec42d85e54536072c5834d39ded527cc538f3836ea4d2350d9dad4c5c76ede4ab57f67dd6c76f4da8694842e70c2f1882d74e45fd7dee9073cdfb326d0ffc77e054c5f1227e98b6d914ddfaee28037972774a6442e67c70a7dd5537f429ecdb0a502a818218b9d8952c40649a76157aa811c5e853609086cdfae4c22e61d3d85f312f69506995a034fa999025d87263e8eb564ba4ff5640d3410393eb7594f1659f6a36e48394f01d4b7a336f442f07960b8eb6b46b516e67672ebf42e0598510a0f908f53ab9f5af70417221a1cecc234e883d0a52129c03e79609931d6e6cf52e39f27c88eb5acdb55b06326ec34c99c082ce1602dd2f02c8e772498f97654c7ce3dda6bed138abe5ddff7667376994300ef4dd85a46ef877cbb1f799a9d4bd4d602eed0653ce3d6ee78de636539a5cf48d2e4c784cd0820fc1ae6778475e2749a44863a03e55ddc83cffc"}}, &(0x7f0000001780)) r11 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf094, 0x0, 0x2, 0x40057}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r11, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r15, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000017c0)=0x4) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 3.676197096s ago: executing program 5 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000300)="ad97eb69b9a8744a31cf0f9de3945ef2c5b27d906bc8b2fad43997acf80381c71240824c1ccde5d2e6be32fa443364c00cb64b60880359951691494dc9a0564e29f0798ab139c2dedc3457b2b898602f9ba0c0067b2f71b79199046f66d88461f45eb9a982fdff49f5ca67dd69230fe4864efa227dc2784005566f0a43b2ba69e2cda2324658a002a1993d7e89944156e6ae62ce59f0fe963141ea9b6b964c86a85e58b292aac647e118b5c7aa92df9c0dbe75ddf676a93e00f1a257336f400a19614a8725a02ea46341c7add3d328c5f45728e7d9c1c21809d4acfde5584c872e392aa365fb44c6149573f881804af6d1ba72ed", 0xf4, 0x9faa, 0x0, 0x2}]) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x44}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000240)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="402f0203"], 0x0}, 0x0) 2.948419614s ago: executing program 1 (id=1198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='config', 0x6, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.81612319s ago: executing program 3 (id=1199): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x9, 0x2c, {0x2c, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5512a4dc5c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.793737741s ago: executing program 1 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.474486151s ago: executing program 1 (id=1201): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x8f, "", [{{0x9, 0x4, 0x0, 0xb7, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x7, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20042a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.179854851s ago: executing program 3 (id=1202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="100000") 2.020795718s ago: executing program 5 (id=1203): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.746750405s ago: executing program 5 (id=1204): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0x851, 0x2) 914.269766ms ago: executing program 1 (id=1205): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) pread64(r0, 0x0, 0x0, 0x18) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 413.281212ms ago: executing program 5 (id=1206): write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a", 0x3) sendmsg$key(0xffffffffffffffff, 0x0, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 411.542238ms ago: executing program 6 (id=1207): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x4, &(0x7f0000000140)={0x1e, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 389.304219ms ago: executing program 4 (id=1208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 345.5954ms ago: executing program 5 (id=1209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x9, "3b85"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=1210): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109302) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffef2, 0x0, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c650007050200700004060066", 0x25) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) kernel console output (not intermixed with test programs): T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 266.899833][ T9] usb 2-1: USB disconnect, device number 29 [ 266.936252][ T24] usb 5-1: config 0 descriptor?? [ 266.966172][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.014623][ T5710] maltron 0003:058F:9410.0018: hidraw0: USB HID vff.7f Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 267.077973][ T5710] usb 1-1: USB disconnect, device number 32 [ 267.138334][ T8470] fido_id[8470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 267.212108][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.228024][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.241683][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.252243][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.323963][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 267.403929][ T5710] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 267.463057][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.471920][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.480452][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 267.490718][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.500888][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 267.512605][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 267.523677][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 108, setting to 64 [ 267.534593][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.549413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.553989][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 267.557562][ T9] usb 2-1: Product: syz [ 267.563520][ T5710] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.566963][ T9] usb 2-1: Manufacturer: syz [ 267.566986][ T9] usb 2-1: SerialNumber: syz [ 267.586344][ T9] usb 2-1: config 0 descriptor?? [ 267.589061][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.596446][ T8469] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 267.599696][ T5710] usb 1-1: Product: syz [ 267.610908][ T5710] usb 1-1: Manufacturer: syz [ 267.615673][ T5710] usb 1-1: SerialNumber: syz [ 267.634339][ T5710] r8152-cfgselector 1-1: Unknown version 0x0000 [ 267.640672][ T5710] r8152-cfgselector 1-1: config 0 descriptor?? [ 267.666645][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 267.672608][ T9] Registered IR keymap rc-empty [ 267.678734][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 267.689021][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 267.700097][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.711545][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.721848][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.731681][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.821268][ T9] usb 2-1: USB disconnect, device number 30 [ 267.827308][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 267.896497][ T5710] r8152-cfgselector 1-1: Needed 2 retries to read version [ 267.903705][ T5710] r8152-cfgselector 1-1: Unknown version 0x0000 [ 267.911190][ T5710] r8152-cfgselector 1-1: No union descriptors [ 267.942833][ T24] int51x1 5-1:0.0: probe with driver int51x1 failed with error -71 [ 267.957378][ T24] usb 5-1: USB disconnect, device number 32 [ 268.124672][ T9] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 268.677522][ T8482] syzkaller0: entered promiscuous mode [ 268.683028][ T8482] syzkaller0: entered allmulticast mode [ 268.744024][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 268.751660][ T5710] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 268.904561][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 268.910246][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.919632][ T5710] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.929839][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.940272][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.951273][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 268.964228][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.972297][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.983019][ T24] usb 2-1: config 0 descriptor?? [ 268.996769][ T5710] usb 5-1: config 0 descriptor?? [ 269.006282][ T5710] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 269.195326][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 269.201386][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.211874][ T24] usb 2-1: USB disconnect, device number 31 [ 269.436699][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 269.436715][ T29] audit: type=1400 audit(1787246920.616:352): avc: denied { shutdown } for pid=8485 comm="syz.0.903" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 269.653973][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 269.723975][ T5600] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 269.804461][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.814777][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.825735][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.835692][ T9] usb 2-1: config 0 descriptor?? [ 269.874062][ T5600] usb 1-1: Using ep0 maxpacket: 32 [ 269.879897][ T5600] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 269.890161][ T5600] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 269.901254][ T5600] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.911044][ T5600] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.924189][ T5600] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.930834][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.941224][ T5600] usb 1-1: config 0 descriptor?? [ 270.250741][ T9] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 270.261926][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input37 [ 270.355655][ T5600] usbhid 1-1:0.0: can't add hid device: -71 [ 270.363521][ T5600] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 270.374578][ T9] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 270.401868][ T5600] usb 1-1: USB disconnect, device number 34 [ 270.682088][ T24] usb 2-1: USB disconnect, device number 32 [ 271.655476][ T5600] usb 5-1: USB disconnect, device number 33 [ 272.074231][ T8511] syzkaller0: entered promiscuous mode [ 272.081981][ T8511] syzkaller0: entered allmulticast mode [ 272.494014][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 272.523998][ T5600] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 272.644143][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 272.649951][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 272.661284][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 272.669587][ T9] usb 1-1: config 0 has no interface number 0 [ 272.675757][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 272.680935][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.692339][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.702368][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 272.714340][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 272.726549][ T9] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.726665][ T5600] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.747560][ T5600] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 272.758676][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.766842][ T9] usb 1-1: Product: syz [ 272.771183][ T9] usb 1-1: Manufacturer: syz [ 272.775860][ T9] usb 1-1: SerialNumber: syz [ 272.781040][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.789807][ T5600] usb 5-1: Product: syz [ 272.794923][ T9] usb 1-1: config 0 descriptor?? [ 272.800457][ T5600] usb 5-1: Manufacturer: syz [ 272.805510][ T5600] usb 5-1: SerialNumber: syz [ 272.854031][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 273.003935][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 273.010063][ T10] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 273.023098][ T9] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 273.034853][ T10] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 273.050097][ T10] usb 2-1: config 0 has no interface number 0 [ 273.060042][ T10] usb 2-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 273.072924][ T10] usb 2-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 273.103408][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.112895][ T10] usb 2-1: Product: syz [ 273.124424][ T10] usb 2-1: Manufacturer: syz [ 273.129823][ T10] usb 2-1: SerialNumber: syz [ 273.141829][ T10] usb 2-1: config 0 descriptor?? [ 273.150586][ T10] usbtest 2-1:0.99: usb test device [ 273.156315][ T10] usbtest 2-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 273.228511][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.243568][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.258726][ T24] usb 1-1: USB disconnect, device number 35 [ 273.352502][ T10] usb 2-1: USB disconnect, device number 33 [ 273.414434][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 273.665973][ T5600] usb 5-1: reset high-speed USB device number 34 using dummy_hcd [ 275.072254][ T8537] syzkaller0: entered promiscuous mode [ 275.080497][ T8537] syzkaller0: entered allmulticast mode [ 275.110532][ T5600] usb 5-1: device firmware changed [ 275.124769][ T5600] usb 5-1: USB disconnect, device number 34 [ 275.263991][ T5600] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 275.403968][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 275.564455][ T9] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.40 [ 275.575703][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 275.597545][ T9] usb 2-1: string descriptor 0 read error: -22 [ 275.615965][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.704365][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 275.711519][ T5600] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.723122][ T29] audit: type=1400 audit(1787246926.896:353): avc: denied { read write } for pid=8555 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 275.723287][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.758144][ T29] audit: type=1400 audit(1787246926.936:354): avc: denied { open } for pid=8555 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 275.765819][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.784785][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.792349][ T5600] usb 5-1: config 0 descriptor?? [ 275.813234][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.822161][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.830002][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.838183][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.855349][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 276.016189][ T5600] usbhid 5-1:0.0: can't add hid device: -71 [ 276.020312][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 276.034159][ T5600] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 276.044951][ T24] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.059548][ T5600] usb 5-1: USB disconnect, device number 35 [ 276.064221][ T24] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.085094][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.091953][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.110464][ T24] usb 1-1: config 0 descriptor?? [ 276.126932][ T9] hid_parser_main: 3989 callbacks suppressed [ 276.126954][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.140321][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.148118][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.155278][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.162383][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.169671][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.177449][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.184811][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.191896][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.199032][ T9] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 276.232700][ T9] maltron 0003:058F:9410.001A: hidraw0: USB HID vff.7f Device [HID 058f:9410] on usb-dummy_hcd.1-1/input0 [ 276.295071][ T5732] usb 2-1: USB disconnect, device number 34 [ 276.494106][ T5710] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 276.526803][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 276.533550][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.547968][ T24] usb 1-1: USB disconnect, device number 36 [ 276.561486][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.569053][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.577253][ T8555] bridge_slave_0: entered allmulticast mode [ 276.584650][ T8555] bridge_slave_0: entered promiscuous mode [ 276.592306][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.599755][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.607141][ T8555] bridge_slave_1: entered allmulticast mode [ 276.614261][ T8555] bridge_slave_1: entered promiscuous mode [ 276.634529][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.645951][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.654011][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 276.662173][ T5710] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 276.674942][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.681285][ T8555] team0: Port device team_slave_0 added [ 276.686734][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.693827][ T8555] team0: Port device team_slave_1 added [ 276.707833][ T5710] usb 5-1: config 0 descriptor?? [ 276.732101][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.739133][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.765084][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.778631][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.785639][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.811581][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.879315][ T8555] hsr_slave_0: entered promiscuous mode [ 276.886129][ T8555] hsr_slave_1: entered promiscuous mode [ 276.892252][ T8555] debugfs: 'hsr0' already exists in 'hsr' [ 276.898475][ T8555] Cannot create hsr debugfs directory [ 277.042889][ T8555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.053090][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.061168][ T8555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.071641][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.079627][ T8555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.092699][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.101089][ T8555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.113449][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.128082][ T5710] kye 0003:0458:5016.001B: control desc unexpectedly large [ 277.135680][ T5710] kye 0003:0458:5016.001B: control desc unexpectedly large [ 277.152153][ T5710] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.001B/input/input38 [ 277.155652][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.170763][ T8555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.179127][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.186300][ T8555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.250551][ T5710] kye 0003:0458:5016.001B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 277.290287][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.310144][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.318998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.359699][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.377714][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.384914][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.401457][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.408669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.516484][ T8586] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 277.541141][ T8555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.969499][ T5608] Bluetooth: hci5: command tx timeout [ 278.677370][ T5603] usb 5-1: USB disconnect, device number 36 [ 278.922123][ T8602] syzkaller0: entered promiscuous mode [ 278.927915][ T8602] syzkaller0: entered allmulticast mode [ 278.964086][ T5732] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 279.047265][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.105766][ T5603] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 279.114643][ T5732] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 279.126572][ T5732] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 279.135155][ T8612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.154190][ T5732] usb 1-1: config 0 has no interface number 0 [ 279.160985][ T5732] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.177411][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.185812][ T5732] usb 1-1: Product: syz [ 279.190123][ T5732] usb 1-1: Manufacturer: syz [ 279.194956][ T5732] usb 1-1: SerialNumber: syz [ 279.208788][ T5732] usb 1-1: config 0 descriptor?? [ 279.220660][ T5732] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 279.294096][ T5603] usb 5-1: Using ep0 maxpacket: 8 [ 279.302541][ T5603] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 279.313803][ T5603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.324954][ T5603] usb 5-1: config 0 has no interfaces? [ 279.327476][ T8555] veth0_vlan: entered promiscuous mode [ 279.332056][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.350138][ T5603] usb 5-1: config 0 descriptor?? [ 279.361831][ T8555] veth1_vlan: entered promiscuous mode [ 279.397107][ T8555] veth0_macvtap: entered promiscuous mode [ 279.408483][ T8555] veth1_macvtap: entered promiscuous mode [ 279.427097][ T5603] usb 1-1: USB disconnect, device number 37 [ 279.432120][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.447845][ T5603] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 279.450533][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.484388][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.493507][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.535071][ T1098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.545905][ T1098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.567252][ T5732] usb 5-1: USB disconnect, device number 37 [ 279.585844][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.599782][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.629355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.639960][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.659578][ T29] audit: type=1400 audit(1787246930.836:355): avc: denied { mounton } for pid=8555 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 279.734036][ T29] audit: type=1400 audit(1787246930.916:356): avc: denied { create } for pid=8619 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 279.756174][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 279.765389][ T29] audit: type=1400 audit(1787246930.936:357): avc: denied { connect } for pid=8619 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 279.785550][ T29] audit: type=1400 audit(1787246930.936:358): avc: denied { write } for pid=8619 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.014215][ T5608] Bluetooth: hci5: command tx timeout [ 280.241677][ T8625] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 280.539286][ T29] audit: type=1400 audit(1787246931.716:359): avc: denied { read write } for pid=8630 comm="syz.4.946" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.604524][ T29] audit: type=1400 audit(1787246931.716:360): avc: denied { open } for pid=8630 comm="syz.4.946" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.655409][ T29] audit: type=1400 audit(1787246931.756:361): avc: denied { map } for pid=8630 comm="syz.4.946" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.844132][ T5600] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 280.957828][ T29] audit: type=1400 audit(1787246932.126:362): avc: denied { ioctl } for pid=8630 comm="syz.4.946" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.039702][ T5600] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 281.052165][ T8646] futex_wake_op: syz.0.950 tries to shift op by 144; fix this program [ 281.073485][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.084551][ T8646] futex_wake_op: syz.0.950 tries to shift op by 144; fix this program [ 281.094322][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 281.104950][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.268531][ T8651] syz.5.951 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 281.282445][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.5.951 Not tainted syzkaller #0 PREEMPT(full) [ 281.282477][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 281.282490][ T8651] Call Trace: [ 281.282499][ T8651] [ 281.282507][ T8651] dump_stack_lvl+0x100/0x190 [ 281.282551][ T8651] dump_header+0xfb/0x606 [ 281.282577][ T8651] oom_kill_process.cold+0xd/0x330 [ 281.282601][ T8651] out_of_memory+0x340/0x14f0 [ 281.282632][ T8651] ? __pfx_out_of_memory+0x10/0x10 [ 281.282662][ T8651] mem_cgroup_out_of_memory+0xc6/0x130 [ 281.282690][ T8651] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 281.282715][ T8651] ? find_held_lock+0x2b/0x80 [ 281.282744][ T8651] ? do_raw_spin_unlock+0x145/0x1e0 [ 281.282763][ T8651] ? _raw_spin_unlock+0x28/0x50 [ 281.282793][ T8651] try_charge_memcg+0x6e1/0xdf0 [ 281.282817][ T8651] ? __pfx_try_charge_memcg+0x10/0x10 [ 281.282837][ T8651] ? find_held_lock+0x2b/0x80 [ 281.282857][ T8651] ? rcu_read_unlock+0x17/0x60 [ 281.282876][ T8651] ? rcu_read_unlock+0x17/0x60 [ 281.282903][ T8651] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 281.282932][ T8651] ? kasan_unpoison+0x27/0x60 [ 281.282960][ T8651] __kvmalloc_node_noprof+0x73b/0x970 [ 281.282991][ T8651] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 281.283025][ T8651] __nf_hook_entries_try_shrink+0x164/0x400 [ 281.283059][ T8651] __nf_unregister_net_hook+0x1d2/0x6a0 [ 281.283089][ T8651] nf_unregister_net_hook+0xda/0x120 [ 281.283116][ T8651] __nf_tables_unregister_hook.part.0+0x3d6/0x4f0 [ 281.283153][ T8651] nf_tables_abort+0x24ff/0x4590 [ 281.283193][ T8651] ? __pfx_nf_tables_abort+0x10/0x10 [ 281.283217][ T8651] ? kasan_save_track+0x14/0x30 [ 281.283250][ T8651] ? nfnetlink_rcv_batch+0x780/0x2880 [ 281.283275][ T8651] nfnetlink_rcv_batch+0xd4f/0x2880 [ 281.283314][ T8651] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 281.283335][ T8651] ? find_held_lock+0x2b/0x80 [ 281.283372][ T8651] ? avc_has_perm_noaudit+0x145/0x3b0 [ 281.283436][ T8651] ? __nla_parse+0x40/0x60 [ 281.283474][ T8651] nfnetlink_rcv+0x3bd/0x440 [ 281.283497][ T8651] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 281.283528][ T8651] netlink_unicast+0x585/0x850 [ 281.283562][ T8651] ? __pfx_netlink_unicast+0x10/0x10 [ 281.283597][ T8651] netlink_sendmsg+0x8b0/0xda0 [ 281.283640][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.283672][ T8651] ? selinux_socket_sendmsg+0x198/0x2f0 [ 281.283713][ T8651] ____sys_sendmsg+0xa4d/0xbe0 [ 281.283740][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.283769][ T8651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.283805][ T8651] ___sys_sendmsg+0x190/0x1e0 [ 281.283832][ T8651] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.283851][ T8651] ? futex_wait+0x11e/0x370 [ 281.283881][ T8651] ? find_held_lock+0x2b/0x80 [ 281.283911][ T8651] __sys_sendmsg+0x160/0x210 [ 281.283928][ T8651] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.283957][ T8651] do_syscall_64+0x123/0x790 [ 281.283984][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.284003][ T8651] RIP: 0033:0x7f302419e0d9 [ 281.284020][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.284034][ T8651] RSP: 002b:00007f302512b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.284054][ T8651] RAX: ffffffffffffffda RBX: 00007f3024425fa0 RCX: 00007f302419e0d9 [ 281.284065][ T8651] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 281.284075][ T8651] RBP: 00007f3024235024 R08: 0000000000000000 R09: 0000000000000000 [ 281.284084][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.284094][ T8651] R13: 00007f3024426038 R14: 00007f3024425fa0 R15: 00007fff5ca30128 [ 281.284117][ T8651] [ 281.681378][ T8651] memory: usage 8kB, limit 8kB, failcnt 21 [ 281.688444][ T8651] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 281.698190][ T8651] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 281.705569][ T8651] Memory cgroup stats for /syz5/test: [ 281.705765][ T8651] cache 0 [ 281.715780][ T8651] rss 0 [ 281.718626][ T8651] rss_huge 0 [ 281.721897][ T8651] shmem 0 [ 281.725309][ T8651] mapped_file 0 [ 281.729026][ T8651] dirty 0 [ 281.732052][ T8651] writeback 0 [ 281.737809][ T8651] workingset_refault_anon 0 [ 281.742562][ T8651] workingset_refault_file 0 [ 281.747668][ T8651] swap 0 [ 281.750596][ T8651] swapcached 0 [ 281.755192][ T8651] pgpgin 0 [ 281.758363][ T8651] pgpgout 0 [ 281.761547][ T8651] pgfault 0 [ 281.765679][ T8651] pgmajfault 0 [ 281.769207][ T8651] inactive_anon 0 [ 281.772959][ T8651] active_anon 0 [ 281.777223][ T8651] inactive_file 0 [ 281.785255][ T8651] active_file 0 [ 281.788913][ T8651] unevictable 0 [ 281.792529][ T8651] hierarchical_memory_limit 8192 [ 281.798127][ T8651] hierarchical_memsw_limit 9223372036854771712 [ 281.804796][ T8651] total_cache 0 [ 281.808370][ T8651] total_rss 0 [ 281.811772][ T8651] total_rss_huge 0 [ 281.816262][ T8651] total_shmem 0 [ 281.835459][ T8651] total_mapped_file 0 [ 281.839998][ T8651] total_dirty 0 [ 281.843479][ T8651] total_writeback 0 [ 281.847632][ T8651] total_workingset_refault_anon 0 [ 281.870554][ T8651] total_workingset_refault_file 0 [ 281.899673][ T8651] total_swap 0 [ 281.907487][ T8651] total_swapcached 0 [ 281.929654][ T8651] total_pgpgin 0 [ 281.946538][ T8651] total_pgpgout 0 [ 281.950859][ T5732] hid_parser_main: 3989 callbacks suppressed [ 281.950881][ T5732] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 281.976317][ T8651] total_pgfault 0 [ 281.985974][ T8651] total_pgmajfault 0 [ 282.019999][ T46] kernel write not supported for file /input/event2 (pid: 46 comm: kworker/1:1) [ 282.030446][ T5710] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 282.052822][ T8651] total_inactive_anon 0 [ 282.065468][ T5732] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.087576][ T8651] total_active_anon 0 [ 282.095864][ T8651] total_inactive_file 0 [ 282.096269][ T5608] Bluetooth: hci5: command tx timeout [ 282.104137][ T8651] total_active_file 0 [ 282.120830][ T8651] total_unevictable 0 [ 282.131654][ T8651] anon_cost 0 [ 282.139877][ T8651] file_cost 0 [ 282.148423][ T8651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.951,pid=8650,uid=0 [ 282.203344][ T8651] Memory cgroup out of memory: Killed process 8651 (syz.5.951) total-vm:102180kB, anon-rss:1424kB, file-rss:23144kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 282.232205][ T5710] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.243314][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.265084][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.302660][ T5710] usb 5-1: config 0 descriptor?? [ 282.526214][ T29] audit: type=1400 audit(1787246933.706:363): avc: denied { read } for pid=8662 comm="syz.3.956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 282.571411][ T29] audit: type=1400 audit(1787246933.706:364): avc: denied { open } for pid=8662 comm="syz.3.956" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 282.684288][ T8663] kvm: pic: non byte read [ 282.689513][ T8663] kvm: pic: non byte write [ 282.694777][ T8663] kvm: pic: non byte write [ 282.699507][ T8663] kvm: pic: non byte write [ 282.704800][ T8663] kvm: pic: non byte read [ 282.709366][ T8663] kvm: pic: non byte write [ 282.714590][ T8663] kvm: pic: non byte write [ 282.719271][ T8663] kvm: pic: non byte write [ 282.725032][ T8663] kvm: pic: single mode not supported [ 282.725210][ T8663] kvm: pic: level sensitive irq not supported [ 282.761844][ T5710] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 282.790879][ T5710] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001D/input/input39 [ 282.874007][ T5603] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.941930][ T5710] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 283.044777][ T5603] usb 6-1: Using ep0 maxpacket: 8 [ 283.055103][ T5603] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 283.071235][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.093943][ T5603] usb 6-1: Product: syz [ 283.098221][ T5603] usb 6-1: Manufacturer: syz [ 283.102843][ T5603] usb 6-1: SerialNumber: syz [ 283.111065][ T5603] usb 6-1: config 0 descriptor?? [ 283.198304][ T5710] usb 5-1: USB disconnect, device number 38 [ 283.326409][ T5603] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.539100][ T5603] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 283.566285][ T5603] usb 6-1: USB disconnect, device number 2 [ 283.610950][ T5710] usb 2-1: USB disconnect, device number 35 [ 284.015363][ T5710] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 284.063999][ T5603] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 284.075611][ T5732] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 284.174055][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 284.180316][ T5710] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.185370][ T5608] Bluetooth: hci5: command tx timeout [ 284.192061][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.206446][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 284.220005][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.232937][ T5710] usb 2-1: config 0 descriptor?? [ 284.239723][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 284.254833][ T5603] usb 5-1: Using ep0 maxpacket: 16 [ 284.255159][ T5732] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 284.272164][ T5710] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 284.281382][ T5603] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 284.293728][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.303689][ T5732] usb 1-1: Product: syz [ 284.308543][ T5603] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.308609][ T5732] usb 1-1: Manufacturer: syz [ 284.322673][ T5732] usb 1-1: SerialNumber: syz [ 284.324014][ T5603] usb 5-1: config 0 has no interface number 0 [ 284.343954][ T5603] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.364161][ T5603] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.374203][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.384767][ T5603] usb 5-1: config 0 descriptor?? [ 284.456217][ T29] audit: type=1400 audit(1787246935.626:365): avc: denied { ioctl } for pid=8678 comm="syz.5.963" path="socket:[23139]" dev="sockfs" ino=23139 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.541408][ T5732] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 284.555282][ T5732] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.565719][ T5732] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 284.575108][ T5732] usb 1-1: media controller created [ 284.587578][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.605601][ T5732] zl10353_read_register: readreg error (reg=127, ret==-71) [ 284.629315][ T5732] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 284.642596][ T5732] usb 1-1: USB disconnect, device number 38 [ 284.744061][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 284.904584][ T9] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 284.916862][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.925075][ T9] usb 6-1: Product: syz [ 284.929386][ T9] usb 6-1: Manufacturer: syz [ 284.934190][ T9] usb 6-1: SerialNumber: syz [ 284.941042][ T9] usb 6-1: config 0 descriptor?? [ 284.997431][ T5603] uclogic 0003:28BD:0071.001E: failed retrieving string descriptor #100: -71 [ 285.006646][ T5603] uclogic 0003:28BD:0071.001E: failed retrieving pen parameters: -71 [ 285.015302][ T5603] uclogic 0003:28BD:0071.001E: pen probing failed: -71 [ 285.022277][ T5603] uclogic 0003:28BD:0071.001E: failed probing parameters: -71 [ 285.029908][ T5603] uclogic 0003:28BD:0071.001E: probe with driver uclogic failed with error -71 [ 285.042982][ T5603] usb 5-1: USB disconnect, device number 39 [ 285.151439][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.162113][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.173453][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.183400][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.395265][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.405654][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.546835][ T8689] loop0: detected capacity change from 0 to 2049 [ 285.599766][ T8689] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 285.609311][ T8689] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 285.618352][ T8689] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 285.620278][ T9] int51x1 6-1:0.0: probe with driver int51x1 failed with error -71 [ 285.625384][ T8689] loop0: [ 285.648216][ T9] usb 6-1: USB disconnect, device number 3 [ 285.994012][ T5732] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 286.178621][ T5732] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 286.193076][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.205009][ T5732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 286.221031][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.268276][ T29] audit: type=1400 audit(1787246937.426:366): avc: denied { map } for pid=8694 comm="syz.0.970" path="/dev/video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 286.483957][ T5710] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 286.624203][ T5710] usb 6-1: device descriptor read/64, error -71 [ 286.711413][ T9] usb 2-1: USB disconnect, device number 36 [ 286.897604][ T5710] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 287.053950][ T5710] usb 6-1: device descriptor read/64, error -71 [ 287.174756][ T5710] usb usb6-port1: attempt power cycle [ 287.423935][ T5732] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 287.574072][ T5710] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 287.595541][ T5732] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.606980][ T5710] usb 6-1: device descriptor read/8, error -71 [ 287.616919][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.629062][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.651633][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.666652][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.677651][ T29] audit: type=1400 audit(1787246938.856:367): avc: denied { mounton } for pid=8711 comm="syz.0.976" path="/205/file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 287.702300][ T5732] usb 2-1: config 0 descriptor?? [ 287.864041][ T5710] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.884647][ T5710] usb 6-1: device descriptor read/8, error -71 [ 288.071513][ T5710] usb usb6-port1: unable to enumerate USB device [ 288.367533][ T5732] usbhid 2-1:0.0: can't add hid device: -71 [ 288.380498][ T5732] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.400495][ T5732] usb 2-1: USB disconnect, device number 37 [ 288.773133][ T9] usb 5-1: USB disconnect, device number 40 [ 288.863186][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 289.326668][ T5710] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 289.516102][ T5710] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.529947][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.538573][ T5710] usb 2-1: Product: syz [ 289.542759][ T5710] usb 2-1: Manufacturer: syz [ 289.547855][ T5710] usb 2-1: SerialNumber: syz [ 289.555045][ T5710] usb 2-1: config 0 descriptor?? [ 289.664342][ T8758] netlink: 277 bytes leftover after parsing attributes in process `syz.4.991'. [ 289.714278][ T5732] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 289.769769][ T5710] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.875088][ T5732] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.887103][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.895216][ T5732] usb 1-1: Product: syz [ 289.899406][ T5732] usb 1-1: Manufacturer: syz [ 289.904158][ T5732] usb 1-1: SerialNumber: syz [ 289.910696][ T5732] usb 1-1: config 0 descriptor?? [ 289.944450][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.003950][ T46] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 290.094507][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 290.104654][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.114405][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.124353][ T5732] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 290.132762][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.154583][ T46] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 290.164904][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.176493][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.186554][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.196857][ T46] usb 5-1: config 0 descriptor?? [ 290.612409][ T46] arvo 0003:1E7D:30D4.001F: item fetching failed at offset 5/7 [ 290.620715][ T46] arvo 0003:1E7D:30D4.001F: parse failed [ 290.626496][ T46] arvo 0003:1E7D:30D4.001F: probe with driver arvo failed with error -22 [ 290.826427][ T9] usb 5-1: USB disconnect, device number 41 [ 291.373872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 291.589851][ T5710] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 291.607075][ T5710] usb 2-1: USB disconnect, device number 38 [ 291.793998][ T5603] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 291.805949][ T5732] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 291.815607][ T5732] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 291.823488][ T5732] usb 1-1: media controller created [ 291.830235][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.865829][ T5732] i2c i2c-1: Added multiplexed i2c bus 2 [ 291.871599][ T5732] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 291.879605][ T5732] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 291.889073][ T5732] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 291.924437][ T5732] DVB: Unable to find symbol r820t_attach() [ 291.934170][ T5603] usb 5-1: device descriptor read/64, error -71 [ 292.021622][ T5732] usb 1-1: USB disconnect, device number 39 [ 292.183938][ T5603] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 292.313996][ T5603] usb 5-1: device descriptor read/64, error -71 [ 292.374056][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 292.424172][ T5603] usb usb5-port1: attempt power cycle [ 292.523919][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 292.529827][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 292.541853][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.550199][ T9] usb 2-1: Product: syz [ 292.554545][ T9] usb 2-1: Manufacturer: syz [ 292.563913][ T9] usb 2-1: SerialNumber: syz [ 292.571755][ T9] usb 2-1: config 0 descriptor?? [ 292.736989][ T8782] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 292.765982][ T5732] usb 6-1: USB disconnect, device number 8 [ 293.033992][ T5603] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 293.096805][ T5710] IPVS: starting estimator thread 0... [ 293.204960][ T8785] IPVS: using max 41 ests per chain, 98400 per kthread [ 293.955215][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 293.970121][ T5603] usb 5-1: device descriptor read/8, error -71 [ 294.214005][ T5603] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 294.234093][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 294.242181][ T5603] usb 5-1: device descriptor read/8, error -71 [ 294.354201][ T5603] usb usb5-port1: unable to enumerate USB device [ 294.394819][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.405032][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.413643][ T10] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 294.424630][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.433779][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 294.445543][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 294.458118][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.466336][ T10] usb 1-1: Product: syz [ 294.470769][ T10] usb 1-1: Manufacturer: syz [ 294.480079][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 294.485724][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 294.491366][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.622137][ T29] audit: type=1400 audit(1787246945.796:368): avc: denied { create } for pid=8794 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.650458][ T29] audit: type=1400 audit(1787246945.796:369): avc: denied { setopt } for pid=8794 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.692203][ T29] audit: type=1400 audit(1787246945.806:370): avc: denied { write } for pid=8794 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.703432][ T8798] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1008'. [ 294.729506][ T5732] usb 1-1: USB disconnect, device number 40 [ 295.051764][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 295.079228][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'. [ 295.133978][ T5603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 295.391035][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 295.460109][ T9] usb write operation failed. (-71) [ 295.842936][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.865822][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 295.887188][ T9] usb 2-1: media controller created [ 295.898311][ T9] usb read operation failed. (-71) [ 295.908171][ T9] usb write operation failed. (-71) [ 295.931027][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 295.947246][ T9] usb 2-1: USB disconnect, device number 39 [ 295.984823][ T5603] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 296.006763][ T5603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.022952][ T5603] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 296.046458][ T5603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.158770][ T8841] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1019'. [ 296.159111][ T29] audit: type=1400 audit(1787246947.336:371): avc: denied { bind } for pid=8839 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.220724][ T29] audit: type=1400 audit(1787246947.396:372): avc: denied { execute } for pid=8839 comm="syz.0.1019" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.283979][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 296.330272][ T8847] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1020'. [ 296.424069][ T9] usb 2-1: device descriptor read/64, error -71 [ 296.563957][ T5710] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 296.663976][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 296.693947][ T5710] usb 5-1: device descriptor read/64, error -71 [ 296.703968][ T46] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 296.793963][ T9] usb 2-1: device descriptor read/64, error -71 [ 296.854607][ T46] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 296.864850][ T46] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 296.873202][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.883944][ T46] usb 1-1: config 0 has no interface number 0 [ 296.890142][ T46] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 296.902484][ T46] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 296.916027][ T46] usb 1-1: config 0 interface 255 has no altsetting 0 [ 296.924402][ T9] usb usb2-port1: attempt power cycle [ 296.924851][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.938501][ T46] usb 1-1: Product: syz [ 296.942700][ T46] usb 1-1: Manufacturer: syz [ 296.947413][ T5710] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 296.955069][ T46] usb 1-1: SerialNumber: syz [ 296.962354][ T46] usb 1-1: config 0 descriptor?? [ 296.969847][ T46] streamzap 1-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 297.083972][ T5710] usb 5-1: device descriptor read/64, error -71 [ 297.176855][ T5603] usb 1-1: USB disconnect, device number 41 [ 297.194214][ T5710] usb usb5-port1: attempt power cycle [ 297.263963][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 297.284649][ T9] usb 2-1: device descriptor read/8, error -71 [ 297.524090][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 297.534176][ T5710] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 297.545220][ T9] usb 2-1: device descriptor read/8, error -71 [ 297.554518][ T5710] usb 5-1: device descriptor read/8, error -71 [ 297.654809][ T9] usb usb2-port1: unable to enumerate USB device [ 297.740642][ T8856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.794000][ T5710] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 297.815183][ T5710] usb 5-1: device descriptor read/8, error -71 [ 297.944262][ T5710] usb usb5-port1: unable to enumerate USB device [ 297.954743][ T9] usb 6-1: USB disconnect, device number 9 [ 298.147471][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1027'. [ 298.752444][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'. [ 298.889118][ T8876] jffs2: notice: (8876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 298.909611][ T29] audit: type=1400 audit(1787246950.086:373): avc: denied { mount } for pid=8875 comm="syz.5.1030" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 298.939113][ T29] audit: type=1400 audit(1787246950.106:374): avc: denied { write } for pid=8875 comm="syz.5.1030" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.993164][ T29] audit: type=1400 audit(1787246950.106:375): avc: denied { add_name } for pid=8875 comm="syz.5.1030" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.042441][ T29] audit: type=1400 audit(1787246950.106:376): avc: denied { create } for pid=8875 comm="syz.5.1030" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 299.074614][ T29] audit: type=1400 audit(1787246950.116:377): avc: denied { read write open } for pid=8875 comm="syz.5.1030" path="/15/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 299.099727][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 299.193428][ T8887] syz.3.1034 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 299.213627][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: syz.3.1034 Not tainted syzkaller #0 PREEMPT(full) [ 299.213659][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 299.213671][ T8887] Call Trace: [ 299.213678][ T8887] [ 299.213686][ T8887] dump_stack_lvl+0x100/0x190 [ 299.213720][ T8887] dump_header+0xfb/0x606 [ 299.213746][ T8887] oom_kill_process.cold+0xd/0x330 [ 299.213766][ T8887] out_of_memory+0x340/0x14f0 [ 299.213791][ T8887] ? __pfx_out_of_memory+0x10/0x10 [ 299.213815][ T8887] mem_cgroup_out_of_memory+0xc6/0x130 [ 299.213841][ T8887] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 299.213863][ T8887] ? find_held_lock+0x2b/0x80 [ 299.213897][ T8887] ? do_raw_spin_unlock+0x145/0x1e0 [ 299.213915][ T8887] ? _raw_spin_unlock+0x28/0x50 [ 299.213952][ T8887] try_charge_memcg+0x6e1/0xdf0 [ 299.213977][ T8887] ? __pfx_try_charge_memcg+0x10/0x10 [ 299.213997][ T8887] ? find_held_lock+0x2b/0x80 [ 299.214019][ T8887] ? rcu_read_unlock+0x17/0x60 [ 299.214040][ T8887] ? rcu_read_unlock+0x17/0x60 [ 299.214085][ T8887] obj_cgroup_charge_pages+0x22/0x1d0 [ 299.214107][ T8887] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 299.214134][ T8887] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 299.214169][ T8887] ? lock_acquire+0x1b9/0x370 [ 299.214196][ T8887] ? find_held_lock+0x2b/0x80 [ 299.214214][ T8887] ? __free_frozen_pages+0x747/0x1090 [ 299.214233][ T8887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.214261][ T8887] ? do_raw_spin_unlock+0x145/0x1e0 [ 299.214279][ T8887] ? _raw_spin_unlock+0x28/0x50 [ 299.214300][ T8887] ? __free_frozen_pages+0x751/0x1090 [ 299.214319][ T8887] ? rcu_is_watching+0x13/0xc0 [ 299.214338][ T8887] ? trace_mm_page_alloc+0x164/0x1c0 [ 299.214373][ T8887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.214397][ T8887] ? stack_depot_save_flags+0x49a/0x9f0 [ 299.214428][ T8887] ? kasan_save_stack+0x3f/0x50 [ 299.214451][ T8887] ? kasan_save_stack+0x30/0x50 [ 299.214473][ T8887] ? kasan_save_track+0x14/0x30 [ 299.214501][ T8887] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 299.214524][ T8887] ? nfnetlink_rcv+0x1b3/0x440 [ 299.214544][ T8887] ? netlink_sendmsg+0x8b0/0xda0 [ 299.214568][ T8887] ? ___sys_sendmsg+0x190/0x1e0 [ 299.214595][ T8887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.214620][ T8887] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 299.214651][ T8887] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 299.214680][ T8887] ? policy_nodemask+0xed/0x4f0 [ 299.214710][ T8887] alloc_pages_bulk_mempolicy_noprof+0x1a6/0x1290 [ 299.214736][ T8887] ? alloc_pages_mpol+0x25a/0x540 [ 299.214766][ T8887] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 299.214787][ T8887] ? __kmalloc_node_noprof+0x359/0x830 [ 299.214812][ T8887] ? __get_vm_area_node+0x1c0/0x350 [ 299.214837][ T8887] ? __get_vm_area_node+0x22b/0x350 [ 299.214867][ T8887] __vmalloc_node_range_noprof+0x69d/0x1630 [ 299.214892][ T8887] ? hash_netport_create+0x40b/0x12d0 [ 299.214917][ T8887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.214951][ T8887] ? rcu_is_watching+0x13/0xc0 [ 299.214977][ T8887] __kvmalloc_node_noprof+0x3d5/0x970 [ 299.215000][ T8887] ? hash_netport_create+0x40b/0x12d0 [ 299.215018][ T8887] ? hash_netport_create+0x40b/0x12d0 [ 299.215038][ T8887] hash_netport_create+0x40b/0x12d0 [ 299.215058][ T8887] ? __find_set_type_get+0x1a7/0x440 [ 299.215077][ T8887] ? __pfx_hash_netport_create+0x10/0x10 [ 299.215095][ T8887] ip_set_create+0x6c4/0x1510 [ 299.215120][ T8887] ? __pfx_ip_set_create+0x10/0x10 [ 299.215159][ T8887] ? find_held_lock+0x2b/0x80 [ 299.215184][ T8887] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 299.215211][ T8887] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 299.215231][ T8887] ? __lock_acquire+0x4c5/0x1ec0 [ 299.215281][ T8887] ? avc_has_perm_noaudit+0x145/0x3b0 [ 299.215315][ T8887] netlink_rcv_skb+0x159/0x420 [ 299.215342][ T8887] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 299.215361][ T8887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.215396][ T8887] ? ns_capable+0xd2/0xf0 [ 299.215423][ T8887] nfnetlink_rcv+0x1b3/0x440 [ 299.215440][ T8887] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 299.215457][ T8887] ? netlink_deliver_tap+0x1ae/0xcc0 [ 299.215485][ T8887] netlink_unicast+0x585/0x850 [ 299.215512][ T8887] ? __pfx_netlink_unicast+0x10/0x10 [ 299.215545][ T8887] netlink_sendmsg+0x8b0/0xda0 [ 299.215573][ T8887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.215596][ T8887] ? selinux_socket_sendmsg+0x198/0x2f0 [ 299.215630][ T8887] ____sys_sendmsg+0xa4d/0xbe0 [ 299.215651][ T8887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.215674][ T8887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.215712][ T8887] ___sys_sendmsg+0x190/0x1e0 [ 299.215737][ T8887] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.215758][ T8887] ? futex_wait+0x11e/0x370 [ 299.215786][ T8887] ? find_held_lock+0x2b/0x80 [ 299.215816][ T8887] __sys_sendmsg+0x160/0x210 [ 299.215833][ T8887] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.215860][ T8887] do_syscall_64+0x123/0x790 [ 299.215888][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.215907][ T8887] RIP: 0033:0x7f2fb7f9e0d9 [ 299.215927][ T8887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.215956][ T8887] RSP: 002b:00007f2fb8f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.215978][ T8887] RAX: ffffffffffffffda RBX: 00007f2fb8225fa0 RCX: 00007f2fb7f9e0d9 [ 299.215991][ T8887] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 299.216003][ T8887] RBP: 00007f2fb8035024 R08: 0000000000000000 R09: 0000000000000000 [ 299.216015][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.216024][ T8887] R13: 00007f2fb8226038 R14: 00007f2fb8225fa0 R15: 00007ffc31bdbf78 [ 299.216047][ T8887] [ 299.779557][ T8887] memory: usage 8kB, limit 8kB, failcnt 26 [ 299.785647][ T8887] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 299.793781][ T8887] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 299.793998][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 299.810387][ T8887] Memory cgroup stats for /syz3/test: [ 299.810644][ T8887] cache 0 [ 299.820750][ T8887] rss 0 [ 299.823678][ T8887] rss_huge 0 [ 299.831415][ T8887] shmem 0 [ 299.834764][ T8887] mapped_file 0 [ 299.838337][ T8887] dirty 0 [ 299.842048][ T8887] writeback 0 [ 299.847076][ T8887] workingset_refault_anon 0 [ 299.851749][ T8887] workingset_refault_file 0 [ 299.857183][ T8887] swap 0 [ 299.860152][ T8887] swapcached 0 [ 299.864596][ T8887] pgpgin 0 [ 299.867694][ T8887] pgpgout 0 [ 299.870847][ T8887] pgfault 5 [ 299.874260][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.882273][ T9] usb 1-1: Product: syz [ 299.886601][ T9] usb 1-1: Manufacturer: syz [ 299.891221][ T9] usb 1-1: SerialNumber: syz [ 299.900570][ T8887] pgmajfault 0 [ 299.904175][ T8887] inactive_anon 0 [ 299.907814][ T8887] active_anon 0 [ 299.912556][ T8887] inactive_file 0 [ 299.916347][ T8887] active_file 0 [ 299.919807][ T8887] unevictable 0 [ 299.923261][ T8887] hierarchical_memory_limit 8192 [ 299.930845][ T8887] hierarchical_memsw_limit 9223372036854771712 [ 299.940807][ T8887] total_cache 0 [ 299.944360][ T8887] total_rss 0 [ 299.947704][ T8887] total_rss_huge 0 [ 299.951427][ T8887] total_shmem 0 [ 299.954956][ T8887] total_mapped_file 0 [ 299.958951][ T8887] total_dirty 0 [ 299.962423][ T8887] total_writeback 0 [ 299.971514][ T8887] total_workingset_refault_anon 0 [ 299.976696][ T8887] total_workingset_refault_file 0 [ 299.981754][ T8887] total_swap 0 [ 299.985278][ T8887] total_swapcached 0 [ 299.989182][ T8887] total_pgpgin 0 [ 299.992736][ T8887] total_pgpgout 0 [ 299.996433][ T8887] total_pgfault 5 [ 300.000074][ T8887] total_pgmajfault 0 [ 300.016524][ T8887] total_inactive_anon 0 [ 300.020778][ T8887] total_active_anon 0 [ 300.025006][ T8887] total_inactive_file 0 [ 300.029182][ T8887] total_active_file 0 [ 300.033170][ T8887] total_unevictable 0 [ 300.037242][ T8887] anon_cost 0 [ 300.040532][ T8887] file_cost 0 [ 300.043817][ T8887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1034,pid=8886,uid=0 [ 300.064002][ T9] usb 1-1: reset high-speed USB device number 42 using dummy_hcd [ 300.075274][ T8887] Memory cgroup out of memory: Killed process 8886 (syz.3.1034) total-vm:102252kB, anon-rss:1424kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 300.205584][ T8902] comedi comedi1: pcl818: I/O base address or length out of range [ 300.372789][ T9] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 300.379754][ T9] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 300.454064][ T5603] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 300.654095][ T5710] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 300.718485][ T46] usb 1-1: USB disconnect, device number 42 [ 300.719153][ C0] device 1-1 is not registered [ 300.858188][ T5710] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 300.922186][ T5710] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 300.952980][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.963751][ T5710] usb 6-1: Product: syz [ 300.969497][ T5710] usb 6-1: Manufacturer: syz [ 300.975819][ T5710] usb 6-1: SerialNumber: syz [ 301.059139][ T5710] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 301.518668][ T5710] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.527885][ T9] usb 1-1: firmware upload failed (-110). [ 301.554579][ T5603] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.556646][ T5710] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 301.565670][ T5603] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.580885][ T5603] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.591125][ T5603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.597823][ T5710] usb 6-1: media controller created [ 301.661176][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.884692][ T5603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.895759][ T5603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.911516][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.919754][ T5603] usb 2-1: Product: syz [ 301.923992][ T5603] usb 2-1: Manufacturer: syz [ 301.947582][ T5603] cdc_wdm 2-1:1.0: skipping garbage [ 301.963013][ T5603] cdc_wdm 2-1:1.0: skipping garbage [ 301.992809][ T5603] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 301.999011][ T5603] cdc_wdm 2-1:1.0: Unknown control protocol [ 302.167036][ T29] audit: type=1400 audit(1787246953.346:378): avc: denied { read write } for pid=8901 comm="syz.1.1039" name="cdc-wdm0" dev="devtmpfs" ino=3438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 302.192057][ T29] audit: type=1400 audit(1787246953.346:379): avc: denied { open } for pid=8901 comm="syz.1.1039" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 302.590290][ T29] audit: type=1400 audit(1787246953.766:380): avc: denied { ioctl } for pid=8933 comm="syz.0.1049" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25917 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.591396][ T8934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 302.636033][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 302.643277][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.650181][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.657317][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.663919][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.670341][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.676954][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.683266][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.689858][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.696164][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.702750][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.708996][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 302.714601][ T5710] usb 2-1: USB disconnect, device number 44 [ 302.715577][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 302.727546][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 302.824654][ T29] audit: type=1400 audit(1787246954.006:381): avc: denied { read write } for pid=8936 comm="syz.0.1050" name="vbi2" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 302.850180][ T29] audit: type=1400 audit(1787246954.006:382): avc: denied { open } for pid=8936 comm="syz.0.1050" path="/dev/vbi2" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 302.981884][ T29] audit: type=1400 audit(1787246954.156:383): avc: denied { getopt } for pid=8936 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.006055][ T29] audit: type=1400 audit(1787246954.156:384): avc: denied { ioctl } for pid=8936 comm="syz.0.1050" path="/dev/vbi2" dev="devtmpfs" ino=966 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.353568][ T10] usb 6-1: USB disconnect, device number 10 [ 303.394201][ T8956] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 303.484326][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 304.926194][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 304.932515][ T9] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 304.943092][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.974195][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.987291][ T9] usb 1-1: Product: syz [ 304.991499][ T9] usb 1-1: Manufacturer: syz [ 304.996436][ T9] usb 1-1: SerialNumber: syz [ 305.216612][ T8989] program syz.4.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.241342][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.259311][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.290045][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.332162][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.487266][ T29] audit: type=1400 audit(1787246956.666:385): avc: denied { mount } for pid=8996 comm="syz.4.1069" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 305.495699][ T9002] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1070'. [ 305.536450][ T8999] ima: rule for LSM 'u' is undefined [ 305.555740][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.558046][ T8996] ima: policy update failed [ 305.564789][ T29] audit: type=1807 audit(1787246956.716:386): action=measure func=FILE_CHECK obj_type=u res=0 [ 305.597217][ T29] audit: type=1802 audit(1787246956.736:387): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.1069" res=0 errno=0 [ 305.631782][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.675705][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.694043][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.340608][ T9] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 306.480639][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 306.572645][ T9] usb 1-1: USB disconnect, device number 43 [ 307.412616][ T6739] udevd[6739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.443724][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 307.443742][ T29] audit: type=1400 audit(1787246958.616:390): avc: denied { read } for pid=9024 comm="syz.5.1078" name="trace" dev="tracefs" ino=3626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 307.534439][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 307.648210][ T9035] kvm: pic: non byte write [ 307.658123][ T9035] kvm: vcpu 0: requested 1920 ns lapic timer period limited to 200000 ns [ 307.694756][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 307.707472][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.718827][ T9] usb 5-1: Product: syz [ 307.723042][ T9] usb 5-1: Manufacturer: syz [ 307.728081][ T9] usb 5-1: SerialNumber: syz [ 307.773974][ T46] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 307.933913][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 307.939763][ T46] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 307.955707][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.966770][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.975407][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.977422][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 307.983699][ T46] usb 2-1: Product: syz [ 307.990206][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 308.002167][ T46] usb 2-1: Manufacturer: syz [ 308.007148][ T46] usb 2-1: SerialNumber: syz [ 308.016201][ T46] usb 2-1: config 0 descriptor?? [ 308.024247][ T9] usb 5-1: USB disconnect, device number 50 [ 308.154019][ T5710] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 308.230986][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 308.240932][ T46] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 [ 308.244248][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 308.266201][ T46] imon:send_packet: packet tx failed (-71) [ 308.284318][ T46] imon 2-1:0.0: panel buttons/knobs setup failed [ 308.303943][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 308.309716][ T5710] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 308.319958][ T5710] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.331377][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.339510][ T46] rc_core: IR keymap rc-imon-pad not found [ 308.345382][ T5710] usb 1-1: Product: syz [ 308.349562][ T5710] usb 1-1: Manufacturer: syz [ 308.354218][ T46] Registered IR keymap rc-empty [ 308.360696][ T5710] usb 1-1: SerialNumber: syz [ 308.365437][ T46] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 308.376385][ T46] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 308.387190][ T46] imon:send_packet: packet tx failed (-71) [ 308.404463][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 308.410174][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 308.422179][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.423961][ T46] imon 2-1:0.0: remote input dev register failed [ 308.430547][ T10] usb 6-1: Product: syz [ 308.437325][ T46] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 308.441690][ T10] usb 6-1: Manufacturer: syz [ 308.453676][ T10] usb 6-1: SerialNumber: syz [ 308.463988][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 308.474666][ T10] usb 6-1: config 0 descriptor?? [ 308.487724][ T46] imon 2-1:0.0: unable to initialize intf0, err 0 [ 308.495338][ T46] imon:imon_probe: failed to initialize context! [ 308.501720][ T46] imon 2-1:0.0: unable to register, err -19 [ 308.513319][ T46] usb 2-1: USB disconnect, device number 45 [ 308.597443][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.606852][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.617503][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.624624][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 308.626653][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.638087][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.654421][ T9] usb 5-1: Product: syz [ 308.658661][ T9] usb 5-1: Manufacturer: syz [ 308.663254][ T9] usb 5-1: SerialNumber: syz [ 308.682943][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 308.823936][ T46] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 308.855780][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.864882][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.876997][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.887154][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.897724][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 308.912350][ T10] usb 6-1: USB disconnect, device number 11 [ 308.973971][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 308.980251][ T46] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 308.990464][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.001487][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.011295][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.019449][ T46] usb 2-1: Product: syz [ 309.023660][ T46] usb 2-1: Manufacturer: syz [ 309.028419][ T46] usb 2-1: SerialNumber: syz [ 309.035542][ T46] usb 2-1: config 0 descriptor?? [ 309.112018][ T5710] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 309.148555][ T5710] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 309.165251][ T5710] usb 1-1: USB disconnect, device number 44 [ 309.190880][ T6739] udevd[6739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.256649][ T46] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 [ 309.277077][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:9e:05:70:ba:06 [ 309.295492][ T9] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 309.558389][ T46] rc_core: IR keymap rc-imon-pad not found [ 309.576488][ T46] Registered IR keymap rc-empty [ 309.590815][ T46] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 309.592907][ T29] audit: type=1400 audit(1787246960.766:391): avc: denied { write } for pid=9043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.602383][ T46] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 309.657310][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.697605][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.746469][ T29] audit: type=1400 audit(1787246960.916:392): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.863976][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 309.914829][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 309.921950][ T46] imon:send_packet: packet tx failed (-71) [ 309.944008][ T46] imon 2-1:0.0: remote input dev register failed [ 309.951029][ T46] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 309.965717][ T46] imon 2-1:0.0: unable to initialize intf0, err 0 [ 309.972194][ T46] imon:imon_probe: failed to initialize context! [ 309.978786][ T46] imon 2-1:0.0: unable to register, err -19 [ 309.989117][ T46] usb 2-1: USB disconnect, device number 46 [ 310.014645][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 310.032385][ T9] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 310.042835][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 310.054120][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.064162][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.083680][ T9] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 310.095622][ T9] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 310.484888][ T9072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.811600][ T9] usb 6-1: USB disconnect, device number 12 [ 310.828925][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 310.830026][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.846870][ T9061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.854292][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.865405][ T9] kobil_sct 6-1:1.0: device disconnected [ 310.997930][ T29] audit: type=1400 audit(1787246962.176:393): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 311.102308][ C1] usb 5-1: Rx status -71 [ 311.102607][ T9] usb 5-1: USB disconnect, device number 51 [ 311.106667][ C1] usb 5-1: eth1: intr status -71 [ 311.228245][ T29] audit: type=1400 audit(1787246962.406:394): avc: denied { write } for pid=9088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.292280][ T29] audit: type=1400 audit(1787246962.466:395): avc: denied { write } for pid=9099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.407333][ T9102] warning: `syz.1.1098' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.407630][ T29] audit: type=1400 audit(1787246962.586:396): avc: denied { setopt } for pid=9101 comm="syz.1.1098" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.446732][ T29] audit: type=1400 audit(1787246962.586:397): avc: denied { ioctl } for pid=9101 comm="syz.1.1098" path="socket:[25384]" dev="sockfs" ino=25384 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.471756][ T29] audit: type=1400 audit(1787246962.606:398): avc: denied { read } for pid=9101 comm="syz.1.1098" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 311.653945][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 311.813969][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 311.821867][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 311.836034][ T9] usb 2-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 311.847517][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 311.859708][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 45, changing to 9 [ 311.870937][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33019, setting to 1024 [ 311.884667][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.900144][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 311.910948][ T9] usb 2-1: Product: syz [ 311.915293][ T9] usb 2-1: Manufacturer: syz [ 311.919990][ T9] usb 2-1: SerialNumber: syz [ 311.927051][ T9] usb 2-1: config 0 descriptor?? [ 311.954211][ T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 312.114053][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 312.120185][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 312.130439][ T46] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 312.141604][ T46] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.151781][ T46] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.153310][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 312.164900][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 312.164944][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.178959][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 312.189501][ T46] usb 5-1: config 0 descriptor?? [ 312.374426][ T9] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 312.386634][ T9] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 312.397454][ T9138] jffs2: notice: (9138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 312.400434][ T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 312.533315][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1104'. [ 312.577304][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 312.577323][ T29] audit: type=1400 audit(1787246963.756:407): avc: denied { ioctl } for pid=9101 comm="syz.1.1098" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 312.626182][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.643707][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.645385][ T9145] binder: 9144:9145 ioctl c0306201 2000000001c0 returned -14 [ 312.654305][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.672742][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.680614][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.693782][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.705590][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.711637][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 312.712952][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.729147][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.735952][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.739957][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.742598][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.752913][ T46] magicmouse 0003:05AC:0265.0020: unknown main item tag 0x0 [ 312.756826][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.769404][ T46] magicmouse 0003:05AC:0265.0020: unbalanced collection at end of report description [ 312.771163][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.786742][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.789607][ T46] magicmouse 0003:05AC:0265.0020: magicmouse hid parse failed [ 312.793873][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.808152][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.814265][ T46] magicmouse 0003:05AC:0265.0020: probe with driver magicmouse failed with error -22 [ 312.814931][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 312.824440][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.833273][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.840227][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.847170][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.853800][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.860392][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.867225][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.874386][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.880943][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.887561][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.890005][ T46] usb 5-1: USB disconnect, device number 52 [ 312.894152][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.894366][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.919670][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.926318][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.932972][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.939629][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.946276][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.952916][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.959588][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.966280][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.973492][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.981013][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.987666][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 312.994316][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.000954][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.007591][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.014225][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.020856][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.028539][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.035210][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.041856][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.048484][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.055123][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.061765][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.068437][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.078460][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.085209][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 313.092251][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 313.109522][ T9] usb 2-1: USB disconnect, device number 47 [ 313.703997][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 313.744009][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 313.864163][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 313.869697][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 313.879713][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 313.888206][ T9] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 313.893932][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 313.898932][ T9] usb 6-1: config 179 has no interface number 0 [ 313.905088][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 313.910031][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 313.920774][ T46] usb 5-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.930232][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 313.930274][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 313.966945][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.967840][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.974501][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.994733][ T46] usb 5-1: config 0 descriptor?? [ 313.997159][ T9150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 314.245186][ T24] usb 6-1: USB disconnect, device number 13 [ 314.312735][ T9167] loop0: detected capacity change from 0 to 2049 [ 314.336776][ T9167] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 314.346997][ T9167] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 314.353664][ T9167] loop0: [ 314.429357][ T46] kye 0003:0458:5015.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 314.464540][ T46] kye 0003:0458:5015.0021: hidraw0: USB HID v0.05 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 314.485517][ T46] kye 0003:0458:5015.0021: tablet-enabling feature report not found [ 314.494462][ T46] kye 0003:0458:5015.0021: tablet enabling failed [ 314.518636][ T5608] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 314.528798][ T5608] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 314.644778][ T24] usb 5-1: USB disconnect, device number 53 [ 314.797018][ T9180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.846099][ T46] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 314.881397][ T9183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.004462][ T46] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 315.015311][ T46] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.026547][ T46] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.039393][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.046239][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.056120][ T46] usb 2-1: config 0 descriptor?? [ 315.433978][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 315.584570][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.594866][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.603505][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.613930][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.623080][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 315.634956][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 315.647467][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.655563][ T9] usb 5-1: Product: syz [ 315.659827][ T9] usb 5-1: Manufacturer: syz [ 315.668544][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 315.670944][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 315.674947][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 315.686177][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 315.692323][ T46] usb 2-1: USB disconnect, device number 48 [ 315.702768][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 315.710738][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 316.112197][ T4964] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 316.121839][ T4964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 316.129410][ T4964] loop0: [ 316.484007][ T46] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 316.633965][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 316.639703][ T46] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 316.651592][ T46] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 316.661928][ T46] usb 2-1: config 179 has no interface number 0 [ 316.669082][ T46] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 316.680969][ T46] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 316.692461][ T46] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 316.702710][ T46] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 316.716308][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.729864][ T9203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.945189][ T5603] usb 2-1: USB disconnect, device number 49 [ 317.003998][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 317.154640][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 317.165158][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.349701][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 317.389797][ T9] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 317.420628][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 317.537512][ T9218] syzkaller0: entered promiscuous mode [ 317.543138][ T9218] syzkaller0: entered allmulticast mode [ 317.654209][ T9] usb 6-1: USB disconnect, device number 14 [ 317.770008][ T46] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 317.934072][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 317.940872][ T46] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 317.951643][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 317.964952][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.973235][ T46] usb 2-1: Product: syz [ 317.977572][ T46] usb 2-1: Manufacturer: syz [ 317.982272][ T46] usb 2-1: SerialNumber: syz [ 317.992195][ T46] usb 2-1: config 0 descriptor?? [ 318.007715][ T46] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 318.020043][ T46] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 318.109416][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.116096][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.239766][ T9] usb 5-1: USB disconnect, device number 54 [ 318.282844][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 318.332107][ T29] audit: type=1400 audit(1787246969.496:408): avc: denied { bind } for pid=9222 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.632647][ T46] em28xx 2-1:0.0: chip ID is em2765 [ 318.689793][ T9230] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 319.143721][ T46] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 319.152166][ T46] em28xx 2-1:0.0: board has no eeprom [ 319.234011][ T46] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 319.256329][ T46] em28xx 2-1:0.0: dvb set to bulk mode. [ 319.265537][ T24] em28xx 2-1:0.0: Binding DVB extension [ 319.450144][ T46] usb 2-1: USB disconnect, device number 50 [ 319.623384][ T46] em28xx 2-1:0.0: Disconnecting em28xx [ 320.270283][ T24] em28xx 2-1:0.0: Registering input extension [ 320.295982][ T46] em28xx 2-1:0.0: Closing input extension [ 320.352069][ T9241] loop7: detected capacity change from 0 to 16384 [ 320.445326][ T46] em28xx: Freeing device [ 320.590397][ C1] blk_print_req_error: 8 callbacks suppressed [ 320.590420][ C1] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 320.591769][ T9243] loop7: detected capacity change from 16384 to 0 [ 320.613146][ T5603] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 320.773927][ T46] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 320.790810][ T5603] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 320.801659][ T5603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.821843][ T5603] usb 5-1: config 0 has no interfaces? [ 320.830833][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.841381][ T5603] usb 5-1: Product: syz [ 320.845758][ T5603] usb 5-1: Manufacturer: syz [ 320.850549][ T5603] usb 5-1: SerialNumber: syz [ 320.863388][ T5603] usb 5-1: config 0 descriptor?? [ 320.929808][ T46] usb 2-1: device descriptor read/64, error -71 [ 321.091816][ T5600] usb 5-1: USB disconnect, device number 55 [ 321.174065][ T46] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 321.291105][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 321.304082][ T46] usb 2-1: device descriptor read/64, error -71 [ 321.415206][ T46] usb usb2-port1: attempt power cycle [ 321.465376][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.495455][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.504315][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.514635][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.532290][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 321.552706][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.565998][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.574696][ T9] usb 6-1: Product: syz [ 321.578937][ T9] usb 6-1: Manufacturer: syz [ 321.593029][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 321.602065][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 321.610092][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 321.640342][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 321.753976][ T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 321.776244][ T46] usb 2-1: device descriptor read/8, error -71 [ 322.014816][ T46] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 322.034478][ T46] usb 2-1: device descriptor read/8, error -71 [ 322.144270][ T46] usb usb2-port1: unable to enumerate USB device [ 322.154133][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 322.304645][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 322.314806][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.325985][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.335963][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.346235][ T9] usb 5-1: config 0 descriptor?? [ 322.761572][ T9] hid_parser_main: 46 callbacks suppressed [ 322.761595][ T9] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 322.775036][ T9] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 322.782444][ T9] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 322.789950][ T9] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 322.797434][ T9] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 322.807117][ T9] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 322.961951][ T9] playstation 0003:054C:0DF2.0022: Failed to retrieve feature with reportID 9: -32 [ 322.971449][ T9] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense pairing info: -32 [ 322.981282][ T9] playstation 0003:054C:0DF2.0022: Failed to get MAC address from DualSense [ 322.990127][ T9] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 322.999432][ T9] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -32 [ 323.014902][ T9] usb 5-1: USB disconnect, device number 56 [ 324.229069][ T9267] Bluetooth: MGMT ver 1.23 [ 324.229083][ T29] audit: type=1400 audit(1787246975.406:409): avc: denied { write } for pid=9266 comm="syz.1.1154" path="socket:[26446]" dev="sockfs" ino=26446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.246940][ T9] usb 6-1: USB disconnect, device number 15 [ 324.373468][ T9271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 324.541304][ T9279] syzkaller0: entered promiscuous mode [ 324.547390][ T9279] syzkaller0: entered allmulticast mode [ 324.596948][ T5600] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 324.613387][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 324.764854][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 324.774393][ T5600] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 324.787057][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.799124][ T5600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.809480][ T9] usb 6-1: Product: syz [ 324.813773][ T9] usb 6-1: Manufacturer: syz [ 324.821043][ T5600] usb 2-1: config 0 has no interfaces? [ 324.826690][ T9] usb 6-1: SerialNumber: syz [ 324.836471][ T9] usb 6-1: config 0 descriptor?? [ 324.842770][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.863523][ T5600] usb 2-1: Product: syz [ 324.873033][ T5600] usb 2-1: Manufacturer: syz [ 324.878340][ T5600] usb 2-1: SerialNumber: syz [ 324.886948][ T5600] usb 2-1: config 0 descriptor?? [ 325.082205][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 325.100728][ T46] usb 2-1: USB disconnect, device number 55 [ 325.960392][ T5600] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 326.115204][ T5600] usb 2-1: device descriptor read/64, error -71 [ 326.360130][ T5600] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 326.520340][ T5600] usb 2-1: device descriptor read/64, error -71 [ 326.640564][ T5600] usb usb2-port1: attempt power cycle [ 326.686000][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.698907][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.732453][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.749728][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.770294][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.824887][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 326.850582][ T9] usb 6-1: USB disconnect, device number 16 [ 326.989282][ T5600] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 327.014699][ T5600] usb 2-1: device descriptor read/8, error -71 [ 327.256634][ T5600] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 327.284733][ T5600] usb 2-1: device descriptor read/8, error -71 [ 327.391573][ C0] Unknown status report in ack skb [ 327.404660][ T5600] usb usb2-port1: unable to enumerate USB device [ 327.496600][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1168'. [ 327.584151][ T46] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 327.763992][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 327.770815][ T46] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.781807][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.793222][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.803149][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.816927][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.829650][ T46] usb 5-1: config 0 descriptor?? [ 327.857557][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.864860][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.872254][ T9287] bridge_slave_0: entered allmulticast mode [ 327.879791][ T9287] bridge_slave_0: entered promiscuous mode [ 327.887754][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.895188][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.902471][ T9287] bridge_slave_1: entered allmulticast mode [ 327.909765][ T9287] bridge_slave_1: entered promiscuous mode [ 327.936207][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.947944][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.964194][ T5697] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 327.976747][ T9287] team0: Port device team_slave_0 added [ 327.984617][ T9287] team0: Port device team_slave_1 added [ 328.007664][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.014670][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.041154][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.053426][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.060621][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.086581][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.125236][ T5697] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 328.130959][ T9287] hsr_slave_0: entered promiscuous mode [ 328.136091][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.141012][ T9287] hsr_slave_1: entered promiscuous mode [ 328.154695][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.156695][ T9287] debugfs: 'hsr0' already exists in 'hsr' [ 328.164524][ T5697] usb 6-1: Product: syz [ 328.170021][ T9287] Cannot create hsr debugfs directory [ 328.176123][ T5697] usb 6-1: Manufacturer: syz [ 328.186151][ T5697] usb 6-1: SerialNumber: syz [ 328.195402][ T5697] usb 6-1: config 0 descriptor?? [ 328.248714][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 328.260755][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 328.277939][ T46] usb 5-1: USB disconnect, device number 57 [ 328.380632][ T9287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.391540][ T9287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.400215][ T9287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.417615][ T9287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.432179][ T5603] usb 6-1: USB disconnect, device number 17 [ 328.445345][ T9287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.474587][ T9287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.486101][ T9287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.498751][ T9287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.576402][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.596018][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.608139][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.615374][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.628099][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.635280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.797861][ T9330] syzkaller0: entered promiscuous mode [ 328.805843][ T9330] syzkaller0: entered allmulticast mode [ 328.895356][ T5608] Bluetooth: hci6: command tx timeout [ 329.077784][ T5608] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 329.156881][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 329.330678][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 329.341124][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.352777][ T24] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.366102][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 329.373206][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.388799][ T24] usb 2-1: config 0 descriptor?? [ 329.434267][ T46] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 329.516130][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 329.599518][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.617661][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.629578][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.642976][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.665002][ T46] usb 5-1: config 0 descriptor?? [ 329.683157][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 329.709302][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.718253][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 329.726752][ T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 329.745209][ T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 329.753627][ T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 329.762700][ T10] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 329.773279][ T10] usb 6-1: config 14 has no interface number 0 [ 329.779625][ T10] usb 6-1: config 14 has no interface number 1 [ 329.786516][ T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 329.797899][ T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 329.810165][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.821712][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 329.832945][ T10] usb 6-1: config 14 interface 57 has no altsetting 0 [ 329.839881][ T10] usb 6-1: config 14 interface 228 has no altsetting 0 [ 329.850761][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.859308][ T10] usb 6-1: Product: syz [ 329.863562][ T10] usb 6-1: Manufacturer: syz [ 329.868799][ T10] usb 6-1: SerialNumber: syz [ 329.870665][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 329.880810][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.895638][ T24] usb 2-1: USB disconnect, device number 60 [ 330.356105][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 330.786612][ T10] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 330.795549][ T5600] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 330.815573][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 330.977322][ T5600] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 330.984137][ T5608] Bluetooth: hci6: command tx timeout [ 331.005141][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.028741][ T5600] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 331.038350][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.307094][ T46] usb 2-1: USB disconnect, device number 61 [ 331.689273][ T46] usb 6-1: USB disconnect, device number 18 [ 331.740803][ T46] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 332.082088][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.134777][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 332.177822][ T10] usb 5-1: USB disconnect, device number 58 [ 332.274112][ T24] usb 2-1: device descriptor read/64, error -71 [ 332.402541][ T9287] veth0_vlan: entered promiscuous mode [ 332.427886][ T9287] veth1_vlan: entered promiscuous mode [ 332.464075][ T9287] veth0_macvtap: entered promiscuous mode [ 332.481681][ T9287] veth1_macvtap: entered promiscuous mode [ 332.511477][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.524710][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 332.528348][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.596875][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.609139][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.614473][ T5697] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 332.636003][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.647980][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.666467][ T24] usb 2-1: device descriptor read/64, error -71 [ 332.681459][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.693691][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.718536][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.727034][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.785057][ T24] usb usb2-port1: attempt power cycle [ 332.796393][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 332.802024][ T5697] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 332.813101][ T5697] usb 6-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.826977][ T5697] usb 6-1: config 0 interface 0 has no altsetting 0 [ 332.833634][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.843930][ T5603] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 332.844985][ T5697] usb 6-1: config 0 descriptor?? [ 333.004773][ T5603] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 333.014123][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 333.022862][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.033238][ T5603] usb 5-1: config 0 descriptor?? [ 333.054165][ T5608] Bluetooth: hci6: command tx timeout [ 333.135638][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 333.164534][ T24] usb 2-1: device descriptor read/8, error -71 [ 333.164625][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.181094][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.189872][ T10] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 333.200785][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.209926][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 333.221158][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 333.234020][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.242070][ T10] usb 7-1: Product: syz [ 333.247215][ T10] usb 7-1: Manufacturer: syz [ 333.252790][ T5603] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 333.265163][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 333.268613][ T5697] usbhid 6-1:0.0: can't add hid device: -71 [ 333.274665][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 333.284625][ T5697] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 333.303053][ T10] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 333.307441][ T5697] usb 6-1: USB disconnect, device number 19 [ 333.317734][ T5603] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 333.327367][ T5603] [drm] Initialized udl on minor 1 [ 333.414007][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 333.434600][ T24] usb 2-1: device descriptor read/8, error -71 [ 333.466690][ T5603] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.480499][ T46] usb 7-1: USB disconnect, device number 2 [ 333.484545][ T5603] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 333.508851][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.519399][ T5603] usb 5-1: USB disconnect, device number 59 [ 333.539709][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 333.556965][ T24] usb usb2-port1: unable to enumerate USB device [ 333.953374][ T9393] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.118266][ T9396] syzkaller0: entered promiscuous mode [ 334.130533][ T9396] syzkaller0: entered allmulticast mode [ 334.444318][ T46] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 334.550278][ T29] audit: type=1400 audit(1787246985.736:410): avc: denied { write } for pid=9410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.614781][ T46] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 334.625813][ T46] usb 6-1: config 1 interface 0 has no altsetting 0 [ 334.638412][ T46] usb 6-1: string descriptor 0 read error: -22 [ 334.645107][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.653794][ T29] audit: type=1400 audit(1787246985.826:411): avc: denied { write } for pid=9422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.020901][ T4964] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 335.043128][ T4964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 335.050859][ T4964] loop0: [ 335.134051][ T5608] Bluetooth: hci6: command tx timeout [ 335.278060][ T46] usbhid 6-1:1.0: can't add hid device: -71 [ 335.293369][ T46] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 335.311272][ T46] usb 6-1: USB disconnect, device number 20 [ 335.694218][ T5732] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 335.884088][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 335.892512][ T5732] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 335.915066][ T5732] usb 2-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.933596][ T5732] usb 2-1: config 0 interface 0 has no altsetting 0 [ 335.942471][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.962982][ T5732] usb 2-1: config 0 descriptor?? [ 336.389867][ T46] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 336.410355][ T5732] usbhid 2-1:0.0: can't add hid device: -71 [ 336.416603][ T5732] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 336.431724][ T5732] usb 2-1: USB disconnect, device number 66 [ 336.559897][ T46] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.573706][ T46] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.583223][ T46] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 336.594411][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.603481][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 336.614803][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 336.628953][ T46] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.637526][ T46] usb 6-1: Product: syz [ 336.641730][ T46] usb 6-1: Manufacturer: syz [ 336.653308][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 336.669606][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 336.677181][ T46] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 336.862710][ T46] usb 6-1: USB disconnect, device number 21 [ 337.398018][ T9409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.416399][ T5259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.763995][ T5600] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 337.794686][ T46] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 337.936253][ T30] INFO: task kworker/0:2:980 blocked for more than 143 seconds. [ 337.940130][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 337.949318][ T30] Not tainted syzkaller #0 [ 337.949923][ T5600] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.956549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.965548][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.972873][ T46] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 337.984145][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.993882][ T30] task:kworker/0:2 state:D [ 338.002531][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.014261][ T30] stack:21624 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 338.022582][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.040770][ T46] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.055195][ T30] Workqueue: events_freezable mmc_rescan [ 338.077797][ T30] Call Trace: [ 338.087293][ T46] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.100171][ T30] [ 338.105722][ T5600] usb 5-1: config 0 descriptor?? [ 338.109042][ T30] __schedule+0x125c/0x6740 [ 338.131075][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 338.142255][ T46] usb 6-1: config 0 interface 0 has no altsetting 0 [ 338.145514][ T5603] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 338.155609][ T30] ? __pfx___schedule+0x10/0x10 [ 338.166339][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.176599][ T30] ? find_held_lock+0x2b/0x80 [ 338.182284][ T30] ? schedule+0x225/0x2c0 [ 338.197995][ T46] usb 6-1: config 0 descriptor?? [ 338.203037][ T30] schedule+0xdd/0x2c0 [ 338.219886][ T30] schedule_timeout+0x1b2/0x280 [ 338.234232][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 338.241168][ T30] ? mark_held_locks+0x40/0x70 [ 338.254515][ T30] __wait_for_common+0x2e7/0x4c0 [ 338.261949][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 338.268065][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 338.273620][ T30] mmc_wait_for_req_done+0xcd/0x3d0 [ 338.278925][ T30] mmc_wait_for_req+0x207/0x2c0 [ 338.283844][ T30] mmc_wait_for_cmd+0x154/0x200 [ 338.288708][ T30] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 338.295024][ T30] ? __pfx_mmc_wait_done+0x10/0x10 [ 338.300232][ T30] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 338.305700][ T30] mmc_send_io_op_cond+0x128/0x2f0 [ 338.310854][ T30] ? __pfx_mmc_send_io_op_cond+0x10/0x10 [ 338.316671][ T30] ? __pfx_usleep_range_state+0x10/0x10 [ 338.322247][ T30] mmc_attach_sdio+0xd0/0xec0 [ 338.327054][ T30] ? mmc_send_if_cond_pcie+0x20e/0x370 [ 338.332560][ T30] ? __pfx_mmc_send_if_cond_pcie+0x10/0x10 [ 338.338567][ T30] ? __pfx_mmc_go_idle+0x10/0x10 [ 338.343564][ T30] ? __pfx_mmc_attach_sdio+0x10/0x10 [ 338.348903][ T30] ? mmc_rescan+0xba1/0x11c0 [ 338.353528][ T30] mmc_rescan+0xd2b/0x11c0 [ 338.358033][ T30] process_one_work+0xa23/0x1940 [ 338.363027][ T30] ? __pfx_process_one_work+0x10/0x10 [ 338.368837][ T30] ? __pfx_mmc_rescan+0x10/0x10 [ 338.373884][ T30] worker_thread+0x5ef/0xe50 [ 338.379091][ T30] ? kthread+0x13a/0x450 [ 338.383372][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.388586][ T30] kthread+0x373/0x450 [ 338.392683][ T30] ? __pfx_kthread+0x10/0x10 [ 338.397601][ T30] ret_from_fork+0x730/0xd60 [ 338.402253][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 338.407597][ T30] ? __switch_to+0x800/0x10f0 [ 338.412354][ T30] ? __pfx_kthread+0x10/0x10 [ 338.417074][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.421897][ T30] [ 338.425624][ T30] INFO: task kworker/1:2:1210 blocked for more than 143 seconds. [ 338.433635][ T30] Not tainted syzkaller #0 [ 338.439176][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.448190][ T30] task:kworker/1:2 state:D stack:21384 pid:1210 tgid:1210 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 338.461369][ T30] Workqueue: usb_hub_wq hub_event [ 338.467183][ T30] Call Trace: [ 338.470523][ T30] [ 338.473475][ T30] __schedule+0x125c/0x6740 [ 338.478610][ T30] ? __pfx___schedule+0x10/0x10 [ 338.483517][ T30] ? find_held_lock+0x2b/0x80 [ 338.488677][ T30] ? schedule+0x225/0x2c0 [ 338.493084][ T30] schedule+0xdd/0x2c0 [ 338.497623][ T30] schedule_timeout+0x1b2/0x280 [ 338.502549][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 338.508436][ T30] ? mark_held_locks+0x40/0x70 [ 338.513287][ T30] __wait_for_common+0x2e7/0x4c0 [ 338.519129][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 338.524971][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 338.530488][ T30] ? find_held_lock+0x2b/0x80 [ 338.535606][ T30] ? __flush_work+0x928/0xcb0 [ 338.540368][ T30] ? __flush_work+0x928/0xcb0 [ 338.545517][ T30] ? __flush_work+0x4ca/0xcb0 [ 338.550264][ T30] __flush_work+0x7c7/0xcb0 [ 338.555261][ T30] ? __timer_delete+0xa1/0x1b0 [ 338.560064][ T30] ? __pfx___flush_work+0x10/0x10 [ 338.565575][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 338.571691][ T30] ? __pfx___might_resched+0x10/0x10 [ 338.579249][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 338.584675][ T30] ? usb_hcd_flush_endpoint+0x359/0x400 [ 338.590272][ T30] cancel_delayed_work_sync+0xd1/0xf0 [ 338.595842][ T30] mmc_stop_host+0xe9/0x400 [ 338.600398][ T30] mmc_remove_host+0x15/0x60 [ 338.605114][ T30] vub300_disconnect+0x12d/0x170 [ 338.610103][ T30] usb_unbind_interface+0x1dd/0x9e0 [ 338.615359][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 338.621098][ T30] device_remove+0x12a/0x180 [ 338.625858][ T30] device_release_driver_internal+0x44e/0x620 [ 338.631984][ T30] bus_remove_device+0x2bc/0x560 [ 338.637085][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 338.642582][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 338.648494][ T30] device_del+0x376/0x9b0 [ 338.652885][ T30] ? __pfx_device_del+0x10/0x10 [ 338.657874][ T30] ? kobject_put+0xb9/0x640 [ 338.662417][ T30] usb_disable_device+0x367/0x810 [ 338.667518][ T30] usb_disconnect+0x2e2/0x9a0 [ 338.672642][ T30] hub_event+0x1bb1/0x4420 [ 338.677220][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 338.682232][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 338.687603][ T30] ? __pfx_hub_event+0x10/0x10 [ 338.692442][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.698157][ T30] ? rcu_is_watching+0x13/0xc0 [ 338.702965][ T30] process_one_work+0xa23/0x1940 [ 338.708002][ T30] ? __pfx_process_one_work+0x10/0x10 [ 338.713414][ T30] ? __pfx_hub_event+0x10/0x10 [ 338.718356][ T30] worker_thread+0x5ef/0xe50 [ 338.723027][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.728273][ T30] ? kthread+0x13a/0x450 [ 338.732561][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.737988][ T30] kthread+0x373/0x450 [ 338.742122][ T30] ? __pfx_kthread+0x10/0x10 [ 338.747266][ T30] ret_from_fork+0x730/0xd60 [ 338.752010][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 338.757437][ T30] ? __switch_to+0x800/0x10f0 [ 338.762209][ T30] ? __pfx_kthread+0x10/0x10 [ 338.766981][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.771812][ T30] [ 338.791239][ T30] [ 338.791239][ T30] Showing all locks held in the system: [ 338.822285][ T30] locks held by khungtaskd/30: 1, last CPU#0: [ 338.855002][ T30] #0: ffffffff8ede9480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 338.881598][ T30] locks held by kworker/1:1/46: 5, on CPU#1: [ 338.903891][ T30] #0: ffff888023e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 338.946037][ T30] #1: ffffc90000b77d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 338.984476][ T30] #2: ffff88802b9791d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 339.004195][ T30] #3: ffff888023b091d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 339.024229][ T30] #4: ffff88802b8a9e60 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x23d/0x1c60 [ 339.045837][ T30] locks held by kworker/0:2/980: 2, on CPU#0: [ 339.065081][ T30] #0: ffff88801c04a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 339.094120][ T30] #1: ffffc90004df7d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 339.111781][ T30] locks held by kworker/1:2/1210: 5, on CPU#1: [ 339.118524][ T30] #0: ffff888023e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 339.130245][ T30] #1: ffffc90005537d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 339.154011][ T30] #2: ffff88802b85f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 339.163261][ T30] #3: ffff88807a7fc1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 339.173570][ T30] #4: ffff8880272ad1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 339.184891][ T30] locks held by getty/5357: 2, on CPU#1: [ 339.190610][ T30] #0: ffff888036cb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 339.200631][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 339.211000][ T30] locks held by syz-executor/5593: 2, on CPU#0: [ 339.217701][ T30] #0: ffff888052ab00e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 339.228904][ T30] #1: ffffffff8f275060 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 339.238630][ T30] locks held by kworker/0:4/5600: 5, on CPU#0: [ 339.244917][ T30] #0: ffff888023e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 339.255829][ T30] #1: ffffc900035f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 339.267215][ T30] #2: ffff8880270fd1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 339.276258][ T30] #3: ffff8880771011d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 339.286119][ T30] #4: ffff888050ee41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 339.295501][ T30] locks held by kworker/0:5/5603: 5, on CPU#0: [ 339.301668][ T30] #0: ffff888023e88d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 339.312647][ T30] #1: ffffc90003607d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 339.324146][ T30] #2: ffff88802b8131d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 339.333095][ T30] #3: ffff88802b810568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 339.343119][ T30] #4: ffff88802b795360 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 339.352930][ T30] locks held by syz.2.866/8371: 3, on CPU#1: [ 339.359009][ T30] #0: ffff88802b6475f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 339.368162][ T30] #1: ffff888050d6e460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 339.377424][ T30] #2: ffffffff8f275060 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 339.386327][ T30] locks held by syz.3.1202/9434: 1, on CPU#1: [ 339.392870][ T30] #0: ffff888027328ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 339.402572][ T30] locks held by syz.4.1208/9449: 1, on CPU#1: [ 339.408705][ T30] #0: ffff888030678ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 339.418344][ T30] locks held by syz.6.1207/9452: 3, on CPU#1: [ 339.424586][ T30] #0: ffff888079124ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 339.434404][ T30] #1: ffff8880791240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 339.444194][ T30] #2: ffffffff8edf4f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 339.454287][ T30] locks held by syz.5.1209/9453: 2, on CPU#0: [ 339.460374][ T30] #0: ffff888077f9cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 339.470041][ T30] #1: ffffffff8edf4f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 339.480112][ T30] locks held by syz.1.1210/9455: 1, on CPU#0: [ 339.486237][ T30] #0: ffff88802c534ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 339.496492][ T30] [ 339.498894][ T30] ============================================= [ 339.498894][ T30] [ 339.507533][ T30] NMI backtrace for cpu 0 [ 339.507551][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 339.507570][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 339.507584][ T30] Call Trace: [ 339.507590][ T30] [ 339.507596][ T30] dump_stack_lvl+0x100/0x190 [ 339.507623][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 339.507643][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.507671][ T30] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 339.507693][ T30] sys_info+0x141/0x190 [ 339.507707][ T30] watchdog+0xcb1/0x1030 [ 339.507733][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 339.507753][ T30] ? __pfx_watchdog+0x10/0x10 [ 339.507773][ T30] ? __kthread_parkme+0x18f/0x230 [ 339.507798][ T30] ? kthread+0x13a/0x450 [ 339.507812][ T30] ? __pfx_watchdog+0x10/0x10 [ 339.507834][ T30] kthread+0x373/0x450 [ 339.507848][ T30] ? __pfx_kthread+0x10/0x10 [ 339.507864][ T30] ret_from_fork+0x730/0xd60 [ 339.507887][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 339.507909][ T30] ? __switch_to+0x800/0x10f0 [ 339.507926][ T30] ? __pfx_kthread+0x10/0x10 [ 339.507942][ T30] ret_from_fork_asm+0x1a/0x30 [ 339.507973][ T30] [ 339.508002][ T30] Sending NMI from CPU 0 to CPUs 1: [ 339.634429][ C1] NMI backtrace for cpu 1 [ 339.634445][ C1] CPU: 1 UID: 0 PID: 5906 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 339.634464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 339.634473][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 339.634503][ C1] RIP: 0010:unwind_get_return_address+0x7a/0xa0 [ 339.634526][ C1] Code: 48 8b 7b 48 e8 67 d4 18 00 85 c0 74 cf 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 75 1c 48 8b 43 48 5b 5d 01 d6 0a 0a e8 2c d1 c2 00 eb a0 48 89 ef e8 52 d1 c2 00 eb c0 [ 339.634538][ C1] RSP: 0018:ffffc9000436f690 EFLAGS: 00000246 [ 339.634550][ C1] RAX: ffffffff8175cb0a RBX: ffffc9000436f698 RCX: ffffc9000436f5ec [ 339.634559][ C1] RDX: 1ffff9200086dedc RSI: ffffffff8e38aca9 RDI: ffffffff8175cb0a [ 339.634567][ C1] RBP: ffffc9000436f728 R08: 0000000000000001 R09: 0000000000000007 [ 339.634576][ C1] R10: 0000000000000200 R11: 000000000000ae23 R12: ffffffff81f4b450 [ 339.634584][ C1] R13: ffffc9000436f758 R14: 0000000000000000 R15: ffff8880301f2580 [ 339.634593][ C1] FS: 0000000000000000(0000) GS:ffff888123cc6000(0000) knlGS:0000000000000000 [ 339.634607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.634616][ C1] CR2: 00007ffd6b2e9ffc CR3: 000000000eb94000 CR4: 00000000003526f0 [ 339.634625][ C1] Call Trace: [ 339.634629][ C1] [ 339.634635][ C1] arch_stack_walk+0xa6/0xf0 [ 339.634660][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 339.634683][ C1] stack_trace_save+0x8e/0xc0 [ 339.634699][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 339.634715][ C1] ? stack_trace_save+0x8e/0xc0 [ 339.634728][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 339.634743][ C1] kasan_save_stack+0x30/0x50 [ 339.634762][ C1] ? kasan_save_stack+0x30/0x50 [ 339.634781][ C1] ? kasan_save_track+0x14/0x30 [ 339.634798][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 339.634814][ C1] ? __kmalloc_node_track_caller_noprof+0x333/0x830 [ 339.634834][ C1] ? kmalloc_reserve+0xe8/0x350 [ 339.634851][ C1] ? __alloc_skb+0x185/0x710 [ 339.634869][ C1] ? nsim_dev_trap_report_work+0x2af/0xd20 [ 339.634885][ C1] ? process_one_work+0xa23/0x1940 [ 339.634901][ C1] ? worker_thread+0x5ef/0xe50 [ 339.634918][ C1] ? kthread+0x373/0x450 [ 339.634939][ C1] ? ret_from_fork+0x730/0xd60 [ 339.634970][ C1] kasan_save_track+0x14/0x30 [ 339.634988][ C1] __kasan_kmalloc+0xaa/0xb0 [ 339.635009][ C1] __kmalloc_node_track_caller_noprof+0x333/0x830 [ 339.635027][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 339.635045][ C1] ? __alloc_skb+0x185/0x710 [ 339.635067][ C1] kmalloc_reserve+0xe8/0x350 [ 339.635083][ C1] __alloc_skb+0x185/0x710 [ 339.635100][ C1] ? __alloc_skb+0x5b7/0x710 [ 339.635117][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 339.635136][ C1] ? kfree_skbmem+0x19f/0x210 [ 339.635152][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 339.635171][ C1] process_one_work+0xa23/0x1940 [ 339.635192][ C1] ? __pfx_process_one_work+0x10/0x10 [ 339.635210][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 339.635226][ C1] worker_thread+0x5ef/0xe50 [ 339.635243][ C1] ? __pfx_worker_thread+0x10/0x10 [ 339.635258][ C1] ? kthread+0x13a/0x450 [ 339.635270][ C1] ? __pfx_worker_thread+0x10/0x10 [ 339.635284][ C1] kthread+0x373/0x450 [ 339.635297][ C1] ? __pfx_kthread+0x10/0x10 [ 339.635311][ C1] ret_from_fork+0x730/0xd60 [ 339.635332][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 339.635351][ C1] ? __switch_to+0x800/0x10f0 [ 339.635366][ C1] ? __pfx_kthread+0x10/0x10 [ 339.635380][ C1] ret_from_fork_asm+0x1a/0x30 [ 339.635402][ C1] [ 339.993267][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 340.000191][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.009409][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 340.019480][ T30] Call Trace: [ 340.022770][ T30] [ 340.025693][ T30] dump_stack_lvl+0x100/0x190 [ 340.030451][ T30] vpanic+0x553/0x970 [ 340.034422][ T30] ? __pfx_vpanic+0x10/0x10 [ 340.038914][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 340.045062][ T30] panic+0xd1/0xe0 [ 340.048773][ T30] ? __pfx_panic+0x10/0x10 [ 340.053193][ T30] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 340.059336][ T30] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 340.065473][ T30] ? watchdog.cold+0x1ec/0x234 [ 340.070224][ T30] watchdog.cold+0x1fd/0x234 [ 340.074801][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 340.080591][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.085259][ T30] ? __kthread_parkme+0x18f/0x230 [ 340.090457][ T30] ? kthread+0x13a/0x450 [ 340.094689][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.099386][ T30] kthread+0x373/0x450 [ 340.103445][ T30] ? __pfx_kthread+0x10/0x10 [ 340.108025][ T30] ret_from_fork+0x730/0xd60 [ 340.112639][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 340.117747][ T30] ? __switch_to+0x800/0x10f0 [ 340.122436][ T30] ? __pfx_kthread+0x10/0x10 [ 340.127030][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.131808][ T30] [ 340.135035][ T30] Kernel Offset: disabled [ 340.139352][ T30] Rebooting in 86400 seconds..