last executing test programs: 5.922086985s ago: executing program 3 (id=1407): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x2, 0x1, 0x40, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0xb28, 0x80000004000080, 0x0, 0x8, 0x80, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000080)={0x4, [0xd3, 0x7fff, 0x1, 0x400, 0x3, 0x4, 0x81a7, 0x400, 0x9, 0x8ca8, 0x3, 0x2, 0x8, 0x8fb, 0xd43, 0xf001, 0x1ff, 0x9, 0x3, 0x5, 0x3, 0x7, 0xc5, 0x2, 0x6, 0x32c, 0xff80, 0x1, 0x7, 0x10, 0x3, 0x2, 0xe, 0x8, 0x3, 0x3, 0x400, 0x5, 0x2, 0x0, 0x0, 0x300, 0xbdd6, 0x1, 0x7fff, 0x9, 0x7, 0x7], 0x6}) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x450400) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x7014}, {r0, 0x2000}, {0xffffffffffffffff, 0x2510}, {r5, 0x91e676409febcd2c}], 0x4, 0x0, 0x0, 0x0) 4.802820011s ago: executing program 3 (id=1409): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000000)=0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/222) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000000)=0x1) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) (async) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/222) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) 3.330879926s ago: executing program 3 (id=1427): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) futex(&(0x7f0000000000)=0x2, 0x7, 0x1, 0x0, 0x0, 0x1) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="64d9839990c9f15e7d77bd552e62be6e6f07c2009edb2ace2683e09fc922aa985c7baa7f0ad51905a800535a1430c7abce8e38a87e1e5a70494e439af451d3391af76be22541", 0x46}, {&(0x7f0000000a00)="d882be4c044228a3017fc10f99bfb38d269fb5ee34e6b8bdc7b3e98228f26947a654109d5b560d606fbbbee36c303d5677239115f4aa896b4e45aa8bc442bfaadd473a725e", 0x45}, {&(0x7f0000000a80)="aec1bc21e1c885ac05d7e732a683044bd4c746651d3146938b36f7e74c1de8497ea77728ddafe32373b49b9dc91d16d1b89de762837d8cc868616d6d004af4c6a0bd54da98ec7b563a331583a85963d29ea6dfdbc488649a053d6c9588135a6dc99c50e86c7a15bad0672565affc790d3414585021282e15ed38ec77cfa559b2bb603586bb3bf5752a507a06c6c31b2b9f129c5810b9cb1105b6862a69f23eb447411a50149437db78c51ec1d73e92b69f503da1ceaaf8f525e25de17eae459fdec70a0eae60d9cb5d1e2c6c3a8a25a77082169d1121ff19c81bc0", 0xdb}, {&(0x7f0000000b80)="b72604da22a9e02c94c78bc9a6f33e57f90ca689da5a764094903f4af72038649d2fc125eed53a0140de8b668f8b643e47e4e20dce9b42704d555fc9f3d4b5c914ddb558c2c8ed49141d116102e6043f50360cf80b1b1b2e03", 0x59}], 0x4}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x2, 0x56d, &(0x7f0000000880)=ANY=[], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000340)={0x0, 0x1, 0x8, 0x17, 0x200, &(0x7f0000019900)="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"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) syz_usb_connect$midi(0x1, 0x6b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1032, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x5, 0x10, 0x5a, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfc, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xc24, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x8}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x3, 0x1, [{0x4, 0x2}], 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xe0, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x4, 0x8}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x1, 0x9, {0x9, 0x25, 0x1, 0x5, "f8081cc503"}}}]}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0xb6, 0x8, 0x40, 0xc}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0xa, [{0xf7, &(0x7f0000000c80)=@string={0xf7, 0x3, "7469b0731b488fc8fa10031851607b87779c9313cdbdb6c2c3da4801eca0a744610f552dc698014bfe23f6da58e2746af04f002e4317160d20c71e5f36671131dce839481fde137d8706a99905d724a00e79e65469b4aaf909dcb7d4f80c8211da49635cb6099b2f76cb6601353aa15b420437c5131e237758d4ff0dde5188b24d8e2aa9f92d6a7020f1c8e04882fa68e4e2f743b532d183e4f8c2e5d4951be6ddd7bae92588454f07f9b4e689e2d3d93f48f3727e949ba44b2ff18f47196049b293ce8ce14863a31d675bf6fd73f515b728ba6d87db909fdaebbb5691bb7221ff5d3c12a0bff2cadb774b58857a2fd90ed39585a5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x404}}, {0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "b07d492cd4018e1bd01849ce2d77ee910a953067ae298b854e20b4aa12e7ce73a32384056d483162964eedbdd2bce83d8fe38690ecfa27e449eeaa25fda675f37b9c4aded6da958d167894badfc554b3008e368df709f9b3e816866bf656d80ccabaf559bb33bf509f9e7dc5d9d65e49a6e38953604183538ae65076720ae73ee75628d13c2f1d5459c6f23b1852459b0c17e564297e698ab6f55ca0464eba2266c80270f53685f04b5b0053a36193d386c524786244f88da07c3739b753f622673cb065487ccc4de68e1bfa4cc88a3e09d36c39ae448070a3661943c8daad0348719cc450f19a0197139bff625218e5a470f4"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0xbf, &(0x7f00000003c0)=@string={0xbf, 0x3, "7573aea94b3c45e69524549a527540ee2a26cccf813fb31b34971259c52e2b65d550d12ee500fed7cc94ec8bdea765aa299568df2c4e18cbd99f3b88cecf0e6b46cf2bc9f2490927662151fc5ed23c525094920bd639abdc94405ed5317d285fd44fd96b3c0fd8ddb19e29cbd708e3aed92192a5977c5beb00a1b84a07a6f5862c0db0336d3693cb42f2e8d8a4298d369d5eeabc6000e97117f84c61e3b83e1390d8b9df456402b62075c39a2ea3948400a134a13076cba65358fb2528"}}, {0xe9, &(0x7f0000000480)=@string={0xe9, 0x3, "8e1f328a68e52cf856ae1b75a6597ed9afaed5b36ce770392b04a9e8d0c906d6045b99c5c5a4003028efbadbf307686a23e3f8476d5b4d57e5bc944b7b1bc12248eea0baf8fb38dfab79876e835ab4b080eafa662bae6990f8166d69cfbc264c3149a5e2dac6015195b6a4b7d1c851603ac26babd9be6387cde2ffa4275bcb8d0fbb06671ed5c02ac6d45eb9473ee9b71180ea2443331d434ecd9e437b64d40112db38ab3b39f76559a7a45ef516f1dee50ad2ea39636300bfdd75eaf0b1217d4516aa04c58c4e97efa608da63ddc3bcf036c35930bbb08be092fea1d0022918fa359b36da7fff"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40e}}, {0xe0, &(0x7f00000005c0)=@string={0xe0, 0x3, "6d3c6dfc69088c4a0524fa6d90ca5b2afbeba98af6f2f678eb021b4441ac39187393cbec39b6dfa6258d7f8e98662fd88012e3893bca001e3fc23a156413ede9bfc3432e2fb625848f002aae29ce332553ee7ef24b98b2e61038ad0fef48e86c6702fff088d85be3b23fc17a7c1cec315042e3f7fc501e1311b93259fa2f209e8353265a36a4b8affa6c917ecc9ad1d787bb9d73c0fb9b68e261f640406ffd036c5687b1ec2a720317acd8bdb197615cbc2f0ad95772dea142de32a58aa0d0931bebc670d009bf1ed6d0c4ca66c20dca0bd1c105f8508b9d85db941a468a"}}, {0xa9, &(0x7f00000006c0)=@string={0xa9, 0x3, "9f2b891fbe751745aaadee85e37fcd8197dc01883f653bf42097bc24d06e46136fbf5d03a25e442251e2a0fba3ff451a1e9b92d46452e8d2d48e226ff2a656d7a92baf3dfe1fe0884851f1dfa74e065f0dde218e84cfb3c41cec832290d86a83fa82882be3d67dd6cbee1df3324ec27963a4f351532824852a4f5e70639b1f94d14b47beda2bf530b2657e681af6d0e82be8de877758599940532ccbc1e4bc2a53302854c8fce1"}}, {0x2d, &(0x7f0000000780)=@string={0x2d, 0x3, "ba6348f8268a5f94728aed74fae9f07dca1ff416eacaa6b830b45e7db862885e9dbe6452bf9198a4fa729b"}}]}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 3.143619825s ago: executing program 0 (id=1431): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) (async) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0x2d, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff5f, 0x0}}], 0x1, 0x20004020) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000006c0)={0x0, 0x401, 0xffffffffffffd301}) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000ac0)={{r3}, r5, 0x12, @inherit={0x80, &(0x7f00000001c0)={0x0, 0x7, 0x33f9, 0x3, {0x4, 0x437, 0x80000001, 0x6, 0x2}, [0xd, 0x6, 0x2003, 0xfffffffffffffff9, 0x7, 0x3ff, 0xa]}}, @devid=r6}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0}) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 2.950665827s ago: executing program 2 (id=1435): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async, rerun: 32) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async, rerun: 32) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) (async, rerun: 64) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x28, 0x22, 0x0, 0x2, 0x8, 0x63, 0x5, 0x2, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000580)={0x5}) (rerun: 64) 2.883952582s ago: executing program 2 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=@can={{0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "d9384b3acc9975a7"}, 0x10}, 0x1, 0x0, 0x0, 0x4081}, 0x20004105) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000580)="a6b155e6ca6fa20fc0a9a96650f800b8c92fb02574b691f8199657f904d5f5257bac5d0ad676d22d4ea5eaa362ec10ce9660657aea4839f810085eab759d498f05f91df29b6f4924ebbd227398c69ba0d1f4c72883e0b15981f65f7aa69033ecd25aa84b35f64bad7e05d0e553c93100be1970247537266bdcfae4ce613a03c55b", 0x81}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f00000000c0)="6200bd750a5c010000b4306954e3d86c2c6b6c8aa35a8a6efaffd2961e60aacb483a94095d7dcd6f0b0a41aa34b7996568bd526ff4175dbacab41baae21b920000cfa5d3169ef4e358a6e719b8c6bbc3f7850e5744de00", 0x57}, {&(0x7f0000000240)="9584a638a01fc8d0185294a98714e9235bf7f496bc0757cd1fb6e842436c770a7c217084cc87afcd4730dc7ec0c4141051360d996249e7ed26d8c5ea4993c96f0dfd94150a582cc8d6a62c5980aab20560232081cf36cd06dcc747f1bca16d", 0x5f}, {&(0x7f00000002c0)="e860d63ecabdcb171bf01af1e00f69313e6a02a55064712edece4661997b85934c19dbedd5a203a32441569d78a04e384059a3fd31d321eefc12ba85de3b", 0x3e}, {&(0x7f0000000300)="a889ddcf00256fc15784d04ca15745007a1c87f4bd0c3b64027f3f83b786b469ecb366d2a098cb052678dde89bd494098fbc24853f4832dc0561", 0x3a}, {&(0x7f00000003c0)="93a3768dcd5d78a8508c06867377f9b977d670ae4d3fc6153dd3e07cdd434b906a422f039ce93d951dfa8c2da87a7c401d903e122433290a69b4f46e17e2cc6dcb95c1fcf345376832b31c9c8f5bc536514c4eccf3705fdfda95cfce556773d72f6c4e071d2d8526d4f79c081bd21a597bdd4150a0eacf9d271278150dc3cf6a16772c5b", 0x84}, {&(0x7f0000000640)="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", 0xd7c}], 0x8) 2.809906415s ago: executing program 2 (id=1437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x5, 0x80000, 0x7fffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000fcdc0f4ed4c53022ec0c575afe450e1a4f1897a5cbd583540169c98c2280eb4342e8afebfa05b2ab50090ab5c4f0c96084a63ce1a37046fad19868cd74f4d2e487bc968f9af68c1b17901335842fb86f6f345c598ecbf1f977ba2cd80631de8492b224bbbeed166e21a519c9b194be82b1432dba4a8da07c7d75ec87f8991f3841d94b641305cca27a4e1ccbeb8ff7096ff618a99144073b1ebe3e93af3022f18e1474bb159ddef75aa2041f4965da168813d40423beed36f76f3b4cbc2b4ac92b9a"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20100c00}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000094}, 0x2000c011) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600020008000300", @ANYRES32=r12, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4ffffff) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) 2.809107284s ago: executing program 2 (id=1438): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000d67000/0x4000)=nil) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x2800000000]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000680)={&(0x7f00000005c0)=[0x0, 0x0, r7, 0x0], 0x4, r8, r11, 0x8, 0x2, 0xb1a4, 0xf9ab, {0x2, 0x960c, 0x5, 0x6, 0x0, 0x10, 0x3, 0xffff, 0x1, 0x4, 0x3, 0x0, 0x42, 0x4, "8bd55aedfd4d455b99238028781f65e034067affecc08e7d11769a5c080a6bab"}}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.787463258s ago: executing program 0 (id=1439): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x4, 0xc984}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/52, 0x34}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x2001) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000300)) syz_open_dev$sndctrl(&(0x7f0000001300), 0x182, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x182, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000001340)) recvmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)=""/119, 0x77}], 0x1, &(0x7f0000001440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/125, 0x7d}, {&(0x7f0000001640)=""/239, 0xef}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000001940)=""/28, 0x1c}], 0x5, &(0x7f0000001a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001ac0)=""/252, 0xfc}, {&(0x7f0000001bc0)=""/151, 0x97}, {&(0x7f0000001c80)=""/200, 0xc8}, {&(0x7f0000001d80)=""/169, 0xa9}], 0x4, &(0x7f0000001e80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x3, 0x41, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000002080), &(0x7f0000002100)=0x68) writev(r9, &(0x7f0000002440)=[{&(0x7f0000002140)="30f4bdeb8350ad0318a5c905d629fca8787ba31efed1ebbc9ca4133fd8c96827ff527266b480e1f53a83b482e9704300e744c45261e0c6a912a3d1847a154d9767239e1963832e99cffb5993c470ec2fb0a1a6e1aa2f9ede09867cde950d49d6b65ed10d635920cd684c61f08612493854898f74add6843815bd090e3878d251c0ef6620a9923a86a8d508e80e652c2cd26c495e54331fc4101838cce92e9b6598045ac75c12f77be74f0d3dc170c3012e5e431af11ae80e38af38f47ce0f32328", 0xc1}, {&(0x7f0000002240)="220cf2f2e97b02be4554f8458957292b9c0a895e9665dfa364441cffddcdc488f20fa321eec34d0002e19efba5d00ce31f649b891bf34b6163d8c44903bd", 0x3e}, {&(0x7f0000002280)="c78b6c12c125852daffa77d52f34015d96173f4b36978a4bce4e94b4c00286d47a9a2eafe379aea47248f7bd6201c019b4d0c84359ad2bb137ee1f0df1ecdc7515c2ebe939b78161f05fa0a4cd3657e4aab9c7b95fc698d632899fb89b5b0d91e153899602e738bd00853aff6d727c4926c1ce1821df54c61be193a5d85f95a082fe6dadc75951adeacd5eb6ba942407d6ce59807b69a71a549238c506f0a2d2faa4ecea2c6d64ae1ea299ad2b05af", 0xaf}, {&(0x7f0000002340)="538e2c9290eea023ccc20150ffda217e72ad60f2954e4297031361c22f69d922dc55aba9a45aacc643f11dd47caeb515e95018dd15f912f03a0fc304952e6a4eabd67bde48407f74e2ea4bbb0b04405bc65438e7d58f32f500fbc9587303637c88fd4a582605f569af20f24b054e290991a9698dfdeb20e564bbf6373bde4ac79e4512f0e7ad858630bd01cb0c49c150c08fa16f9874522c0a1acda6ba18952b99a41ba7530486b2909561b9baa792aed26d83649dc1d3da011a5bba5adf7d9eef2ea942bf012627848c71d326fd2b1bfb51cca3c9c50a1cc8", 0xd9}], 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) read$FUSE(r8, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r10, &(0x7f0000004500)={0x10, 0xffffffffffffffda, r11}, 0x10) (async) write$FUSE_INTERRUPT(r10, &(0x7f0000004500)={0x10, 0xffffffffffffffda, r11}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000004540)={0x1}, 0x4) mount(&(0x7f0000004580)=@sr0, &(0x7f00000045c0)='./file0\x00', &(0x7f0000004600)='cifs\x00', 0x2, 0x0) r12 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r12, 0x80047453, &(0x7f0000004640)) (async) ioctl$PPPIOCGMRU(r12, 0x80047453, &(0x7f0000004640)) mount(&(0x7f0000004680)=@loop={'/dev/loop', 0x0}, &(0x7f00000046c0)='./file0\x00', &(0x7f0000004700)='befs\x00', 0x8, &(0x7f0000004740)='/dev/input/mice\x00') (async) mount(&(0x7f0000004680)=@loop={'/dev/loop', 0x0}, &(0x7f00000046c0)='./file0\x00', &(0x7f0000004700)='befs\x00', 0x8, &(0x7f0000004740)='/dev/input/mice\x00') mount(&(0x7f0000004780)=@loop={'/dev/loop', 0x0}, &(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)='proc\x00', 0x810, 0x0) (async) mount(&(0x7f0000004780)=@loop={'/dev/loop', 0x0}, &(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)='proc\x00', 0x810, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x8) (async) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x8) r13 = openat$incfs(r4, &(0x7f0000004840)='.log\x00', 0x10000, 0x40) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000004880)={0x8, 0x0, [{0xbd2, 0x0, 0xcb2e}, {0xa1f, 0x0, 0x2}, {0x297, 0x0, 0x3}, {0xad7}, {0xbef, 0x0, 0x7}, {0x34f, 0x0, 0x5}, {0x48b}, {0xc0000103, 0x0, 0x68d217eb}]}) syz_usb_connect$uac3(0x5, 0xe0, &(0x7f0000004940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x0, 0x50, 0x9, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40, 0xa0000000}, [@selector_unit={0x9, 0x24, 0xc, 0x80, 0x4, "e0461b06"}, @multiply_unit={0xb, 0x24, 0xd, 0x8, 0x3, 0xf008, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x2, 0xfff, 0x5, 0x4}, @cluster_info_segment={0x6, 0x20, 0x4, 0x89, 0x40}, @power_domain={0x9, 0x24, 0x10, 0x6, 0x80, 0x0, 0xf9}, @mixer_unit={0x7, 0x24, 0x5, 0x1, 0x2, "d5e9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x8, 0x2, 0x5, 0x4d, 0x0, 0x1ff, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x8, 0x1, {0xa, 0x25, 0x25, 0x5, 0xfe, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x3, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x4, 0x7f, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0x3, 0x81, {0xa, 0x25, 0x25, 0x7c, 0x54, 0xb42}}}}}}}}]}}, &(0x7f0000004ec0)={0xa, &(0x7f0000004a40)={0xa, 0x6, 0x250, 0x0, 0x3, 0x40, 0xff, 0xf}, 0x19, &(0x7f0000004a80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x80, 0xf, 0x8, [0x3f30, 0xff00]}]}, 0x8, [{0xe, &(0x7f0000004ac0)=@string={0xe, 0x3, "97bdd579d02726ebe09457f3"}}, {0xe, &(0x7f0000004b00)=@string={0xe, 0x3, "6afad57960222bd1fe65155b"}}, {0x4, &(0x7f0000004b40)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x3c, &(0x7f0000004b80)=@string={0x3c, 0x3, "2f0091506aa3065fb46999f4df89c6fa480470874402f013a6a30523a34246537a8573b65852ece57aa4cb9d0a60f997425e039707a6435d8773"}}, {0xcc, &(0x7f0000004bc0)=@string={0xcc, 0x3, "383f2cc0d1c71f03330017faebd2c3131d4b3c6ebc11254520c965de7a2864d3a369e7d16fdb4de90d11634b98856bc7a1091a41295b4abe167b08692f1b4c95cec332a586562237b3be13b94a9e24a7bcdc2b6e2d3aa9bf5ccebdce8402b8d3ba6ab4886a277757bccd048fa1703aeba28f269ba862db9dab97a5dc7d3110d86c329317bb82aa0a1b84b703818af3301194b59f1055724baac2799344db27cb547c9e324d3080c9c9a26fc4b09d763f50ed33b59b93217028368600c61f399e3574558b4d4ca5b29cc4"}}, {0xad, &(0x7f0000004cc0)=@string={0xad, 0x3, "f0c71dbc75dca4f49babe532708f2f6592044a9eb31da3768c76451f99ddb9b4b83d6f8985bb61c6289681575c377ab5c8d70c983bdd0e969d6ee0da57a8169f72002e38c7dfb177928cb0527b23ca9d121e6499aed270b6e176ba434f5f373b0200ec96c9ab6075470663e8f816e513339655240adfd89502777d5a7369e98e514d67c5f525c18a8b9a8fe446ce2b9ee976da268a8c2762f3e4631d66565ddefad3e8e382a8a30a17a3d3"}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4, 0x3, 0x4}}, {0xd1, &(0x7f0000004dc0)=@string={0xd1, 0x3, "2052daadbdbf4ab83b752b99421b1c229d84c649a65f634f0be82e0b032b43cd02cff29b23ce8248fda5adbb5907ee485c6fd14ea1026b51b25bb4733ac54fcca190cabf63d6c426ba207ce9df5817a705b1c188a535a0c61b4254dfbf85d899fe93a5ffaa500dff50b886120931c6b7a974768a310e97b0719cf61e1c78f0f03aa2758b42382ec40cdc74acf8f39c1f59443aea83645e3959301b1b98ec65bb1417a926d919ac9e1f5ab4b9d28a60e75583da7d4953671b3d61b9c734ebde8dc4b4f0742c2d98820e77e03c45d504"}}]}) (async) r14 = syz_usb_connect$uac3(0x5, 0xe0, &(0x7f0000004940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x0, 0x50, 0x9, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40, 0xa0000000}, [@selector_unit={0x9, 0x24, 0xc, 0x80, 0x4, "e0461b06"}, @multiply_unit={0xb, 0x24, 0xd, 0x8, 0x3, 0xf008, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x2, 0xfff, 0x5, 0x4}, @cluster_info_segment={0x6, 0x20, 0x4, 0x89, 0x40}, @power_domain={0x9, 0x24, 0x10, 0x6, 0x80, 0x0, 0xf9}, @mixer_unit={0x7, 0x24, 0x5, 0x1, 0x2, "d5e9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x8, 0x2, 0x5, 0x4d, 0x0, 0x1ff, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x8, 0x1, {0xa, 0x25, 0x25, 0x5, 0xfe, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x3, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x4, 0x7f, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0x3, 0x81, {0xa, 0x25, 0x25, 0x7c, 0x54, 0xb42}}}}}}}}]}}, &(0x7f0000004ec0)={0xa, &(0x7f0000004a40)={0xa, 0x6, 0x250, 0x0, 0x3, 0x40, 0xff, 0xf}, 0x19, &(0x7f0000004a80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x80, 0xf, 0x8, [0x3f30, 0xff00]}]}, 0x8, [{0xe, &(0x7f0000004ac0)=@string={0xe, 0x3, "97bdd579d02726ebe09457f3"}}, {0xe, &(0x7f0000004b00)=@string={0xe, 0x3, "6afad57960222bd1fe65155b"}}, {0x4, &(0x7f0000004b40)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x3c, &(0x7f0000004b80)=@string={0x3c, 0x3, "2f0091506aa3065fb46999f4df89c6fa480470874402f013a6a30523a34246537a8573b65852ece57aa4cb9d0a60f997425e039707a6435d8773"}}, {0xcc, &(0x7f0000004bc0)=@string={0xcc, 0x3, "383f2cc0d1c71f03330017faebd2c3131d4b3c6ebc11254520c965de7a2864d3a369e7d16fdb4de90d11634b98856bc7a1091a41295b4abe167b08692f1b4c95cec332a586562237b3be13b94a9e24a7bcdc2b6e2d3aa9bf5ccebdce8402b8d3ba6ab4886a277757bccd048fa1703aeba28f269ba862db9dab97a5dc7d3110d86c329317bb82aa0a1b84b703818af3301194b59f1055724baac2799344db27cb547c9e324d3080c9c9a26fc4b09d763f50ed33b59b93217028368600c61f399e3574558b4d4ca5b29cc4"}}, {0xad, &(0x7f0000004cc0)=@string={0xad, 0x3, "f0c71dbc75dca4f49babe532708f2f6592044a9eb31da3768c76451f99ddb9b4b83d6f8985bb61c6289681575c377ab5c8d70c983bdd0e969d6ee0da57a8169f72002e38c7dfb177928cb0527b23ca9d121e6499aed270b6e176ba434f5f373b0200ec96c9ab6075470663e8f816e513339655240adfd89502777d5a7369e98e514d67c5f525c18a8b9a8fe446ce2b9ee976da268a8c2762f3e4631d66565ddefad3e8e382a8a30a17a3d3"}}, {0x4, &(0x7f0000004d80)=@lang_id={0x4, 0x3, 0x4}}, {0xd1, &(0x7f0000004dc0)=@string={0xd1, 0x3, "2052daadbdbf4ab83b752b99421b1c229d84c649a65f634f0be82e0b032b43cd02cff29b23ce8248fda5adbb5907ee485c6fd14ea1026b51b25bb4733ac54fcca190cabf63d6c426ba207ce9df5817a705b1c188a535a0c61b4254dfbf85d899fe93a5ffaa500dff50b886120931c6b7a974768a310e97b0719cf61e1c78f0f03aa2758b42382ec40cdc74acf8f39c1f59443aea83645e3959301b1b98ec65bb1417a926d919ac9e1f5ab4b9d28a60e75583da7d4953671b3d61b9c734ebde8dc4b4f0742c2d98820e77e03c45d504"}}]}) syz_usb_disconnect(r14) pwritev2(r3, &(0x7f0000005100)=[{&(0x7f0000004f40)="de32a1efb207c21794469e4ca713adc9fbe07ec2b19e3cd0b4f283f0f325b437c6cb228b62bfedcc27e9872f7166a9f3b9b03c9e6f7c81f1ef3e9197634c002ed56d3ca96d06828ad17c4692ee67d1e811510488c6558d820bb2251c0478270b7eeaccaabdf0302807f91537511fd26a2b49d2a0a32c9569dce23cca8704630f1a288fa5f1993aeb40d770b4a08981ff6cded9ba705327ee404d81384fdbaba18a6847ebb6da", 0xa6}, {&(0x7f0000005000)="4b04bd664753fef1b759dc13c0b68db91159822748bcf79d40cd35010740da3ade4dcbc701cb5df4eb79a9ad7078ccc94196e62bfef1233ea0093b18edd2d9227c038a50488c481607797dc8", 0x4c}, {&(0x7f0000005080)="7690a4144f1c202cace45c95ebbfc35473373e7f6e3e1215caa9cfb40d16a070e905fc7fc36157fd28321b81c29e34067b1467cbf6560dad4dacde5621b8e3f8abff7f8aa7eec01c5da23e8eebd7427617b1c81d32f23047fd000c261f482c0d17f9de3976518438", 0x68}], 0x3, 0x9, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005140)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005140)={'veth0_to_bridge\x00'}) inotify_init1(0xc0000) ioctl$DVB_DEMUX_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000005180)={0x9, 0x0, r8}) write$uinput_user_dev(r15, &(0x7f00000051c0)={'syz1\x00', {0x9, 0x8, 0x0, 0xfff}, 0x28, [0x7ff, 0x7, 0x1, 0xec0, 0x1, 0x5, 0x4c, 0x4, 0x9, 0x1176b9ca, 0x6, 0x18c, 0xff, 0x7, 0xff, 0x8, 0xfd, 0xa, 0xf241, 0xfff, 0x4, 0x5, 0x3, 0x1, 0x10000, 0x1, 0x5, 0x10, 0x4, 0xffffc8ae, 0x0, 0x6, 0x7fff, 0xd, 0xffffffff, 0x8, 0xd, 0x8000, 0x100, 0x1, 0x9, 0x6, 0x8, 0x6, 0x6d, 0xe4, 0x5, 0x5, 0x7, 0xc, 0x3, 0x6, 0xc0, 0xffff, 0x1, 0xfffff000, 0x8, 0x4, 0x13b, 0xffffffff, 0x2, 0x1, 0x9, 0x4], [0x100, 0x80000001, 0x1, 0x8, 0x8001, 0x1ff, 0x48, 0xff, 0x9, 0x4, 0x1, 0xd3, 0xfffffffc, 0x8, 0x1, 0x4, 0x6, 0xf3f, 0xb9, 0x3, 0x200, 0x6, 0xfffffffb, 0x8000, 0x3, 0x5, 0xe586, 0x2, 0x1fb, 0x4, 0x9, 0x9, 0x6, 0x6, 0x2, 0x4, 0x5, 0x4, 0x40, 0x7, 0x7, 0x4, 0x18000000, 0xf, 0x3, 0x8, 0x5, 0x6, 0x9, 0x8, 0x8001, 0x400, 0x8, 0x2, 0x100, 0x3, 0x6, 0x8, 0x5, 0x2, 0x9, 0x4, 0x1, 0xa], [0x9, 0x6, 0x0, 0x5, 0x7, 0x4, 0xb514, 0x4, 0xfffffff2, 0x0, 0x0, 0x1, 0x6, 0xfffffffb, 0x3, 0x0, 0x2, 0x7fffffff, 0xf83, 0x9, 0x4, 0x605ecb74, 0x140, 0x80000000, 0x84e, 0xffffffff, 0xfffffff8, 0x8, 0x7, 0x5, 0x5, 0x2, 0x8, 0x6, 0x400, 0x2, 0x80000000, 0x416, 0xf67b, 0xd, 0xad, 0x7, 0x2, 0x40, 0x8, 0xdaa, 0x0, 0x1, 0xd, 0x1000, 0x7, 0x7, 0x4, 0x56b, 0x9, 0x0, 0xe, 0x7fffffff, 0x0, 0x8001, 0xf, 0x3, 0x6, 0x6], [0x5, 0x2, 0x0, 0x5, 0x5, 0xc, 0x4, 0x7, 0x9, 0x3b80000, 0x0, 0x1a3, 0x1, 0x604c2f6, 0x0, 0x6, 0x5, 0xfff, 0x7, 0x7, 0xd4, 0x2, 0x1, 0x10, 0xb, 0x9, 0x6, 0xa000000, 0x7fff, 0xff, 0xb, 0xe0a, 0x2, 0x2f, 0x4, 0x4, 0xc8, 0x7, 0x40, 0x8001, 0x3, 0x7, 0x2, 0x4, 0x0, 0x2, 0xed2, 0x2, 0x80000001, 0x6, 0x5, 0x88, 0x0, 0x9, 0x8, 0x8, 0xa58e0000, 0x3, 0x8, 0x2, 0x6, 0x8, 0x1, 0xfffffffc]}, 0x45c) (async) write$uinput_user_dev(r15, &(0x7f00000051c0)={'syz1\x00', {0x9, 0x8, 0x0, 0xfff}, 0x28, [0x7ff, 0x7, 0x1, 0xec0, 0x1, 0x5, 0x4c, 0x4, 0x9, 0x1176b9ca, 0x6, 0x18c, 0xff, 0x7, 0xff, 0x8, 0xfd, 0xa, 0xf241, 0xfff, 0x4, 0x5, 0x3, 0x1, 0x10000, 0x1, 0x5, 0x10, 0x4, 0xffffc8ae, 0x0, 0x6, 0x7fff, 0xd, 0xffffffff, 0x8, 0xd, 0x8000, 0x100, 0x1, 0x9, 0x6, 0x8, 0x6, 0x6d, 0xe4, 0x5, 0x5, 0x7, 0xc, 0x3, 0x6, 0xc0, 0xffff, 0x1, 0xfffff000, 0x8, 0x4, 0x13b, 0xffffffff, 0x2, 0x1, 0x9, 0x4], [0x100, 0x80000001, 0x1, 0x8, 0x8001, 0x1ff, 0x48, 0xff, 0x9, 0x4, 0x1, 0xd3, 0xfffffffc, 0x8, 0x1, 0x4, 0x6, 0xf3f, 0xb9, 0x3, 0x200, 0x6, 0xfffffffb, 0x8000, 0x3, 0x5, 0xe586, 0x2, 0x1fb, 0x4, 0x9, 0x9, 0x6, 0x6, 0x2, 0x4, 0x5, 0x4, 0x40, 0x7, 0x7, 0x4, 0x18000000, 0xf, 0x3, 0x8, 0x5, 0x6, 0x9, 0x8, 0x8001, 0x400, 0x8, 0x2, 0x100, 0x3, 0x6, 0x8, 0x5, 0x2, 0x9, 0x4, 0x1, 0xa], [0x9, 0x6, 0x0, 0x5, 0x7, 0x4, 0xb514, 0x4, 0xfffffff2, 0x0, 0x0, 0x1, 0x6, 0xfffffffb, 0x3, 0x0, 0x2, 0x7fffffff, 0xf83, 0x9, 0x4, 0x605ecb74, 0x140, 0x80000000, 0x84e, 0xffffffff, 0xfffffff8, 0x8, 0x7, 0x5, 0x5, 0x2, 0x8, 0x6, 0x400, 0x2, 0x80000000, 0x416, 0xf67b, 0xd, 0xad, 0x7, 0x2, 0x40, 0x8, 0xdaa, 0x0, 0x1, 0xd, 0x1000, 0x7, 0x7, 0x4, 0x56b, 0x9, 0x0, 0xe, 0x7fffffff, 0x0, 0x8001, 0xf, 0x3, 0x6, 0x6], [0x5, 0x2, 0x0, 0x5, 0x5, 0xc, 0x4, 0x7, 0x9, 0x3b80000, 0x0, 0x1a3, 0x1, 0x604c2f6, 0x0, 0x6, 0x5, 0xfff, 0x7, 0x7, 0xd4, 0x2, 0x1, 0x10, 0xb, 0x9, 0x6, 0xa000000, 0x7fff, 0xff, 0xb, 0xe0a, 0x2, 0x2f, 0x4, 0x4, 0xc8, 0x7, 0x40, 0x8001, 0x3, 0x7, 0x2, 0x4, 0x0, 0x2, 0xed2, 0x2, 0x80000001, 0x6, 0x5, 0x88, 0x0, 0x9, 0x8, 0x8, 0xa58e0000, 0x3, 0x8, 0x2, 0x6, 0x8, 0x1, 0xfffffffc]}, 0x45c) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r16, 0x4b3b, &(0x7f0000005640)) 2.774661215s ago: executing program 2 (id=1440): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80, 0x80000) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0x18, 0x0, &(0x7f0000001cc0)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x1a, &(0x7f0000000340)=0x7ff, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000040)) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/109, 0x6d}], 0x1}, 0x10021) 2.694761779s ago: executing program 2 (id=1442): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0xc0400) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0], 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$search(0xa, r4, &(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, r4) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000300)={0x0, 0x0}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x1a, 0xd3}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'poly1305-neon\x00'}}, &(0x7f0000000340)="27164250dfb74851080df09f6c324f794abe272f4c5ffefb1d18", &(0x7f0000000380)=""/211) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0xc0400) (async) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0], 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) (async) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) (async) keyctl$setperm(0x5, r5, 0x52b242d) (async) keyctl$search(0xa, r4, &(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, r4) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000300)={0x0, 0x0}) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x1a, 0xd3}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'poly1305-neon\x00'}}, &(0x7f0000000340)="27164250dfb74851080df09f6c324f794abe272f4c5ffefb1d18", &(0x7f0000000380)=""/211) (async) 2.339186293s ago: executing program 1 (id=1445): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fe, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) r3 = semget$private(0x0, 0x5, 0xac) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)=""/103) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000003c0)=[r7], 0x1, r5, r6, 0x2, 0x0, 0x2, 0xdc43, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xb, 0xfffffff8, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2.233339842s ago: executing program 1 (id=1446): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x10, 0x1401, 0x301, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 2.105703128s ago: executing program 1 (id=1447): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="589fe7bdc19c86abb07f98adc00ec96d62954c2d690f5acf1e5e15", 0x1b}, {&(0x7f00000006c0)="15594cb5599f713bb1656bca03f7dbf778882eec7bce3435039cf235c680dcbdc43380fb0e15dc386bae962eb6c9326534fca8335bba33db0b3cb56caa0ce6f8761ca8cc3fe6f2d48cf6cba6a41ac3d92c5b951892c4c7b30388c66a1eae3b879d0ccf4c9e4c99d2ee937ce99edb0cd475aedb70740e16b25b869b440d62c3e9ca592421fe02a306785e", 0x8a}, {&(0x7f0000000780)="91d9f23ac36280632876964516a22be3711ad7b2b9c76d095d4de810c08cd390b82563e6824e038d242b910ad73ee7055eaa32028841620391543a942c27251b1c9aef0c06e6ce18b7d935edb8e545a36f4c34f14fd36a1ccb560e0669e052d8f529c0d48ca6fbb64ebde0839a92d3de475abfaef7999aa914f280161ce4bbb15dc496bd824e6c8243af16edcf8c71eb6e1d44938e78417e4a26dc912c0f49eb04", 0xa1}, {&(0x7f0000000880)="1d9c729fe2210e1fca294be22760c01e69018a0e991e516e570fd195187da7298f2b19d9db061635b2b9ef", 0x2b}, {&(0x7f00000008c0)="3fda8c0d28fca2c0e25c5bfff0f638ed15351fa6066c2c20488bf59e5010065afcbb2c0ef1bd408a881b01f5ed9481", 0x2f}, {&(0x7f0000000900)="b36b4ef74b36973bbf0c65e4d99603ade186c6254ceb27d93ea82369752b019302b07046e4c266044d52d61c6b49cf5cb2bbd786c5d573ca0121f18288b4c26cb99df87a8eb4d7bca5f52dbac3709524e24c63161a0dd80b06bcee0058e8d9919a60aafd955702a4298d94a08bf3f5af1c9f74d5d27e2fc95cec5f50a455de07930e7aa8932b60ca54f11c139bde3ee240a1158ca03ef3bc961998175bb80bf5d843fc5954aeed9cfa4eea721372afcd83bc842f607ea8bacf49c2f9a2362a2e80ff4eb778a979208db5259507a39200764584b94b16", 0xd6}], 0x6}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr$security_evm(r3, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "7a6adff9dfdf087295a124dacd37a98d"}, 0x11, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.467001928s ago: executing program 0 (id=1448): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r0, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000040000000000000000000000000a240000000c0a01010000000000000000050000080900010073797a310000000004000380140000001000010000000000000000000084000aa050c27ee3a329997cb6ef6f52a7a844410965bffae3ee779f2f141c32502b0b7a53a38ea221a063ff2a32d5e3a8fe0fce7541abdeb1d5"], 0x4c}}, 0x24004000) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0xa184b9, 0x0) 1.375599694s ago: executing program 0 (id=1449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0x44a0, 0x80000000000004}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0xa, 0x8de117a9478e9035, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.269894387s ago: executing program 0 (id=1450): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000200)="c30e0b452223e235d5bceb8a53891aa8809f5f340cf98984005e74f47a5151febea729c12f183c0f4f4a7d11ba99b99bf6dfaf9737bc9a50c896ad0a91cf3a5a984e42f97f83f7c73c32b38dbb5ba20b83ec0a93d22ef9ffd277b629bd24ca4d77a8b1a98a3832c2d3668b79f55ad82e", 0x70}, {&(0x7f0000000580)="9e18cd49b9e74fc5117a3d390f4a007e8413a254d12a22be01e3adfe8a871ea7", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20004050}], 0x1, 0x20048814) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/234, 0xea}], 0x1}}], 0x1, 0x40002021, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f0000001e40)={{0x12, 0x1, 0x200, 0x73, 0x67, 0x14, 0x8, 0x12d1, 0x1441, 0x6c2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x8, 0x4a, 0x60, 0x3, "", [{{0x9, 0x4, 0x55, 0xb9, 0x1, 0x2, 0x2, 0xff, 0x9, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x0, 0x9a, [@generic={0x2, 0x3}]}}]}}]}}]}}, 0x0) 1.076503863s ago: executing program 1 (id=1451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xa) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES64], 0x15) pipe(0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x181800) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x1, 0x7f, 0x7, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) fallocate(r3, 0x8, 0x1ff, 0x97) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r9, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x1, 0x240, 0x0, 0x0}) pwrite64(r2, &(0x7f0000000280)="5d0265b36c63987dfe54", 0xa, 0x9) 1.037782322s ago: executing program 1 (id=1452): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000016603, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000016603, 0x0) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r1, 0x0, 0xffffffdb) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) 751.301217ms ago: executing program 1 (id=1453): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0xe, 0x1, 0x5}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 362.187866ms ago: executing program 3 (id=1454): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x6, 0x0, r3}) accept(r4, 0x0, &(0x7f0000000280)) close(r3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) execveat$binfmt(0xffffffffffffffff, r2, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x442, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded650492d"], 0xfe33) 106.633915ms ago: executing program 3 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000854}, 0x24000000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r9, 0x0, 0xffff, 0x2, &(0x7f0000000080)="7ced", 0x5}) 14.346376ms ago: executing program 0 (id=1456): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040090) recvmsg(r2, &(0x7f000000b300)={0x0, 0x0, 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2d}, 0x10}}, 0x0) 0s ago: executing program 3 (id=1457): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x4) lseek(r0, 0x9, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)="fc3077906c2e0bf77bf63fa64390136aa14c2cf957d1e7e1a48b1c498f11c08fa32afe28b203a06d4cca612bdc71dba5ea1b5343d69902b5ccfcddeaa2796008d20373ed112e845b53174bfdcecc1ba1f04e56bfaf3517", 0x57}], 0x1, 0x890, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1c, 0xc9, 0x6, 0xe2, 0xf4, 0xa, 0x8, 0xe4, 0x3, 0x0, 0x9, 0xa, 0x5f30, 0x1, 0xff, 0x7fffffff, [0x0, 0x9]}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'ip6_vti0\x00', @broadcast}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x4) (async) lseek(r0, 0x9, 0x4) (async) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)="fc3077906c2e0bf77bf63fa64390136aa14c2cf957d1e7e1a48b1c498f11c08fa32afe28b203a06d4cca612bdc71dba5ea1b5343d69902b5ccfcddeaa2796008d20373ed112e845b53174bfdcecc1ba1f04e56bfaf3517", 0x57}], 0x1, 0x890, 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1c, 0xc9, 0x6, 0xe2, 0xf4, 0xa, 0x8, 0xe4, 0x3, 0x0, 0x9, 0xa, 0x5f30, 0x1, 0xff, 0x7fffffff, [0x0, 0x9]}}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'ip6_vti0\x00', @broadcast}) (async) kernel console output (not intermixed with test programs): atus (-71) [ 266.891183][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.891394][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.891617][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.891844][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.892063][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.892278][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.892497][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.892715][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.892931][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.893140][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.893355][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.893574][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.893805][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.894020][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.894236][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.894457][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.894671][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.894889][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.895103][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.895316][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.895542][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.895767][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.895989][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.896202][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.896419][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.896640][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.896856][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.897142][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.897356][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.897595][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.897810][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.898032][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.898245][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.898460][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.898745][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.898970][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.899182][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.899398][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.899644][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.899856][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.900071][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.900289][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.900502][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.900724][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.900940][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.901165][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.901381][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.901614][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.901829][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.902043][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.902263][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.902477][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.902691][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.902904][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.903120][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.903386][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.903607][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.903820][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.904035][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.904254][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.904473][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.904688][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.904902][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.905119][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.905343][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.905573][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.905783][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.905996][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.906211][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.906423][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.906639][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.906852][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.907069][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.907292][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.907506][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.907723][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.907939][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.908167][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.908391][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.908651][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.908897][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 266.909033][ T5797] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 266.932317][ T5797] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 266.979244][ T10] usb usb4-port1: unable to enumerate USB device [ 267.337818][ T32] usb 3-1: failed to receive control message: -71 [ 267.337873][ T32] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 267.592520][ T5704] usb 1-1: USB disconnect, device number 76 [ 268.054348][ T5797] usb 2-1: USB disconnect, device number 85 [ 268.857144][ T32] usb 3-1: USB disconnect, device number 87 [ 269.112152][ T8886] hpfs: Bad magic ... probably not HPFS [ 269.128888][ T5797] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 269.178760][ T5704] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 269.258880][ T5797] usb 4-1: device descriptor read/64, error -71 [ 269.330155][ T10] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 269.330427][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 269.330559][ T32] ch341 3-1:0.0: device disconnected [ 269.348768][ T5704] usb 1-1: device descriptor read/64, error -71 [ 269.459151][ T10] usb 2-1: device descriptor read/64, error -32 [ 269.498899][ T5797] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 269.628798][ T5797] usb 4-1: device descriptor read/64, error -71 [ 269.666133][ T5704] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 269.698820][ T10] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 269.742621][ T5797] usb usb4-port1: attempt power cycle [ 269.828812][ T10] usb 2-1: device descriptor read/64, error -71 [ 269.838755][ T5704] usb 1-1: device descriptor read/64, error -71 [ 269.939272][ T10] usb usb2-port1: attempt power cycle [ 270.068822][ T5704] usb usb1-port1: attempt power cycle [ 270.078959][ T5797] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 270.099531][ T5797] usb 4-1: device descriptor read/8, error -71 [ 270.278934][ T10] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 270.300349][ T10] usb 2-1: device descriptor read/8, error -71 [ 270.358922][ T5797] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 270.379829][ T5797] usb 4-1: device descriptor read/8, error -71 [ 270.489261][ T5797] usb usb4-port1: unable to enumerate USB device [ 270.538780][ T10] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 270.562639][ T10] usb 2-1: device descriptor read/8, error -71 [ 270.672780][ T10] usb usb2-port1: unable to enumerate USB device [ 271.041656][ T5704] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 271.227310][ T5704] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 271.227329][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.227340][ T5704] usb 1-1: Product: syz [ 271.227347][ T5704] usb 1-1: Manufacturer: syz [ 271.227355][ T5704] usb 1-1: SerialNumber: syz [ 271.484282][ T5704] usb 1-1: config 0 descriptor?? [ 271.638691][ T32] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 271.660094][ T5704] ch341 1-1:0.0: ch341-uart converter detected [ 271.817221][ T38] audit: type=1400 audit(1779640307.307:11): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8900 comm="syz.3.987" [ 271.928793][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 271.931823][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.931873][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 271.931954][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.979806][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 272.123914][ T5704] usb 1-1: failed to receive control message: -71 [ 272.123954][ T5704] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 272.335950][ T5704] usb 1-1: USB disconnect, device number 79 [ 273.512599][ T5704] ch341 1-1:0.0: device disconnected [ 273.649076][ T5797] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 273.801342][ T5797] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.801369][ T5797] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 273.801388][ T5797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.801431][ T5797] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.803543][ T5797] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.803569][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.803588][ T5797] usb 2-1: Product: syz [ 273.803601][ T5797] usb 2-1: Manufacturer: syz [ 273.943754][ T32] usb 3-1: config 0 descriptor?? [ 274.022796][ T5797] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 274.356875][ T32] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 274.365156][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.417638][ T32] gspca_vc032x: reg_r err -71 [ 274.417735][ T32] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 274.469415][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.596983][ T5797] usb 2-1: USB disconnect, device number 90 [ 274.898826][ T32] usb 3-1: USB disconnect, device number 88 [ 275.015313][ T5704] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 275.138859][ T5797] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 275.288738][ T5797] usb 4-1: Using ep0 maxpacket: 8 [ 275.291585][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.291639][ T5797] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 275.291662][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.314521][ T5797] usb 4-1: config 0 descriptor?? [ 275.552801][ T5797] usb 4-1: USB disconnect, device number 100 [ 275.594181][ T5704] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 275.594210][ T5704] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt [ 275.594231][ T5704] usb 1-1: config 1 interface 0 has no altsetting 0 [ 275.698737][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.698764][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.698782][ T5704] usb 1-1: Product: С [ 275.698795][ T5704] usb 1-1: Manufacturer: Е [ 275.698807][ T5704] usb 1-1: SerialNumber: ﳿ [ 276.063284][ T32] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 276.228977][ T5704] usb 1-1: can't set config #1, error -71 [ 276.418863][ T5797] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 276.426315][ T8967] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 276.426315][ T8967] program syz.3.1010 not setting count and/or reply_len properly [ 276.490883][ T32] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 276.490913][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.490932][ T32] usb 3-1: Product: syz [ 276.490945][ T32] usb 3-1: Manufacturer: syz [ 276.490958][ T32] usb 3-1: SerialNumber: syz [ 276.544253][ T5704] usb 1-1: USB disconnect, device number 80 [ 276.568765][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 276.571098][ T5797] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.571127][ T5797] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.580926][ T5797] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.580955][ T5797] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 276.580974][ T5797] usb 2-1: Product: syz [ 276.580988][ T5797] usb 2-1: Manufacturer: syz [ 276.603589][ T8971] trusted_key: encrypted_key: master key parameter ',m_nmrRbbK>i :YUFuu󶟗:o0WI0+akȆ ) failed (rc=-5) [ 295.038909][ T5704] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 295.172694][ T5704] usb 4-1: device descriptor read/64, error -71 [ 295.269129][ T6152] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 295.279343][ T5704] usb usb4-port1: attempt power cycle [ 295.438827][ T6152] usb 2-1: Using ep0 maxpacket: 32 [ 295.455900][ T6152] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 295.579310][ T9222] tmpfs: Unknown parameter 'grpquota_block_har01777777777777777777777' [ 295.630450][ T5704] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 295.655440][ T5704] usb 4-1: device descriptor read/8, error -71 [ 295.693667][ T9224] tmpfs: Bad value for 'mpol' [ 295.908967][ T5704] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 295.934942][ T5704] usb 4-1: device descriptor read/8, error -71 [ 296.050185][ T5704] usb usb4-port1: unable to enumerate USB device [ 296.836078][ T9257] binder: 9255:9257 unknown command 1078485782 [ 296.836099][ T9257] binder: 9255:9257 ioctl c0306201 2000000001c0 returned -22 [ 297.068798][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 297.118865][ T5704] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 297.161253][ T6152] usb 2-1: string descriptor 0 read error: -71 [ 297.161400][ T6152] usb 2-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice= 0.40 [ 297.161422][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.186662][ T6152] usb 2-1: can't set config #1, error -71 [ 297.200916][ T10] usb 4-1: device descriptor read/64, error -71 [ 297.204456][ T6152] usb 2-1: USB disconnect, device number 100 [ 297.287482][ T5704] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 297.287510][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.287528][ T5704] usb 3-1: Product: syz [ 297.287541][ T5704] usb 3-1: Manufacturer: syz [ 297.287554][ T5704] usb 3-1: SerialNumber: syz [ 297.316493][ T5704] usb 3-1: config 0 descriptor?? [ 297.343332][ T5704] ch341 3-1:0.0: ch341-uart converter detected [ 297.394549][ T9275] tmpfs: Unknown parameter 'grpquota_block_har01777777777777777777777' [ 297.448829][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 297.546206][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 297.570812][ T9278] overlay: ./file0 is not a directory [ 297.580623][ T10] usb 4-1: device descriptor read/64, error -71 [ 297.594817][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 297.638885][ T6152] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 297.689264][ T10] usb usb4-port1: attempt power cycle [ 297.814313][ T6152] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 297.834137][ T6152] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 297.834171][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.834245][ T6152] usb 2-1: Product: syz [ 297.834259][ T6152] usb 2-1: Manufacturer: syz [ 297.834272][ T6152] usb 2-1: SerialNumber: syz [ 297.837879][ T5704] usb 3-1: failed to receive control message: -71 [ 297.837933][ T5704] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 297.893712][ T5704] usb 3-1: USB disconnect, device number 99 [ 297.908055][ T5704] ch341 3-1:0.0: device disconnected [ 297.915242][ T6152] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 298.079036][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 298.099570][ T10] usb 4-1: device descriptor read/8, error -71 [ 298.101473][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.103769][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.252276][ T6152] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.252825][ T6152] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 298.252878][ T6152] usb 2-1: media controller created [ 298.279252][ T5805] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 298.307265][ T6152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.338834][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 298.362683][ T10] usb 4-1: device descriptor read/8, error -71 [ 298.449465][ T6152] usb 2-1: USB disconnect, device number 101 [ 298.464771][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 298.472193][ T10] usb usb4-port1: unable to enumerate USB device [ 298.475480][ T5805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.475505][ T5805] usb 1-1: config 0 has no interface number 0 [ 298.508426][ T5805] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 298.508454][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.508472][ T5805] usb 1-1: Product: syz [ 298.508484][ T5805] usb 1-1: Manufacturer: syz [ 298.508501][ T5805] usb 1-1: SerialNumber: syz [ 298.545039][ T5805] usb 1-1: config 0 descriptor?? [ 298.561495][ T5805] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 298.561534][ T5805] usb 1-1: selecting invalid altsetting 1 [ 298.561548][ T5805] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 298.575742][ T5805] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.586387][ T9287] netlink: 'syz.2.1101': attribute type 4 has an invalid length. [ 298.611600][ T5805] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 298.611640][ T5805] usb 1-1: media controller created [ 298.634090][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.959004][ T5805] usb 1-1: USB disconnect, device number 85 [ 299.238935][ T6152] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 299.378795][ T6152] usb 2-1: device descriptor read/64, error -71 [ 299.619648][ T6152] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 299.748867][ T6152] usb 2-1: device descriptor read/64, error -71 [ 299.828861][ T5805] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 299.859512][ T6152] usb usb2-port1: attempt power cycle [ 299.878787][ T822] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 299.981891][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.988250][ T5805] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 299.988277][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.988288][ T5805] usb 1-1: Product: 啉」輈┟酃퓓穼榹麐巠䑈ṭ첞û [ 299.988296][ T5805] usb 1-1: SerialNumber: syz [ 300.039724][ T822] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 300.039752][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.039771][ T822] usb 3-1: Product: syz [ 300.039784][ T822] usb 3-1: Manufacturer: syz [ 300.039798][ T822] usb 3-1: SerialNumber: syz [ 300.047461][ T822] usb 3-1: config 0 descriptor?? [ 300.099590][ T822] ch341 3-1:0.0: ch341-uart converter detected [ 300.138862][ T823] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 300.211006][ T6152] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 300.231160][ T6152] usb 2-1: device descriptor read/8, error -71 [ 300.262022][ T5805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.262071][ T5805] usb 1-1: MIDIStreaming interface descriptor not found [ 300.330474][ T823] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 300.330504][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.330523][ T823] usb 4-1: Product: syz [ 300.330536][ T823] usb 4-1: Manufacturer: syz [ 300.330550][ T823] usb 4-1: SerialNumber: syz [ 300.370935][ T823] usb 4-1: config 0 descriptor?? [ 300.390230][ T823] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 300.457143][ T5805] usb 1-1: USB disconnect, device number 86 [ 300.488952][ T6152] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 300.525704][ T6152] usb 2-1: device descriptor read/8, error -71 [ 300.575467][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.639449][ T6152] usb usb2-port1: unable to enumerate USB device [ 300.649086][ T822] usb 3-1: failed to receive control message: -71 [ 300.649142][ T822] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 300.684190][ T822] usb 3-1: USB disconnect, device number 100 [ 300.697471][ T822] ch341 3-1:0.0: device disconnected [ 301.368820][ T822] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 301.479400][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.481774][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.529395][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 301.532274][ T822] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 301.532301][ T822] usb 1-1: config 0 has no interface number 0 [ 301.532342][ T822] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 301.532367][ T822] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 301.535800][ T822] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 301.535829][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.535849][ T822] usb 1-1: Product: syz [ 301.535864][ T822] usb 1-1: Manufacturer: syz [ 301.535877][ T822] usb 1-1: SerialNumber: syz [ 301.546316][ T822] usb 1-1: config 0 descriptor?? [ 301.619966][ T9319] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 301.620181][ T9319] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 301.694933][ T823] gspca_stk1135: reg_w 0xd err -71 [ 301.695974][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.695988][ T823] gspca_stk1135: Sensor write failed [ 301.696010][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696019][ T823] gspca_stk1135: Sensor write failed [ 301.696042][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696052][ T823] gspca_stk1135: Sensor read failed [ 301.696075][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696084][ T823] gspca_stk1135: Sensor read failed [ 301.696090][ T823] gspca_stk1135: Detected sensor type unknown (0x0) [ 301.696115][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696123][ T823] gspca_stk1135: Sensor read failed [ 301.696146][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696154][ T823] gspca_stk1135: Sensor read failed [ 301.696176][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696184][ T823] gspca_stk1135: Sensor write failed [ 301.696205][ T823] gspca_stk1135: serial bus timeout: status=0x00 [ 301.696215][ T823] gspca_stk1135: Sensor write failed [ 301.696293][ T823] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 301.726541][ T823] usb 4-1: USB disconnect, device number 112 [ 301.826591][ T9319] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 301.826718][ T9319] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 302.029964][ T822] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 302.533785][ T9337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 302.533814][ T9337] UDF-fs: Scanning with blocksize 512 failed [ 302.534411][ T9337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 302.534422][ T9337] UDF-fs: Scanning with blocksize 1024 failed [ 302.534788][ T9337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 302.534802][ T9337] UDF-fs: Scanning with blocksize 2048 failed [ 302.535096][ T9337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 302.535105][ T9337] UDF-fs: Scanning with blocksize 4096 failed [ 302.729014][ T37] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 302.892614][ T37] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 302.892640][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.892650][ T37] usb 3-1: Product: syz [ 302.892658][ T37] usb 3-1: Manufacturer: syz [ 302.892665][ T37] usb 3-1: SerialNumber: syz [ 302.937681][ T37] usb 3-1: config 0 descriptor?? [ 302.950650][ T37] ch341 3-1:0.0: ch341-uart converter detected [ 303.108948][ T823] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 303.259305][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 303.261691][ T823] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 303.261718][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.261736][ T823] usb 2-1: config 0 has no interface number 0 [ 303.265012][ T823] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 303.265041][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.265060][ T823] usb 2-1: Product: syz [ 303.265074][ T823] usb 2-1: Manufacturer: syz [ 303.265087][ T823] usb 2-1: SerialNumber: syz [ 303.275637][ T823] usb 2-1: config 0 descriptor?? [ 303.433595][ T37] usb 3-1: failed to receive control message: -71 [ 303.433661][ T37] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 303.455532][ T37] usb 3-1: USB disconnect, device number 101 [ 303.468036][ T37] ch341 3-1:0.0: device disconnected [ 303.546258][ T823] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 303.546339][ T823] uvcvideo 2-1:0.31: No valid video chain found. [ 303.643257][ T9359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 303.643283][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.650985][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 303.651666][ T9360] vhci_hcd: cannot find the pending unlink 512 [ 303.671134][ T9360] vhci_hcd: connection closed [ 303.680853][ T4283] vhci_hcd vhci_hcd.3: stop threads [ 303.680869][ T4283] vhci_hcd vhci_hcd.3: release socket [ 303.680891][ T4283] vhci_hcd vhci_hcd.3: disconnect device [ 303.740204][ T5805] usb 2-1: USB disconnect, device number 106 [ 304.283460][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.292397][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.325479][ T822] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 304.325510][ T822] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 304.325785][ T822] asix 1-1:0.34: probe with driver asix failed with error -71 [ 304.358335][ T9367] binder: 9366:9367 ioctl 40106e8c 200000000a00 returned -22 [ 304.395876][ T822] usb 1-1: USB disconnect, device number 87 [ 304.594574][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 304.594598][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 304.764201][ T9378] 9pnet: p9_errstr2errno: server reported unknown error [ 304.855052][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.865006][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.070021][ T5805] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 305.118914][ T822] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 305.218832][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 305.218900][ T5724] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 305.221496][ T5805] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 305.221549][ T5805] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 305.221574][ T5805] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.221599][ T5805] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 305.225091][ T5805] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 305.225122][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.225140][ T5805] usb 2-1: Product: syz [ 305.225154][ T5805] usb 2-1: Manufacturer: syz [ 305.225166][ T5805] usb 2-1: SerialNumber: syz [ 305.332754][ T822] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 305.332789][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.332808][ T822] usb 4-1: Product: syz [ 305.332820][ T822] usb 4-1: Manufacturer: syz [ 305.332834][ T822] usb 4-1: SerialNumber: syz [ 305.377313][ T822] usb 4-1: config 0 descriptor?? [ 305.383053][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 305.399074][ T5724] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 305.399105][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.399122][ T5724] usb 1-1: Product: syz [ 305.399134][ T5724] usb 1-1: Manufacturer: syz [ 305.399147][ T5724] usb 1-1: SerialNumber: syz [ 305.450250][ T5724] usb 1-1: config 0 descriptor?? [ 305.494105][ T5724] ch341 1-1:0.0: ch341-uart converter detected [ 305.597591][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.598036][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.839128][ T5805] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input23 [ 305.925090][ T5624] Bluetooth: hci4: urb ffff88802afdb000 submission failed (2) [ 305.955232][ T5724] usb 1-1: failed to receive control message: -71 [ 305.955291][ T5724] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 305.980526][ T822] usb 4-1: USB disconnect, device number 113 [ 306.080374][ T38] audit: type=1326 audit(1779640341.597:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1136" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e98d9ce59 code=0x0 [ 306.131964][ T5724] usb 1-1: USB disconnect, device number 88 [ 306.134538][ T5724] ch341 1-1:0.0: device disconnected [ 306.400448][ T5805] imon:send_packet: packet tx failed (-71) [ 306.418767][ T5805] imon 2-1:155.0: panel buttons/knobs setup failed [ 306.418799][ T5805] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 306.418812][ T5805] (id 0x00) [ 306.618741][ T5805] rc_core: IR keymap rc-imon-pad not found [ 306.618761][ T5805] Registered IR keymap rc-empty [ 306.618835][ T5805] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 306.618853][ T5805] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 306.621641][ T5805] imon:send_packet: packet tx failed (-71) [ 306.623406][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 306.646299][ T5805] imon 2-1:155.0: remote input dev register failed [ 306.646458][ T5805] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 306.691345][ T9419] Bluetooth: MGMT ver 1.23 [ 306.734589][ T9418] rdma_op ffff88804dc43270 conn xmit_rdma 0000000000000000 [ 306.944885][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 307.172908][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1147'. [ 307.236520][ T9442] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.475975][ T5805] imon 2-1:155.0: unable to initialize intf0, err 0 [ 307.475997][ T5805] imon:imon_probe: failed to initialize context! [ 307.476009][ T5805] imon 2-1:155.0: unable to register, err -19 [ 307.486436][ T5805] usb 2-1: USB disconnect, device number 107 [ 307.906186][ T9471] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 308.478862][ T5805] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 308.538915][ T6152] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 308.584617][ T9504] trusted_key: syz.0.1169 sent an empty control message without MSG_MORE. [ 308.608853][ T5805] usb 4-1: device descriptor read/64, error -71 [ 308.695321][ T6152] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 308.695358][ T6152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.695377][ T6152] usb 3-1: Product: syz [ 308.695385][ T6152] usb 3-1: Manufacturer: syz [ 308.695392][ T6152] usb 3-1: SerialNumber: syz [ 308.734996][ T6152] usb 3-1: config 0 descriptor?? [ 308.746650][ T6152] ch341 3-1:0.0: ch341-uart converter detected [ 308.848980][ T5805] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 308.978977][ T5805] usb 4-1: device descriptor read/64, error -71 [ 309.115782][ T5805] usb usb4-port1: attempt power cycle [ 309.251541][ T6152] usb 3-1: failed to receive control message: -71 [ 309.251598][ T6152] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 309.277527][ T6152] usb 3-1: USB disconnect, device number 102 [ 309.281387][ T6152] ch341 3-1:0.0: device disconnected [ 309.468788][ T5805] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 309.494745][ T5805] usb 4-1: device descriptor read/8, error -71 [ 309.739027][ T5805] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 309.774813][ T5805] usb 4-1: device descriptor read/8, error -71 [ 309.881041][ T5805] usb usb4-port1: unable to enumerate USB device [ 309.950056][ T6152] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 310.064488][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.064827][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.064886][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.064929][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.064976][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.065033][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.065132][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.065187][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.065236][ T1698] Bluetooth: hci4: Frame reassembly failed (-84) [ 310.150864][ T6152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.150891][ T6152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.153319][ T6152] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 310.153344][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.153355][ T6152] usb 2-1: Product: syz [ 310.153362][ T6152] usb 2-1: Manufacturer: syz [ 310.153370][ T6152] usb 2-1: SerialNumber: syz [ 310.227863][ T6152] usb 2-1: 0:1 : does not exist [ 310.627230][ T9555] dvmrp2: entered allmulticast mode [ 310.629271][ T6152] usb 2-1: unit 0 not found! [ 310.680549][ T6152] usb 2-1: USB disconnect, device number 108 [ 310.771600][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.128890][ T822] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 311.218811][ T5805] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 311.282399][ T822] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 311.282425][ T822] usb 1-1: config 1 has no interface number 0 [ 311.282479][ T822] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 311.282502][ T822] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.282519][ T822] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.285782][ T822] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 311.285811][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.285825][ T822] usb 1-1: Product: syz [ 311.285832][ T822] usb 1-1: Manufacturer: syz [ 311.285839][ T822] usb 1-1: SerialNumber: syz [ 311.376910][ T9562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 311.377022][ T9562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 311.382599][ T822] usb 1-1: Expected 3 endpoints, found: 1 [ 311.448969][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 311.451785][ T5805] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 311.451813][ T5805] usb 3-1: config 0 has no interface number 0 [ 311.451847][ T5805] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.451858][ T5805] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 311.451872][ T5805] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 311.451885][ T5805] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 311.451897][ T5805] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 311.451910][ T5805] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.451920][ T5805] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 311.451932][ T5805] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 311.451945][ T5805] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.451956][ T5805] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.454485][ T5805] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 311.454513][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.454524][ T5805] usb 3-1: Product: syz [ 311.454532][ T5805] usb 3-1: Manufacturer: syz [ 311.454539][ T5805] usb 3-1: SerialNumber: syz [ 311.458006][ T5805] usb 3-1: config 0 descriptor?? [ 311.460906][ T9564] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.461124][ T9564] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.593333][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.593900][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.602371][ T5724] usb 1-1: USB disconnect, device number 89 [ 311.618825][ T6152] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 311.681244][ T5805] usb 3-1: will this work? Response EP is not usually 3 [ 311.681266][ T5805] usb 3-1: will this work? Image data EP is not usually 2 [ 311.714142][ T5805] scsi host1: microtekX6 [ 311.754169][ T5805] usb 3-1: USB disconnect, device number 103 [ 311.773040][ T6152] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 311.782952][ T6152] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 311.785776][ T6152] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 311.791533][ T58] usb 3-1: error -19 submitting URB [ 311.814997][ T6152] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 311.816381][ T6152] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 311.817555][ T6152] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 311.819430][ T6152] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 311.839174][ T58] usb 3-1: error -19 submitting URB [ 311.845395][ T6152] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 311.868725][ T6152] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 311.871231][ T6152] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.871259][ T6152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.871277][ T6152] usb 4-1: Product: syz [ 311.871289][ T6152] usb 4-1: Manufacturer: syz [ 311.871297][ T6152] usb 4-1: SerialNumber: syz [ 311.878795][ T58] usb 3-1: error -19 submitting URB [ 311.939041][ T6152] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 311.959113][ T5724] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.074798][ T5624] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 313.197206][ T822] usb 4-1: USB disconnect, device number 118 [ 313.222934][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 313.328093][ T5724] usb 4-1: Service connection timeout for: 256 [ 313.328115][ T5724] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 313.459809][ T5724] ath9k_htc: Failed to initialize the device [ 313.460202][ T822] usb 4-1: ath9k_htc: USB layer deinitialized [ 313.514153][ T9578] tmpfs: Group quota block hardlimit too large. [ 313.524503][ T9577] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1198'. [ 314.067443][ T822] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 314.278749][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 314.285371][ T822] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 314.285400][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.285419][ T822] usb 4-1: Product: syz [ 314.285432][ T822] usb 4-1: Manufacturer: syz [ 314.285444][ T822] usb 4-1: SerialNumber: syz [ 314.312862][ T9607] nfs: Bad value for 'source' [ 314.313291][ T9607] nfs: Bad value for 'source' [ 314.343874][ T822] usb 4-1: config 0 descriptor?? [ 314.347297][ T822] usb-storage 4-1:0.0: USB Mass Storage device detected [ 314.409110][ T822] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 314.409139][ T822] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 314.409139][ T822] Please send a copy of this message to and [ 314.874199][ T9627] FAULT_INJECTION: forcing a failure. [ 314.874199][ T9627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.874234][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.1.1220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.874251][ T9627] Tainted: [L]=SOFTLOCKUP [ 314.874255][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.874265][ T9627] Call Trace: [ 314.874272][ T9627] [ 314.874277][ T9627] dump_stack_lvl+0xe8/0x150 [ 314.874295][ T9627] should_fail_ex+0x46b/0x600 [ 314.874313][ T9627] _copy_from_user+0x2d/0xb0 [ 314.874330][ T9627] memdup_user+0x5e/0xd0 [ 314.874356][ T9627] strndup_user+0x68/0xd0 [ 314.874375][ T9627] __se_sys_mount+0x9d/0x420 [ 314.874390][ T9627] ? ksys_write+0x248/0x270 [ 314.874410][ T9627] ? __pfx___se_sys_mount+0x10/0x10 [ 314.874427][ T9627] ? __x64_sys_mount+0x20/0xc0 [ 314.874436][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.874447][ T9627] do_syscall_64+0x15f/0x560 [ 314.874461][ T9627] ? trace_irq_disable+0x3b/0x140 [ 314.874472][ T9627] ? clear_bhb_loop+0x40/0x90 [ 314.874485][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.874495][ T9627] RIP: 0033:0x7fb516f7ce59 [ 314.874506][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.874515][ T9627] RSP: 002b:00007fb5151d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.874526][ T9627] RAX: ffffffffffffffda RBX: 00007fb5171f5fa0 RCX: 00007fb516f7ce59 [ 314.874534][ T9627] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 314.874541][ T9627] RBP: 00007fb5151d6090 R08: 0000200000000500 R09: 0000000000000000 [ 314.874547][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.874553][ T9627] R13: 00007fb5171f6038 R14: 00007fb5171f5fa0 R15: 00007ffdd0b91058 [ 314.874568][ T9627] [ 315.088876][ T5805] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 315.136492][ T9633] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1223'. [ 315.137182][ T9634] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1223'. [ 315.252357][ T5805] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 315.252387][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.252405][ T5805] usb 3-1: Product: syz [ 315.252416][ T5805] usb 3-1: Manufacturer: syz [ 315.252424][ T5805] usb 3-1: SerialNumber: syz [ 315.257045][ T5805] usb 3-1: config 0 descriptor?? [ 315.263846][ T5805] ch341 3-1:0.0: ch341-uart converter detected [ 315.378812][ T823] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 315.528917][ T823] usb 2-1: Using ep0 maxpacket: 16 [ 315.533775][ T823] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 315.533806][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.533858][ T823] usb 2-1: Product: syz [ 315.533866][ T823] usb 2-1: Manufacturer: syz [ 315.533873][ T823] usb 2-1: SerialNumber: syz [ 315.551587][ T823] usb 2-1: config 0 descriptor?? [ 315.564415][ T823] usb-storage 2-1:0.0: USB Mass Storage device detected [ 315.599079][ T823] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 315.599097][ T823] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 315.599097][ T823] Please send a copy of this message to and [ 315.736828][ T5805] usb 3-1: failed to receive control message: -71 [ 315.736899][ T5805] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 315.745928][ T5805] usb 3-1: USB disconnect, device number 104 [ 315.751618][ T5805] ch341 3-1:0.0: device disconnected [ 315.781848][ T5801] usb 2-1: USB disconnect, device number 109 [ 316.414650][ T823] usb 4-1: USB disconnect, device number 119 [ 316.441899][ T9638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=791558714 (1583117428 ns) > initial count (655305710 ns). Using initial count to start timer. [ 316.818942][ T823] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 316.971792][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 316.971841][ T823] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 316.971863][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.976665][ T823] usb 4-1: config 0 descriptor?? [ 316.977689][ T9649] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.180375][ T9649] overlayfs: failed to resolve './file1/file0': -2 [ 317.204989][ T823] usb 4-1: string descriptor 0 read error: -71 [ 317.231677][ T823] usbhid 4-1:0.0: can't add hid device: -71 [ 317.231779][ T823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 317.253138][ T823] usb 4-1: USB disconnect, device number 120 [ 317.436334][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.436410][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.497344][ T9670] lo speed is unknown, defaulting to 1000 [ 317.706131][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.706665][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.948792][ T5801] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 318.103678][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 318.121763][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.121795][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.121832][ T5801] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 318.121854][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.147544][ T5801] usb 1-1: config 0 descriptor?? [ 318.713608][ T5801] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 318.773685][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.774227][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.878966][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.882593][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.884904][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.891099][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.055368][ T9705] nbd: socks must be embedded in a SOCK_ITEM attr [ 319.129306][ T5801] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 319.284367][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.285126][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.304682][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.309309][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 319.312269][ T5801] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.312302][ T5801] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.312326][ T5801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.312424][ T5801] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 319.312446][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.405637][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.411355][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.412106][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.415228][ T5801] usb 4-1: config 0 descriptor?? [ 319.438902][ T5724] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 319.442390][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.457946][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.511334][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.529696][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.647476][ T5797] usb 1-1: USB disconnect, device number 90 [ 319.862697][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865326][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865365][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865390][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865411][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865425][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865440][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865454][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865468][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.865482][ T5801] hkems 0003:2006:0118.0011: unknown main item tag 0x0 [ 319.934673][ T5801] hkems 0003:2006:0118.0011: hidraw0: USB HID v0.03 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 319.934706][ T5801] hkems 0003:2006:0118.0011: no inputs found [ 319.934719][ T5801] hkems 0003:2006:0118.0011: force feedback init failed [ 320.037395][ T9703] binder: 9702:9703 ioctl 400c620e 200000000280 returned -22 [ 320.039882][ T5801] usb 4-1: USB disconnect, device number 121 [ 320.077798][ T9709] fido_id[9709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 320.579892][ T5801] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 320.743170][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 320.744927][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.744978][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.745003][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.745019][ T5801] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.745031][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.746064][ T5801] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.746088][ T5801] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.746099][ T5801] usb 1-1: Manufacturer: syz [ 320.764161][ T5801] usb 1-1: config 0 descriptor?? [ 320.769738][ T5724] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 320.971652][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.971706][ T5724] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.971902][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.000567][ T5724] usb 2-1: config 0 descriptor?? [ 321.036749][ T5724] pwc: Askey VC010 type 2 USB webcam detected. [ 321.160714][ T5801] rc_core: IR keymap rc-hauppauge not found [ 321.160729][ T5801] Registered IR keymap rc-empty [ 321.160867][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.178928][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.198800][ T5797] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 321.212852][ T5801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 321.244445][ T5801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 321.284799][ T5724] pwc: recv_control_msg error -71 req 02 val 2b00 [ 321.285307][ T5724] pwc: recv_control_msg error -71 req 02 val 2700 [ 321.303020][ T5724] pwc: recv_control_msg error -71 req 02 val 2c00 [ 321.303489][ T5724] pwc: recv_control_msg error -71 req 04 val 1000 [ 321.303938][ T5724] pwc: recv_control_msg error -71 req 04 val 1300 [ 321.316837][ T5724] pwc: recv_control_msg error -71 req 04 val 1400 [ 321.340751][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 321.344784][ T5724] pwc: recv_control_msg error -71 req 02 val 2000 [ 321.351307][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.351338][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.352516][ T5797] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.352538][ T5797] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 321.352554][ T5797] usb 4-1: Manufacturer: syz [ 321.370430][ T5724] pwc: recv_control_msg error -71 req 02 val 2100 [ 321.374802][ T5797] usb 4-1: config 0 descriptor?? [ 321.398736][ T5724] pwc: recv_control_msg error -71 req 04 val 1500 [ 321.418099][ T5724] pwc: recv_control_msg error -71 req 02 val 2500 [ 321.430152][ T5724] pwc: recv_control_msg error -71 req 02 val 2400 [ 321.430604][ T5724] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.431025][ T5724] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.431464][ T5724] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.433439][ T5724] pwc: recv_control_msg error -71 req 04 val 1100 [ 321.433869][ T5724] pwc: recv_control_msg error -71 req 04 val 1200 [ 321.616643][ T5724] pwc: Registered as video103. [ 321.634688][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 321.649128][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.678819][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.691834][ T5724] usb 2-1: USB disconnect, device number 111 [ 321.693891][ C1] rc rc0: IR event FIFO is full! [ 321.694340][ C1] rc rc0: IR event FIFO is full! [ 321.694354][ C1] rc rc0: IR event FIFO is full! [ 321.694367][ C1] rc rc0: IR event FIFO is full! [ 321.694381][ C1] rc rc0: IR event FIFO is full! [ 321.694394][ C1] rc rc0: IR event FIFO is full! [ 321.694407][ C1] rc rc0: IR event FIFO is full! [ 321.694424][ C1] rc rc0: IR event FIFO is full! [ 321.694437][ C1] rc rc0: IR event FIFO is full! [ 321.694451][ C1] rc rc0: IR event FIFO is full! [ 321.694668][ C1] rc rc0: IR event FIFO is full! [ 321.694680][ C1] rc rc0: IR event FIFO is full! [ 321.694692][ C1] rc rc0: IR event FIFO is full! [ 321.694703][ C1] rc rc0: IR event FIFO is full! [ 321.694926][ C1] rc rc0: IR event FIFO is full! [ 321.695141][ C1] rc rc0: IR event FIFO is full! [ 321.695337][ C1] rc rc0: IR event FIFO is full! [ 321.695348][ C1] rc rc0: IR event FIFO is full! [ 321.695359][ C1] rc rc0: IR event FIFO is full! [ 321.695369][ C1] rc rc0: IR event FIFO is full! [ 321.695380][ C1] rc rc0: IR event FIFO is full! [ 321.695590][ C1] rc rc0: IR event FIFO is full! [ 321.695802][ C1] rc rc0: IR event FIFO is full! [ 321.695814][ C1] rc rc0: IR event FIFO is full! [ 321.695825][ C1] rc rc0: IR event FIFO is full! [ 321.696036][ C1] rc rc0: IR event FIFO is full! [ 321.696048][ C1] rc rc0: IR event FIFO is full! [ 321.696057][ C1] rc rc0: IR event FIFO is full! [ 321.696265][ C1] rc rc0: IR event FIFO is full! [ 321.696278][ C1] rc rc0: IR event FIFO is full! [ 321.696294][ C1] rc rc0: IR event FIFO is full! [ 321.696305][ C1] rc rc0: IR event FIFO is full! [ 321.696315][ C1] rc rc0: IR event FIFO is full! [ 321.696531][ C1] rc rc0: IR event FIFO is full! [ 321.696546][ C1] rc rc0: IR event FIFO is full! [ 321.696772][ C1] rc rc0: IR event FIFO is full! [ 321.696786][ C1] rc rc0: IR event FIFO is full! [ 321.696800][ C1] rc rc0: IR event FIFO is full! [ 321.696816][ C1] rc rc0: IR event FIFO is full! [ 321.696830][ C1] rc rc0: IR event FIFO is full! [ 321.699485][ C1] rc rc0: IR event FIFO is full! [ 321.699710][ C1] rc rc0: IR event FIFO is full! [ 321.699728][ C1] rc rc0: IR event FIFO is full! [ 321.699741][ C1] rc rc0: IR event FIFO is full! [ 321.699754][ C1] rc rc0: IR event FIFO is full! [ 321.699767][ C1] rc rc0: IR event FIFO is full! [ 321.699780][ C1] rc rc0: IR event FIFO is full! [ 321.699794][ C1] rc rc0: IR event FIFO is full! [ 321.700023][ C1] rc rc0: IR event FIFO is full! [ 321.700048][ C1] rc rc0: IR event FIFO is full! [ 321.700061][ C1] rc rc0: IR event FIFO is full! [ 321.700279][ C1] rc rc0: IR event FIFO is full! [ 321.700307][ C1] rc rc0: IR event FIFO is full! [ 321.700319][ C1] rc rc0: IR event FIFO is full! [ 321.700332][ C1] rc rc0: IR event FIFO is full! [ 321.700548][ C1] rc rc0: IR event FIFO is full! [ 321.700563][ C1] rc rc0: IR event FIFO is full! [ 321.804919][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.828889][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.859107][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.906602][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.958765][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.988879][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.004056][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.074027][ T5801] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.091619][ T5801] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 322.091741][ T5801] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 322.158124][ T5801] usb 1-1: USB disconnect, device number 91 [ 322.282826][ T5797] usbhid 4-1:0.0: can't add hid device: -71 [ 322.282941][ T5797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.301950][ T5797] usb 4-1: USB disconnect, device number 122 [ 322.319666][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 322.617670][ T9762] C: renamed from veth1_to_team (while UP) [ 322.667496][ T9762] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 322.667512][ T9762] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1260'. [ 322.668171][ T9762] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.774343][ T9764] ceph: Path missing in source [ 323.131462][ T5801] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 323.256532][ T38] audit: type=1800 audit(1779640358.707:14): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1271" name="/" dev="sockfs" ino=27003 res=0 errno=0 [ 323.299401][ T5801] usb 3-1: no configurations [ 323.299421][ T5801] usb 3-1: can't read configurations, error -22 [ 323.378862][ T6152] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 323.429790][ T5801] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 323.518821][ T6152] usb 1-1: device descriptor read/64, error -71 [ 323.591118][ T5801] usb 3-1: no configurations [ 323.591137][ T5801] usb 3-1: can't read configurations, error -22 [ 323.591490][ T5801] usb usb3-port1: attempt power cycle [ 323.758807][ T6152] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 323.889874][ T6152] usb 1-1: device descriptor read/64, error -71 [ 323.949905][ T5801] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 323.971841][ T5801] usb 3-1: no configurations [ 323.971862][ T5801] usb 3-1: can't read configurations, error -22 [ 324.002100][ T6152] usb usb1-port1: attempt power cycle [ 324.053046][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 324.098867][ T5801] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 324.121259][ T5801] usb 3-1: no configurations [ 324.121279][ T5801] usb 3-1: can't read configurations, error -22 [ 324.121613][ T5801] usb usb3-port1: unable to enumerate USB device [ 324.335132][ T9850] overlayfs: failed to resolve './file1': -2 [ 324.337731][ T9849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'. [ 324.341083][ T6152] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 324.359519][ T6152] usb 1-1: device descriptor read/8, error -71 [ 324.437272][ T9854] netlink: 'syz.1.1293': attribute type 17 has an invalid length. [ 324.550117][ T5797] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 324.598958][ T6152] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 324.619646][ T6152] usb 1-1: device descriptor read/8, error -71 [ 324.705258][ T5797] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 324.705277][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.705287][ T5797] usb 4-1: Product: syz [ 324.705294][ T5797] usb 4-1: Manufacturer: syz [ 324.705301][ T5797] usb 4-1: SerialNumber: syz [ 324.711310][ T5797] usb 4-1: config 0 descriptor?? [ 324.746604][ T6152] usb usb1-port1: unable to enumerate USB device [ 324.751209][ T5797] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 324.759443][ T823] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 324.920487][ T823] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.920508][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.925518][ T823] usb 2-1: config 0 descriptor?? [ 324.932372][ T823] cp210x 2-1:0.0: cp210x converter detected [ 325.344253][ T823] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 325.345224][ T823] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 325.345299][ T823] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 325.369311][ T5797] gspca_sunplus: reg_r err -71 [ 325.369402][ T5797] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 325.377629][ T823] usb 2-1: cp210x converter now attached to ttyUSB0 [ 325.379019][ T5797] usb 4-1: USB disconnect, device number 123 [ 325.965882][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.965903][ T9866] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1298'. [ 325.966314][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.966330][ T9866] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1298'. [ 325.966683][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.966696][ T9866] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1298'. [ 325.967057][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.967070][ T9866] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1298'. [ 325.967427][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.967441][ T9866] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1298'. [ 325.967785][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.968138][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 325.968490][ T9866] netlink: 'syz.3.1298': attribute type 15 has an invalid length. [ 326.518758][ T5797] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 326.577695][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.578246][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.668832][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 326.671611][ T5797] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 326.671639][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.808821][ T823] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 326.905756][ T5797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 326.910349][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.913357][ T5797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 326.913409][ T5797] usb 1-1: media controller created [ 326.958762][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 326.961936][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.963019][ T823] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 326.963043][ T823] usb 4-1: config 0 has no interface number 0 [ 326.963085][ T823] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 326.963102][ T823] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 326.963114][ T823] usb 4-1: config 0 interface 88 has no altsetting 0 [ 326.973980][ T823] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 326.974008][ T823] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 326.974026][ T823] usb 4-1: Product: syz [ 326.974040][ T823] usb 4-1: Manufacturer: syz [ 326.974053][ T823] usb 4-1: SerialNumber: syz [ 326.986990][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.993741][ T823] usb 4-1: config 0 descriptor?? [ 327.214313][ T5797] az6027: usb out operation failed. (-71) [ 327.215081][ T5797] az6027: usb out operation failed. (-71) [ 327.215095][ T5797] stb0899_attach: Driver disabled by Kconfig [ 327.215105][ T5797] az6027: no front-end attached [ 327.215105][ T5797] [ 327.216026][ T5797] az6027: usb out operation failed. (-71) [ 327.216042][ T5797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 327.227459][ T5797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 327.285068][ T5797] dvb-usb: schedule remote query interval to 400 msecs. [ 327.285125][ T5797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 327.294743][ T5797] usb 1-1: USB disconnect, device number 96 [ 327.350216][ T823] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input28 [ 327.478166][ T823] usb 4-1: USB disconnect, device number 124 [ 327.553035][ T5797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 327.595656][ T5803] usb 2-1: USB disconnect, device number 112 [ 327.627939][ T5803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 327.628338][ T5803] cp210x 2-1:0.0: device disconnected [ 328.344984][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.395461][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.400386][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.467370][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.477246][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.455790][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.610787][ T5624] Bluetooth: hci4: command tx timeout [ 330.785234][ T9894] lo speed is unknown, defaulting to 1000 [ 331.071428][ T9927] tmpfs: Bad value for 'mpol' [ 331.071785][ T9927] validate_nla: 11 callbacks suppressed [ 331.071798][ T9927] netlink: 'syz.0.1311': attribute type 21 has an invalid length. [ 331.071810][ T9927] __nla_validate_parse: 14 callbacks suppressed [ 331.071820][ T9927] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1311'. [ 331.341317][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.905770][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.610691][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.688913][ T5624] Bluetooth: hci4: command tx timeout [ 333.805210][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.805553][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.805836][ T9894] bridge_slave_0: entered allmulticast mode [ 333.810867][ T9894] bridge_slave_0: entered promiscuous mode [ 333.841539][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.841932][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.842216][ T9894] bridge_slave_1: entered allmulticast mode [ 333.850830][ T9894] bridge_slave_1: entered promiscuous mode [ 334.177863][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.209176][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.591276][ T9894] team0: Port device team_slave_0 added [ 334.606626][ T9894] team0: Port device team_slave_1 added [ 334.679273][ T822] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 334.768838][ T5624] Bluetooth: hci4: command tx timeout [ 334.841909][ T822] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.841936][ T822] usb 1-1: config 0 has no interface number 0 [ 334.841978][ T822] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.842003][ T822] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.842024][ T822] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.842049][ T822] usb 1-1: config 0 interface 1 has no altsetting 0 [ 334.842079][ T822] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 334.842101][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.926293][ T822] usb 1-1: config 0 descriptor?? [ 335.224046][ T68] bridge_slave_1: left allmulticast mode [ 335.224289][ T68] bridge_slave_1: left promiscuous mode [ 335.354016][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.554237][ T822] uclogic 0003:145F:0212.0012: pen parameters not found [ 335.554262][ T822] uclogic 0003:145F:0212.0012: interface is invalid, ignoring [ 335.593412][ T822] usb 1-1: USB disconnect, device number 97 [ 335.880188][ T68] bridge_slave_0: left allmulticast mode [ 335.913854][ T68] bridge_slave_0: left promiscuous mode [ 335.914133][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.490440][ T822] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 336.632746][ T6152] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 336.655845][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.658060][ T822] usb 4-1: not running at top speed; connect to a high speed hub [ 336.687159][ T822] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 336.687189][ T822] usb 4-1: config 0 has no interface number 0 [ 336.687222][ T822] usb 4-1: config 0 interface 30 has no altsetting 0 [ 336.700328][ T822] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=73.e6 [ 336.700358][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.700378][ T822] usb 4-1: Product: syz [ 336.700390][ T822] usb 4-1: Manufacturer: syz [ 336.700404][ T822] usb 4-1: SerialNumber: syz [ 336.759616][ T822] usb 4-1: config 0 descriptor?? [ 336.835104][ T6152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.835210][ T6152] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.835233][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.848869][ T5624] Bluetooth: hci4: command tx timeout [ 336.895857][ T6152] usb 1-1: config 0 descriptor?? [ 337.226476][ T822] qmi_wwan 4-1:0.30: probe with driver qmi_wwan failed with error -22 [ 337.231807][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 337.295224][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.295780][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.299502][ T5797] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 337.328319][ T822] usb 4-1: USB disconnect, device number 125 [ 337.452940][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.452968][ T5797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 337.453016][ T5797] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 337.453038][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.457553][ T5797] usb 3-1: config 0 descriptor?? [ 337.917896][ T5797] Bluetooth: Can't get version to change to load ram patch err [ 337.917914][ T5797] Bluetooth: Loading patch file failed [ 337.917948][ T5797] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 337.947490][ T5797] usb 3-1: USB disconnect, device number 109 [ 338.229731][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.309879][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.362008][ T68] bond0 (unregistering): Released all slaves [ 338.610650][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 338.611087][ T9993] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1324'. [ 338.611108][ T9993] veth0_to_bond: default FDB implementation only supports local addresses [ 338.658997][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.659013][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.659039][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.664781][ T6152] usbhid 1-1:0.0: can't add hid device: -71 [ 338.664937][ T6152] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 338.685622][ T6152] usb 1-1: USB disconnect, device number 98 [ 338.814496][ T822] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 338.826823][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.826842][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.826870][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.988786][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 338.991308][ T822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.992714][ T822] usb 3-1: config 4 interface 0 has no altsetting 0 [ 339.009641][ T822] usb 3-1: string descriptor 0 read error: -22 [ 339.009733][ T822] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 339.009754][ T822] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 339.022769][ T68] tipc: Left network mode [ 339.115434][ T822] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 339.198505][ T822] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.199412][ T822] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 339.199455][ T822] usb 3-1: media controller created [ 339.248821][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.348809][ T5805] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 339.376961][ T9894] hsr_slave_0: entered promiscuous mode [ 339.392823][ T9894] hsr_slave_1: entered promiscuous mode [ 339.397109][ T9894] debugfs: 'hsr0' already exists in 'hsr' [ 339.397131][ T9894] Cannot create hsr debugfs directory [ 339.478780][ T5805] usb 4-1: device descriptor read/64, error -71 [ 339.564953][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.565506][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.568225][ T822] usb 3-1: USB disconnect, device number 110 [ 339.575530][T10002] tmpfs: Group quota block hardlimit too large. [ 339.730324][ T5805] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 339.859021][ T5805] usb 4-1: device descriptor read/64, error -71 [ 339.969125][ T5805] usb usb4-port1: attempt power cycle [ 340.320514][ T5805] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 340.361536][ T5805] usb 4-1: device descriptor read/8, error -71 [ 340.598800][ T5805] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 340.623652][ T5805] usb 4-1: device descriptor read/8, error -71 [ 340.729392][ T5805] usb usb4-port1: unable to enumerate USB device [ 340.942722][T10047] tipc: Can't bind to reserved service type 2 [ 340.995250][T10047] 9p: Could not find request transport: o= [ 341.122070][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 341.389792][ T822] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 341.502594][ T6152] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 341.549949][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 341.590680][ T822] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 341.590698][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.607622][ T822] usb 3-1: config 0 descriptor?? [ 341.723948][ T6152] usb 1-1: Using ep0 maxpacket: 32 [ 341.726452][ T6152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.726472][ T6152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.726502][ T6152] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.726559][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.785858][ T6152] usb 1-1: config 0 descriptor?? [ 341.875036][ T6152] hub 1-1:0.0: USB hub found [ 341.953817][ T822] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 342.033514][ T6152] hub 1-1:0.0: 1 port detected [ 342.048082][ T822] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 342.048100][ T822] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 342.310295][ T68] hsr_slave_0: left promiscuous mode [ 342.376929][ T68] hsr_slave_1: left promiscuous mode [ 342.378176][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.378303][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.604755][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.604775][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.090055][ T68] veth1_macvtap: left promiscuous mode [ 343.098468][ T68] veth0_macvtap: left promiscuous mode [ 343.102654][ T68] veth1_vlan: left promiscuous mode [ 343.116984][ T68] veth0_vlan: left promiscuous mode [ 343.789397][ T6152] hub 1-1:0.0: activate --> -90 [ 343.795109][ T6152] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 344.149362][ T68] team0 (unregistering): Port device team_slave_1 removed [ 344.199419][ T68] team0 (unregistering): Port device team_slave_0 removed [ 344.413282][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 344.769441][ T823] usb 1-1: USB disconnect, device number 99 [ 345.432305][ T6152] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 345.558791][ T5801] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 345.582908][ T6152] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.583432][ T6152] usb 1-1: not running at top speed; connect to a high speed hub [ 345.584477][ T6152] usb 1-1: config 6 has an invalid interface number: 197 but max is 1 [ 345.584497][ T6152] usb 1-1: config 6 has an invalid interface number: 160 but max is 1 [ 345.584536][ T6152] usb 1-1: config 6 has no interface number 0 [ 345.584551][ T6152] usb 1-1: config 6 has no interface number 1 [ 345.584586][ T6152] usb 1-1: config 6 interface 197 has no altsetting 0 [ 345.584604][ T6152] usb 1-1: config 6 interface 160 has no altsetting 0 [ 345.586912][ T6152] usb 1-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 345.586939][ T6152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.586957][ T6152] usb 1-1: Product: syz [ 345.586970][ T6152] usb 1-1: Manufacturer: syz [ 345.586983][ T6152] usb 1-1: SerialNumber: syz [ 345.738936][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 345.741283][ T5801] usb 4-1: config 168 has an invalid interface number: 255 but max is 0 [ 345.741309][ T5801] usb 4-1: config 168 has an invalid descriptor of length 116, skipping remainder of the config [ 345.741327][ T5801] usb 4-1: config 168 has no interface number 0 [ 345.741411][ T5801] usb 4-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 345.741448][ T5801] usb 4-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.741470][ T5801] usb 4-1: config 168 interface 255 has no altsetting 0 [ 345.743274][ T5801] usb 4-1: config 168 has an invalid interface number: 255 but max is 0 [ 345.743365][ T5801] usb 4-1: config 168 has an invalid descriptor of length 116, skipping remainder of the config [ 345.743387][ T5801] usb 4-1: config 168 has no interface number 0 [ 345.743417][ T5801] usb 4-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 345.743528][ T5801] usb 4-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.743552][ T5801] usb 4-1: config 168 interface 255 has no altsetting 0 [ 345.745066][ T5801] usb 4-1: config 168 has an invalid interface number: 255 but max is 0 [ 345.745090][ T5801] usb 4-1: config 168 has an invalid descriptor of length 116, skipping remainder of the config [ 345.745109][ T5801] usb 4-1: config 168 has no interface number 0 [ 345.745191][ T5801] usb 4-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 345.745231][ T5801] usb 4-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.745257][ T5801] usb 4-1: config 168 interface 255 has no altsetting 0 [ 345.783233][ T5801] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.783252][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.783262][ T5801] usb 4-1: Product: syz [ 345.783269][ T5801] usb 4-1: Manufacturer: syz [ 345.783277][ T5801] usb 4-1: SerialNumber: syz [ 345.996449][ T6152] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 345.997821][ T6152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 345.997871][ T6152] dib0700: firmware download failed at 7 with -22 [ 346.043211][ T6152] hub 1-1:6.160: Invalid hub with more than one config or interface [ 346.043273][ T6152] hub 1-1:6.160: probe with driver hub failed with error -22 [ 346.065749][ T6152] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 346.108069][ T6152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 346.108155][ T6152] dib0700: firmware download failed at 7 with -22 [ 346.160853][ T6152] usb 1-1: USB disconnect, device number 100 [ 346.267082][ T5801] adutux 4-1:168.255: interrupt endpoints not found [ 346.288688][ T5801] usb 4-1: USB disconnect, device number 4 [ 346.688528][T10121] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1353'. [ 346.703899][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 346.703972][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 347.111732][ T823] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 347.111883][ T6152] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 347.262802][ T6152] usb 4-1: Using ep0 maxpacket: 16 [ 347.266191][ T823] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 347.266223][ T823] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.266247][ T823] usb 1-1: config 1 interface 0 has no altsetting 0 [ 347.275484][ T6152] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.275567][ T6152] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 347.289634][ T823] usb 1-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 347.289663][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.289681][ T823] usb 1-1: Product:  [ 347.289695][ T823] usb 1-1: Manufacturer: 䰊 [ 347.289708][ T823] usb 1-1: SerialNumber: syz [ 347.295633][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.295660][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.295697][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.296713][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.296734][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.296761][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.298094][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.298128][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.298156][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.305075][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.305100][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.305128][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.319194][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.319221][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.319253][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.334933][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.334959][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.334987][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.341782][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.341809][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.341838][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.351670][ T6152] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 347.351697][ T6152] usb 4-1: config 9 has no interface number 0 [ 347.351729][ T6152] usb 4-1: config 9 interface 57 has no altsetting 0 [ 347.354845][ T6152] usb 4-1: string descriptor 0 read error: -22 [ 347.354977][ T6152] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 347.354996][ T6152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.568969][ T823] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 347.568994][ T823] usb 1-1: no configuration chosen from 1 choice [ 347.845426][ T6152] video4linux radio48: keene_cmd_main failed (-71) [ 347.845454][ T6152] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 347.855143][ T6152] usb 4-1: USB disconnect, device number 5 [ 348.434591][ T9894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.468270][ T9894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.496122][ T9894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.545359][ T9894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.547421][ T9894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.604839][ T9894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.607085][ T9894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.803370][ T9894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.136126][T10180] kthread_run failed with err -4 [ 349.517250][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.682556][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.756147][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.756242][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.827461][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.827688][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.031288][ T5801] usb 1-1: USB disconnect, device number 101 [ 350.244705][T10214] cgroup: Name too long [ 350.599360][ T5797] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 350.750581][ T5797] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 350.750609][ T5797] usb 4-1: config 0 has no interface number 0 [ 350.750648][ T5797] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 350.752469][ T5797] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 350.752513][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 350.752532][ T5797] usb 4-1: Manufacturer: syz [ 350.752553][ T5797] usb 4-1: SerialNumber: syz [ 350.856675][ T5797] usb 4-1: config 0 descriptor?? [ 351.008056][T10214] block device autoloading is deprecated and will be removed. [ 351.111191][ T5801] usb 4-1: USB disconnect, device number 6 [ 351.227078][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.307343][ T9894] veth0_vlan: entered promiscuous mode [ 351.381482][ T9894] veth1_vlan: entered promiscuous mode [ 351.461698][ T9894] veth0_macvtap: entered promiscuous mode [ 351.470427][ T9894] veth1_macvtap: entered promiscuous mode [ 351.504848][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.532495][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.566681][ T1729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.604759][ T1729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.661857][ T1729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.663747][ T1729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.702434][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.702917][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.707478][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.707666][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.707805][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.707951][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 351.708095][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 200000ffd000-200001000000 already mapped failed -16 [ 352.255502][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 352.281968][ T5624] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 352.453497][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 352.460534][ T37] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 352.460560][ T37] usb 4-1: config 0 has no interface number 0 [ 352.463072][ T37] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 352.463099][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.463118][ T37] usb 4-1: Product: syz [ 352.463131][ T37] usb 4-1: Manufacturer: syz [ 352.463144][ T37] usb 4-1: SerialNumber: syz [ 352.504784][ T37] usb 4-1: config 0 descriptor?? [ 352.527365][ T37] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 352.996189][ T37] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 353.158124][ T37] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 353.255580][ T5797] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 353.402277][ T5797] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 353.402313][ T5797] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 353.402330][ T5797] usb 1-1: config 220 has no interface number 2 [ 353.402402][ T5797] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 353.402428][ T5797] usb 1-1: config 220 interface 0 has no altsetting 0 [ 353.402446][ T5797] usb 1-1: config 220 interface 76 has no altsetting 0 [ 353.402463][ T5797] usb 1-1: config 220 interface 1 has no altsetting 0 [ 353.496517][ T5797] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 353.496546][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.496564][ T5797] usb 1-1: Product: syz [ 353.496577][ T5797] usb 1-1: Manufacturer: syz [ 353.496590][ T5797] usb 1-1: SerialNumber: syz [ 353.990719][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 353.991596][ T5805] usb 4-1: USB disconnect, device number 7 [ 354.050387][ T5805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 354.178485][T10273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1385'. [ 354.249845][ T5805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 354.299127][ T5805] quatech2 4-1:0.51: device disconnected [ 354.415105][T10278] tmpfs: Invalid uid '0x00000000ffffffff' [ 354.494338][ T5797] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 354.494370][ T5797] uvcvideo 1-1:220.0: No valid video chain found. [ 354.494436][ T5797] usb 1-1: selecting invalid altsetting 0 [ 354.550873][ T5797] usb 1-1: selecting invalid altsetting 0 [ 354.550907][ T5797] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 354.555667][ T5797] usb 1-1: USB disconnect, device number 102 [ 354.585858][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.585878][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.748265][T10288] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1388'. [ 354.881377][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.881397][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.898352][T10285] lo speed is unknown, defaulting to 1000 [ 355.497264][T10282] binder: 10281:10282 ioctl c0306201 200000001a80 returned -14 [ 356.594320][T10321] netlink: 'syz.3.1400': attribute type 16 has an invalid length. [ 356.594334][T10321] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1400'. [ 356.598271][T10321] netlink: 'syz.3.1400': attribute type 16 has an invalid length. [ 356.598304][T10321] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1400'. [ 356.853334][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 356.929610][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929664][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929707][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929750][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929790][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929850][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929889][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929931][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.929971][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930009][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930048][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930092][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930132][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930170][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930207][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930247][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930400][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930527][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930639][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930735][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930831][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.930925][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.931019][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.931118][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.931211][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.938928][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.961352][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.961415][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.961465][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.961510][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.961554][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.977548][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 356.977613][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 357.220197][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 357.220395][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 357.529191][ T5724] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 357.684376][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.685378][ T5724] usb 2-1: not running at top speed; connect to a high speed hub [ 357.688217][ T5724] usb 2-1: config 202 has an invalid interface number: 93 but max is 0 [ 357.688243][ T5724] usb 2-1: config 202 has no interface number 0 [ 357.688288][ T5724] usb 2-1: config 202 interface 93 altsetting 4 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 357.688312][ T5724] usb 2-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid wMaxPacketSize 0 [ 357.688333][ T5724] usb 2-1: config 202 interface 93 has no altsetting 0 [ 357.749673][ T5724] usb 2-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 357.749703][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.749724][ T5724] usb 2-1: Product: syz [ 357.749739][ T5724] usb 2-1: Manufacturer: syz [ 357.749755][ T5724] usb 2-1: SerialNumber: syz [ 357.918895][ T823] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 357.981435][ T5724] pl2303 2-1:202.93: required endpoints missing [ 357.998445][ T5724] usb 2-1: USB disconnect, device number 113 [ 358.071405][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.071455][ T823] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.071470][ T823] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.071481][ T823] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.071494][ T823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.071512][ T823] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 358.071524][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.076566][ T823] usb 1-1: config 0 descriptor?? [ 358.486796][ T823] hid_parser_main: 30 callbacks suppressed [ 358.486821][ T823] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x0 [ 358.486851][ T823] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x0 [ 358.486872][ T823] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x0 [ 358.486896][ T823] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x0 [ 358.486918][ T823] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x0 [ 358.492495][ T823] corsair-psu 0003:1B1C:1C09.0013: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 358.559238][ T823] corsair-psu 0003:1B1C:1C09.0013: unable to initialize device (-38) [ 358.592745][ T823] corsair-psu 0003:1B1C:1C09.0013: probe with driver corsair-psu failed with error -38 [ 359.053360][ T5797] usb 1-1: USB disconnect, device number 103 [ 359.171640][T10372] binder: BINDER_SET_CONTEXT_MGR already set [ 359.171666][T10372] binder: 10371:10372 ioctl 4018620d 200000000040 returned -16 [ 359.756528][T10403] overlayfs: conflicting options: userxattr,metacopy=on [ 359.870947][T10405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1426'. [ 359.958025][T10409] syzkaller1: entered promiscuous mode [ 359.958050][T10409] syzkaller1: entered allmulticast mode [ 360.006302][T10405] IPVS: persistence engine module ip_vs_pe_si{ not found [ 360.238811][ T5797] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 360.369199][ T5797] usb 4-1: device descriptor read/64, error -71 [ 360.555541][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.556136][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.608866][ T5797] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 360.738830][ T5797] usb 4-1: device descriptor read/64, error -71 [ 360.780711][ T5803] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 360.815589][T10454] Invalid logical block size (8) [ 360.851914][ T5797] usb usb4-port1: attempt power cycle [ 360.896646][T10456] affs: No valid root block on device nullb0 [ 360.904951][ T5624] Bluetooth: hci4: Malformed Event: 0x13 [ 360.929611][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 360.942898][ T5803] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 360.942927][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.942946][ T5803] usb 1-1: Product:  [ 360.942960][ T5803] usb 1-1: Manufacturer: 頻秕≠턫旾嬕 [ 360.942973][ T5803] usb 1-1: SerialNumber: /傑ꍪ弆榴觟陼ш蝰ɄᏰꎦ⌅䊣卆蕺뙳剘ꑺ鷋怊韹幂霃ꘇ嵃率 [ 361.006728][ T5803] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 361.072191][ T5803] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 361.137443][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.195662][ T5724] usb 1-1: USB disconnect, device number 104 [ 361.207362][ T5797] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 361.238283][ T5797] usb 4-1: device descriptor read/8, error -71 [ 361.469843][ T5797] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 361.500686][ T5797] usb 4-1: device descriptor read/8, error -71 [ 361.609051][ T5797] usb usb4-port1: unable to enumerate USB device [ 362.250901][ T5797] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 362.398960][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 362.402144][ T5797] usb 1-1: config 8 has an invalid interface number: 85 but max is 0 [ 362.402171][ T5797] usb 1-1: config 8 has no interface number 0 [ 362.402215][ T5797] usb 1-1: config 8 interface 85 has no altsetting 0 [ 362.405784][ T5797] usb 1-1: New USB device found, idVendor=12d1, idProduct=1441, bcdDevice=6c.2c [ 362.405801][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.405811][ T5797] usb 1-1: Product: syz [ 362.405818][ T5797] usb 1-1: Manufacturer: syz [ 362.405825][ T5797] usb 1-1: SerialNumber: syz [ 362.571912][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 362.572110][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 362.597668][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 362.597867][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 362.665599][ T5797] rndis_host 1-1:8.85: invalid descriptor buffer length [ 362.665622][ T5797] rndis_host 1-1:8.85: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 362.668992][ T5797] option 1-1:8.85: GSM modem (1-port) converter detected [ 362.700539][ T5797] usb 1-1: USB disconnect, device number 105 [ 362.704482][ T5797] option 1-1:8.85: device disconnected [ 362.851400][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 362.851573][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 362.958150][T10485] loop8: detected capacity change from 0 to 7 [ 362.996935][T10485] Dev loop8: unable to read RDB block 7 [ 362.996979][T10485] loop8: unable to read partition table [ 362.997103][T10485] loop8: partition table beyond EOD, truncated [ 362.997127][T10485] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 363.005768][T10485] overlayfs: missing 'lowerdir' [ 363.297419][T10489] loop7: detected capacity change from 0 to 7 [ 363.318987][ T1729] [ 363.318999][ T1729] ====================================================== [ 363.319007][ T1729] WARNING: possible circular locking dependency detected [ 363.319021][ T1729] syzkaller #0 Tainted: G L [ 363.319042][ T1729] ------------------------------------------------------ [ 363.319048][ T1729] kworker/u8:13/1729 is trying to acquire lock: [ 363.319058][ T1729] ffff888036767078 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 363.319105][ T1729] [ 363.319105][ T1729] but task is already holding lock: [ 363.319111][ T1729] ffff88802eda54f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 363.319149][ T1729] [ 363.319149][ T1729] which lock already depends on the new lock. [ 363.319149][ T1729] [ 363.319155][ T1729] [ 363.319155][ T1729] the existing dependency chain (in reverse order) is: [ 363.319161][ T1729] [ 363.319161][ T1729] -> #5 (&p->lock){+.+.}-{4:4}: [ 363.319180][ T1729] mutex_lock_nested+0x5a/0x1d0 [ 363.319197][ T1729] seq_read_iter+0xb8/0xe20 [ 363.319213][ T1729] lo_rw_aio+0xc80/0xf00 [ 363.319232][ T1729] loop_process_work+0x92a/0x11b0 [ 363.319250][ T1729] process_one_work+0x98b/0x1630 [ 363.319270][ T1729] worker_thread+0xb49/0x1140 [ 363.319288][ T1729] kthread+0x388/0x470 [ 363.319304][ T1729] ret_from_fork+0x514/0xb70 [ 363.319330][ T1729] ret_from_fork_asm+0x1a/0x30 [ 363.319347][ T1729] [ 363.319347][ T1729] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 363.319370][ T1729] process_one_work+0x8d7/0x1630 [ 363.319389][ T1729] worker_thread+0xb49/0x1140 [ 363.319409][ T1729] kthread+0x388/0x470 [ 363.319425][ T1729] ret_from_fork+0x514/0xb70 [ 363.319439][ T1729] ret_from_fork_asm+0x1a/0x30 [ 363.319457][ T1729] [ 363.319457][ T1729] -> #3 ((wq_completion)loop8){+.+.}-{0:0}: [ 363.319478][ T1729] touch_wq_lockdep_map+0xcb/0x180 [ 363.319492][ T1729] __flush_workqueue+0x14b/0x14f0 [ 363.319504][ T1729] drain_workqueue+0xd3/0x390 [ 363.319518][ T1729] lo_release+0x287/0x8f0 [ 363.319535][ T1729] bdev_release+0x541/0x660 [ 363.319558][ T1729] blkdev_release+0x15/0x20 [ 363.319576][ T1729] __fput+0x461/0xa70 [ 363.319589][ T1729] task_work_run+0x1d9/0x270 [ 363.319604][ T1729] exit_to_user_mode_loop+0xf3/0x4d0 [ 363.319620][ T1729] do_syscall_64+0x33e/0x560 [ 363.319640][ T1729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.319656][ T1729] [ 363.319656][ T1729] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 363.319678][ T1729] mutex_lock_nested+0x5a/0x1d0 [ 363.319692][ T1729] bdev_open+0xe0/0xcc0 [ 363.319708][ T1729] bdev_file_open_by_dev+0x1be/0x240 [ 363.319726][ T1729] swsusp_check+0x56/0x490 [ 363.319742][ T1729] software_resume+0x51/0x4c0 [ 363.319762][ T1729] resume_store+0x333/0x4f0 [ 363.319774][ T1729] kernfs_fop_write_iter+0x3b0/0x540 [ 363.319794][ T1729] vfs_write+0x629/0xba0 [ 363.319811][ T1729] ksys_write+0x156/0x270 [ 363.319827][ T1729] do_syscall_64+0x15f/0x560 [ 363.319846][ T1729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.319862][ T1729] [ 363.319862][ T1729] -> #1 (system_transition_mutex){+.+.}-{4:4}: [ 363.319886][ T1729] mutex_lock_nested+0x5a/0x1d0 [ 363.319901][ T1729] lock_system_sleep+0x49/0x70 [ 363.319917][ T1729] resume_store+0x2ff/0x4f0 [ 363.319930][ T1729] kernfs_fop_write_iter+0x3b0/0x540 [ 363.319949][ T1729] vfs_write+0x629/0xba0 [ 363.319963][ T1729] ksys_write+0x156/0x270 [ 363.319978][ T1729] do_syscall_64+0x15f/0x560 [ 363.319997][ T1729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.320013][ T1729] [ 363.320013][ T1729] -> #0 (&of->mutex){+.+.}-{4:4}: [ 363.320037][ T1729] __lock_acquire+0x15a5/0x2d10 [ 363.320056][ T1729] lock_acquire+0x106/0x350 [ 363.320073][ T1729] mutex_lock_nested+0x5a/0x1d0 [ 363.320088][ T1729] kernfs_seq_start+0x5c/0x420 [ 363.320109][ T1729] traverse+0x164/0x580 [ 363.320129][ T1729] seq_read_iter+0xd09/0xe20 [ 363.320148][ T1729] lo_rw_aio+0xc80/0xf00 [ 363.320165][ T1729] loop_process_work+0x92a/0x11b0 [ 363.320183][ T1729] process_one_work+0x98b/0x1630 [ 363.320204][ T1729] worker_thread+0xb49/0x1140 [ 363.320225][ T1729] kthread+0x388/0x470 [ 363.320241][ T1729] ret_from_fork+0x514/0xb70 [ 363.320259][ T1729] ret_from_fork_asm+0x1a/0x30 [ 363.320278][ T1729] [ 363.320278][ T1729] other info that might help us debug this: [ 363.320278][ T1729] [ 363.320285][ T1729] Chain exists of: [ 363.320285][ T1729] &of->mutex --> (work_completion)(&worker->work) --> &p->lock [ 363.320285][ T1729] [ 363.320323][ T1729] Possible unsafe locking scenario: [ 363.320323][ T1729] [ 363.320328][ T1729] CPU0 CPU1 [ 363.320334][ T1729] ---- ---- [ 363.320339][ T1729] lock(&p->lock); [ 363.320349][ T1729] lock((work_completion)(&worker->work)); [ 363.320362][ T1729] lock(&p->lock); [ 363.320373][ T1729] lock(&of->mutex); [ 363.320384][ T1729] [ 363.320384][ T1729] *** DEADLOCK *** [ 363.320384][ T1729] [ 363.320389][ T1729] 3 locks held by kworker/u8:13/1729: [ 363.320400][ T1729] #0: ffff8880610f2938 ((wq_completion)loop7){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 363.320447][ T1729] #1: ffffc90006b3fc40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 363.320492][ T1729] #2: ffff88802eda54f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 363.320535][ T1729] [ 363.320535][ T1729] stack backtrace: [ 363.320550][ T1729] CPU: 1 UID: 0 PID: 1729 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 363.320657][ T1729] Tainted: [L]=SOFTLOCKUP [ 363.320666][ T1729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.320679][ T1729] Workqueue: loop7 loop_workfn [ 363.320706][ T1729] Call Trace: [ 363.320715][ T1729] [ 363.320725][ T1729] dump_stack_lvl+0xe8/0x150 [ 363.320746][ T1729] print_circular_bug+0x2e1/0x300 [ 363.320772][ T1729] check_noncircular+0x12e/0x150 [ 363.320798][ T1729] __lock_acquire+0x15a5/0x2d10 [ 363.320828][ T1729] ? kernfs_seq_start+0x5c/0x420 [ 363.320852][ T1729] lock_acquire+0x106/0x350 [ 363.320870][ T1729] ? kernfs_seq_start+0x5c/0x420 [ 363.320895][ T1729] ? kernfs_seq_start+0x5c/0x420 [ 363.320938][ T1729] ? kernfs_seq_start+0x5c/0x420 [ 363.320960][ T1729] mutex_lock_nested+0x5a/0x1d0 [ 363.320979][ T1729] ? kernfs_seq_start+0x5c/0x420 [ 363.321002][ T1729] kernfs_seq_start+0x5c/0x420 [ 363.321024][ T1729] traverse+0x164/0x580 [ 363.321045][ T1729] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 363.321068][ T1729] seq_read_iter+0xd09/0xe20 [ 363.321089][ T1729] ? __lock_acquire+0x6b5/0x2d10 [ 363.321112][ T1729] ? __asan_memset+0x22/0x50 [ 363.321144][ T1729] lo_rw_aio+0xc80/0xf00 [ 363.321169][ T1729] ? __pfx_lo_rw_aio+0x10/0x10 [ 363.321190][ T1729] ? kthread_associate_blkcg+0x490/0x600 [ 363.321210][ T1729] ? rt_spin_unlock+0x160/0x200 [ 363.321228][ T1729] loop_process_work+0x92a/0x11b0 [ 363.321253][ T1729] ? __pfx_loop_process_work+0x10/0x10 [ 363.321275][ T1729] ? add_lock_to_list+0xc7/0x100 [ 363.321298][ T1729] ? lockdep_unlock+0x5d/0xd0 [ 363.321314][ T1729] ? __lock_acquire+0x146e/0x2d10 [ 363.321343][ T1729] ? process_one_work+0x8be/0x1630 [ 363.321367][ T1729] ? process_one_work+0x8be/0x1630 [ 363.321392][ T1729] ? lock_acquire+0x221/0x350 [ 363.321413][ T1729] ? process_one_work+0x8be/0x1630 [ 363.321435][ T1729] process_one_work+0x98b/0x1630 [ 363.321468][ T1729] ? __pfx_process_one_work+0x10/0x10 [ 363.321490][ T1729] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.321514][ T1729] worker_thread+0xb49/0x1140 [ 363.321542][ T1729] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 363.321575][ T1729] kthread+0x388/0x470 [ 363.321592][ T1729] ? __pfx_worker_thread+0x10/0x10 [ 363.321614][ T1729] ? __pfx_kthread+0x10/0x10 [ 363.321634][ T1729] ret_from_fork+0x514/0xb70 [ 363.321655][ T1729] ? __pfx_ret_from_fork+0x10/0x10 [ 363.321675][ T1729] ? __switch_to+0xc79/0x1410 [ 363.321693][ T1729] ? __pfx_kthread+0x10/0x10 [ 363.321711][ T1729] ret_from_fork_asm+0x1a/0x30 [ 363.321739][ T1729] [ 363.335731][T10481] ceph: No mds server is up or the cluster is laggy [ 363.359446][ T6152] libceph: connect (1)[c::]:6789 error -101 [ 363.359572][ T6152] libceph: mon0 (1)[c::]:6789 connect error [ 363.447626][T10489] Dev loop7: unable to read RDB block 7 [ 363.447667][T10489] loop7: unable to read partition table [ 363.447874][T10489] loop7: partition table beyond EOD, truncated [ 363.450338][T10489] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 365.569028][ T5627] Bluetooth: hci1: command 0x0406 tx timeout