last executing test programs: 5m13.084877168s ago: executing program 3 (id=26): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="89", 0x1}, {&(0x7f00000003c0)="4b8f4b3b6a2fef", 0x7}], 0x2, 0x0, 0x0, 0x900}, 0x20) 5m12.504529628s ago: executing program 3 (id=30): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 5m12.263149149s ago: executing program 3 (id=31): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000080)='X', 0x1, 0x20000000, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 5m12.141569112s ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 5m12.048300325s ago: executing program 3 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 5m10.479393382s ago: executing program 3 (id=38): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 5m9.845825147s ago: executing program 32 (id=38): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 5m5.855189305s ago: executing program 0 (id=50): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000008050000010b06"], 0xa) 5m4.967390916s ago: executing program 0 (id=53): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 5m4.501602831s ago: executing program 0 (id=54): unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x800) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000240), 0x8, 0x2, 0x3000) 5m4.062493912s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5m3.754760542s ago: executing program 0 (id=57): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"A'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) creat(0x0, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f00000004c0)=0x5) 5m2.645162677s ago: executing program 0 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)='y', 0x1}], 0x1}}], 0x1, 0x4000045) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 5m1.933201448s ago: executing program 33 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)='y', 0x1}], 0x1}}], 0x1, 0x4000045) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 7.625442458s ago: executing program 1 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x11, 0x1, 0x0, 0x3e8, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x6, 0x4000000000001, 0x80000003, 0x0}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x1, 0x160) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x7f, 0x8, 0x80000000, 0x1, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r6, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x200, 0x9, 0x0, 0x48, 0x8, 0x5}, 0x9c) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000400)={0x18, r8, 0x7f, 0x8c}) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x651, 0x12c8000000000000, 0x8000009655, 0x80000001, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x15, '\b\x00', {0x1, 0x8, 0x5, 0x40}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000ae5ffffff000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f040012800800030700000106140000001000010000000000000000000084000a"], 0x90}}, 0x20050800) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x406}}}, 0x7) 6.281262657s ago: executing program 4 (id=2157): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 3.301662856s ago: executing program 1 (id=2177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)="02000900"/128, 0x80) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r5, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 3.087137923s ago: executing program 1 (id=2179): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x4, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0xa0000001, 0xff, 0xe, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x10, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fd, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xb, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="bd7000fcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x20008801}, 0x40850) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x1}, 0x14) pipe2(&(0x7f00000001c0), 0x84880) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.304566308s ago: executing program 5 (id=2195): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) 1.886733608s ago: executing program 1 (id=2188): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2f82c1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006"], 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x902f, 0x3fff}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 1.681160917s ago: executing program 2 (id=2189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000a40)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0', 0xc) 1.619367327s ago: executing program 4 (id=2190): socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x120}}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af0203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40844}, 0x8004) syz_80211_inject_frame(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r8], 0x7) 1.593242013s ago: executing program 2 (id=2191): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0xb5, 0xffffffff, 0x4, 0x4], [0x9, 0x40, 0x6, 0x8, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="700000001500040028bd7000fcdbdf255c81f5cb"], 0x70}], 0x1, 0x0, 0x0, 0x20008801}, 0x40850) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x4, 0xeffffff9, 0x7fff, 0x13, "0062ba7d8200000000000081e85dbd54c9782b"}) pipe2(&(0x7f00000001c0), 0x84880) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.555772504s ago: executing program 2 (id=2192): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.014907304s ago: executing program 5 (id=2193): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 639.256849ms ago: executing program 2 (id=2194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x45, 0x7, 0x0, 0x4, 0xff, 0x0, 0x24, 0x6, 0x6f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xc, 0x3, 0x4, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 562.017911ms ago: executing program 2 (id=2196): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)="6d6561737572652066756e633d46c94c455f434845434b20", 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="203e8f5374231fcc845c390ace2c28bdfc0f2c70a02d5405d7af833a3417"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) 318.777554ms ago: executing program 4 (id=2197): socket$inet6_sctp(0xa, 0x5, 0x84) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) recvmmsg(r1, 0x0, 0x0, 0x43, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 317.916975ms ago: executing program 5 (id=2205): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) 246.434366ms ago: executing program 4 (id=2198): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0xa, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x80000, 0x5, 0x3c5b, 0x1, 0x26, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0x7fff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0x40c8, 0xf9, 0xe, 0x82c0, 0xffffffff, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x1c, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x3, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x78, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x9, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0xd, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x401, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8000, 0x402, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x1c2, 0x1000, 0xa2, 0x7, 0xe9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x7, 0x40, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x1, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0x2, 0x5, 0x2, 0x5, 0x3, 0xfffffffc, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x0, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x0, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x1ff, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 245.534672ms ago: executing program 5 (id=2207): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x6}}}, 0x8) 195.65288ms ago: executing program 5 (id=2199): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xb3f2fc939b97e6b4, 0x4b}, "23de3b73f393a250b53dfb22d443a0e8e1f15a11b15c49c1d7d283a83f592262d080466e83395d5e592ea08a0bfc6d9d319627a70482c8f9d7db6225feedfbb18fb739f90e718e4d56a09f"}, 0x4f) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x10, 0x2}, {0x3}}}}, 0xf) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x1, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @empty}}}, 0x108) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @remote, 0x1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x2f1, @private0, 0x1}], 0x48) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xfffffffffffffff3, 0x84482) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0xb264, @local, 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e20, 0x8, @remote}}, 0x1, 0x6, 0x8000, 0x1, 0x20, 0x1, 0x4}, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000780)={r3, 0xf, 0x2, 0x672a, 0x2979, 0x13a4}, 0x14) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) getdents64(r4, 0x0, 0x0) 83.05116ms ago: executing program 5 (id=2200): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x40, 0x15}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000800)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 0s ago: executing program 2 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)={0x44, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x322}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x8d}}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x14, r7, 0x501, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x860}, 0x0) r8 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000240)={0x0, 0xffffffe, 0x100, 0x3, 0x1db}, &(0x7f0000000080)=0x0, &(0x7f0000000500)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xc855, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x51f, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x10}}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) r14 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r15 = fcntl$dupfd(r14, 0x0, r14) fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r15, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SYNC_IOC_MERGE(r12, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000c900", r13, 0xffffffffffffffff}) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r17, 0xc008ae05, &(0x7f0000000040)={0x5, 0x0, [{0x40000000, 0x3, 0x5, 0x2, 0xf, 0x5, 0x28}, {0x80000007, 0x4, 0x2, 0x8, 0x4, 0x1, 0x2}, {0x40000000, 0x800, 0x0, 0x4, 0x3, 0xfffffff0, 0x31fb}, {0x1, 0x1, 0x7, 0xe94, 0x8, 0x4, 0x1ff}, {0x80000000, 0xc166, 0x0, 0x1, 0x7fffffff, 0x1, 0x4}]}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000280)=0xfffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_FILE_INFO(r16, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): probing 174f:6a31 [ 248.614999][ T9] gspca_stk1135: reg_w 0x351 err -71 [ 248.616036][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616047][ T9] gspca_stk1135: Sensor write failed [ 248.616070][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616079][ T9] gspca_stk1135: Sensor write failed [ 248.616107][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616116][ T9] gspca_stk1135: Sensor read failed [ 248.616141][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616149][ T9] gspca_stk1135: Sensor read failed [ 248.616154][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 248.616182][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616190][ T9] gspca_stk1135: Sensor read failed [ 248.616213][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616220][ T9] gspca_stk1135: Sensor read failed [ 248.616256][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616265][ T9] gspca_stk1135: Sensor write failed [ 248.616291][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 248.616297][ T9] gspca_stk1135: Sensor write failed [ 248.616380][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 248.620058][ T9] usb 2-1: USB disconnect, device number 22 [ 248.814048][ T5695] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.006420][ T5695] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.006449][ T5695] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.006466][ T5695] usb 5-1: config 220 has no interface number 2 [ 249.006532][ T5695] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 249.006557][ T5695] usb 5-1: config 220 interface 0 has no altsetting 0 [ 249.006574][ T5695] usb 5-1: config 220 interface 76 has no altsetting 0 [ 249.006591][ T5695] usb 5-1: config 220 interface 1 has no altsetting 0 [ 249.116568][ T5695] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.116597][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.116615][ T5695] usb 5-1: Product: syz [ 249.116628][ T5695] usb 5-1: Manufacturer: syz [ 249.116641][ T5695] usb 5-1: SerialNumber: syz [ 249.428135][ T5695] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 249.428168][ T5695] uvcvideo 5-1:220.0: No valid video chain found. [ 249.428226][ T5695] usb 5-1: selecting invalid altsetting 0 [ 249.493040][ T5695] usb 5-1: selecting invalid altsetting 0 [ 249.493080][ T5695] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 249.497981][ T5695] usb 5-1: USB disconnect, device number 22 [ 250.228004][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.594'. [ 251.814403][ T5688] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 251.991569][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 251.993968][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.993991][ T5688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.997403][ T5688] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.997429][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.997448][ T5688] usb 2-1: Product: syz [ 251.997461][ T5688] usb 2-1: Manufacturer: syz [ 251.997474][ T5688] usb 2-1: SerialNumber: syz [ 252.097363][ T5688] usb 2-1: 0:2 : does not exist [ 252.310471][ T5688] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 252.453767][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.490807][ T5688] usb 2-1: USB disconnect, device number 23 [ 252.603772][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 252.606035][ T44] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 252.606063][ T44] usb 5-1: config 0 has no interface number 0 [ 252.606105][ T44] usb 5-1: config 0 interface 12 has no altsetting 0 [ 252.610655][ T44] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 252.610680][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.610700][ T44] usb 5-1: Product: syz [ 252.610713][ T44] usb 5-1: Manufacturer: syz [ 252.610727][ T44] usb 5-1: SerialNumber: syz [ 252.701075][ T44] usb 5-1: config 0 descriptor?? [ 252.748957][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.223668][ T5688] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 253.403588][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 253.434376][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.434403][ T5688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.454367][ T5688] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.454396][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.454414][ T5688] usb 2-1: Product: syz [ 253.454427][ T5688] usb 2-1: Manufacturer: syz [ 253.454440][ T5688] usb 2-1: SerialNumber: syz [ 253.581015][ T5688] usb 2-1: 0:2 : does not exist [ 253.590807][ T7995] tipc: Started in network mode [ 253.590821][ T7995] tipc: Node identity 4, cluster identity 4711 [ 253.590829][ T7995] tipc: Node number set to 4 [ 253.825299][ T5688] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 254.036822][ T5688] usb 2-1: USB disconnect, device number 24 [ 254.279151][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.337272][ T8003] netlink: 'syz.5.619': attribute type 12 has an invalid length. [ 255.807919][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808014][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.865653][ T44] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 255.865706][ T44] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 255.865723][ T44] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 255.865809][ T44] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 255.921998][ T44] usb 5-1: USB disconnect, device number 23 [ 257.581838][ T8053] netlink: 48 bytes leftover after parsing attributes in process `syz.5.632'. [ 257.581866][ T8053] netlink: 48 bytes leftover after parsing attributes in process `syz.5.632'. [ 257.994224][ T5702] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 258.841789][ T5702] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 258.841820][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.841839][ T5702] usb 5-1: Product: syz [ 258.841854][ T5702] usb 5-1: Manufacturer: syz [ 258.841868][ T5702] usb 5-1: SerialNumber: syz [ 258.903854][ T5702] usb 5-1: config 0 descriptor?? [ 258.924897][ T5702] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 259.460402][ T5702] gspca_stk1135: reg_w 0x2 err -110 [ 259.461465][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.461500][ T5702] gspca_stk1135: Sensor write failed [ 259.461839][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.461872][ T5702] gspca_stk1135: Sensor write failed [ 259.462046][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.462078][ T5702] gspca_stk1135: Sensor read failed [ 259.462241][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.462273][ T5702] gspca_stk1135: Sensor read failed [ 259.462280][ T5702] gspca_stk1135: Detected sensor type unknown (0x0) [ 259.462310][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.462341][ T5702] gspca_stk1135: Sensor read failed [ 259.462516][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.462549][ T5702] gspca_stk1135: Sensor read failed [ 259.462816][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.462849][ T5702] gspca_stk1135: Sensor write failed [ 259.463025][ T5702] gspca_stk1135: serial bus timeout: status=0x00 [ 259.463057][ T5702] gspca_stk1135: Sensor write failed [ 259.463394][ T5702] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 260.330316][ T8088] tipc: Started in network mode [ 260.330337][ T8088] tipc: Node identity 4, cluster identity 4711 [ 260.330350][ T8088] tipc: Node number set to 4 [ 261.126725][ T5600] usb 5-1: USB disconnect, device number 24 [ 261.280641][ T8097] dvmrp8: entered allmulticast mode [ 261.904740][ T5702] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 262.079667][ T5702] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.079697][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.079715][ T5702] usb 2-1: Product: syz [ 262.079728][ T5702] usb 2-1: Manufacturer: syz [ 262.079741][ T5702] usb 2-1: SerialNumber: syz [ 262.243979][ T5600] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 262.413143][ T44] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.425642][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 262.443652][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 262.443684][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.446583][ T5600] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.446612][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.446630][ T5600] usb 5-1: Product: syz [ 262.446643][ T5600] usb 5-1: Manufacturer: syz [ 262.446656][ T5600] usb 5-1: SerialNumber: syz [ 262.556242][ T5600] usb 5-1: config 0 descriptor?? [ 262.580540][ T5600] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.580634][ T5600] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 263.281543][ T37] audit: type=1807 audit(1785855073.469:9): action=measure func=FÉLE_CHECK res=0 [ 263.306054][ T5600] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 263.337397][ T37] audit: type=1802 audit(1785855073.559:10): pid=8119 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.4.654" res=0 errno=0 [ 263.340397][ T5600] em28xx 5-1:0.0: Config register raw data: 0x41 [ 263.468885][ T9] usb 2-1: USB disconnect, device number 25 [ 263.915846][ T44] usb 2-1: Service connection timeout for: 256 [ 263.915881][ T44] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 264.044748][ T44] ath9k_htc: Failed to initialize the device [ 264.052770][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 264.323012][ T8139] dvmrp8: entered allmulticast mode [ 265.036322][ T8126] ima: policy update failed [ 265.036534][ T37] audit: type=1802 audit(1785855075.249:11): pid=8126 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.4.654" res=0 errno=0 [ 265.038254][ T9] usb 5-1: USB disconnect, device number 25 [ 265.047517][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 265.277380][ T9] em28xx: Freeing device [ 265.751650][ T9] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 267.054459][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.054503][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.054523][ T9] usb 5-1: Product: syz [ 267.054550][ T9] usb 5-1: Manufacturer: syz [ 267.054570][ T9] usb 5-1: SerialNumber: syz [ 267.083577][ T9] usb 5-1: config 0 descriptor?? [ 267.246146][ T5605] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 267.277771][ T5605] Bluetooth: hci2: Injecting HCI hardware error event [ 267.297810][ T5608] Bluetooth: hci2: hardware error 0x00 [ 267.316710][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.735869][ T8184] netlink: 'syz.5.676': attribute type 1 has an invalid length. [ 267.788732][ T5605] Bluetooth: hci2: status 0xff [ 267.788951][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -38 [ 267.880706][ T8184] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.881274][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.881647][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.882003][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.882357][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.882821][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.883250][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 267.891487][ T8184] netlink: 'syz.5.676': attribute type 5 has an invalid length. [ 267.948872][ T8188] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 269.370421][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 269.378948][ T9] usb 5-1: USB disconnect, device number 26 [ 269.383548][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.547395][ T44] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 269.547424][ T44] usb 2-1: config 0 has no interface number 0 [ 269.547455][ T44] usb 2-1: too many endpoints for config 0 interface 234 altsetting 219: 74, using maximum allowed: 30 [ 269.547488][ T44] usb 2-1: config 0 interface 234 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 269.547503][ T44] usb 2-1: config 0 interface 234 has no altsetting 0 [ 269.551069][ T44] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 269.551098][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.551108][ T44] usb 2-1: Product: syz [ 269.551115][ T44] usb 2-1: Manufacturer: syz [ 269.551123][ T44] usb 2-1: SerialNumber: syz [ 269.637990][ T44] usb 2-1: config 0 descriptor?? [ 269.642657][ T44] peak_usb 2-1:0.234: probe with driver peak_usb failed with error 234 [ 269.847952][ T9] usb 2-1: USB disconnect, device number 26 [ 270.193621][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 270.343574][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 270.346811][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.346835][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.351472][ T44] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 270.351500][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.351519][ T44] usb 5-1: Product: syz [ 270.351532][ T44] usb 5-1: Manufacturer: syz [ 270.351545][ T44] usb 5-1: SerialNumber: syz [ 270.552984][ T8264] tipc: Started in network mode [ 270.553005][ T8264] tipc: Node identity 4, cluster identity 4711 [ 270.553017][ T8264] tipc: Node number set to 4 [ 270.756492][ T44] usb 5-1: USB disconnect, device number 27 [ 273.834587][ T5763] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 273.978601][ T44] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 274.000041][ T5763] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 274.000072][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.040588][ T5763] usb 5-1: config 0 descriptor?? [ 274.062824][ T5763] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 274.125765][ T44] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 274.125791][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.125810][ T44] usb 2-1: config 0 has no interface number 0 [ 274.126375][ T44] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.164558][ T44] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 274.164588][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.164607][ T44] usb 2-1: Product: syz [ 274.164621][ T44] usb 2-1: Manufacturer: syz [ 274.164634][ T44] usb 2-1: SerialNumber: syz [ 274.203677][ T44] usb 2-1: config 0 descriptor?? [ 274.312891][ T5763] usb 5-1: USB disconnect, device number 28 [ 274.377918][ T44] asix 2-1:0.251: probe with driver asix failed with error -22 [ 274.440573][ T44] usb 2-1: USB disconnect, device number 27 [ 275.539978][ T8459] comedi comedi2: pcmmio: I/O port conflict (0x40,32) [ 276.280556][ T8498] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 276.403301][ T8503] comedi comedi1: board detection failed [ 277.387542][ T8542] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 277.387563][ T8542] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.533312][ T8583] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 280.224142][ T5763] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 280.399286][ T5763] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 280.399322][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.399347][ T5763] usb 2-1: Product: syz [ 280.399360][ T5763] usb 2-1: Manufacturer: syz [ 280.399373][ T5763] usb 2-1: SerialNumber: syz [ 280.753808][ T5688] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.849040][ T5763] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 280.849100][ T5763] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 280.849518][ T5763] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 280.849556][ T5763] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 280.850240][ T5763] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.876603][ T5763] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 280.914821][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 280.916299][ T5763] usb 2-1: USB disconnect, device number 28 [ 280.926441][ T5688] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.926473][ T5688] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.926504][ T5688] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 280.926526][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.015950][ T5688] usb 5-1: config 0 descriptor?? [ 281.439886][ T5688] belkin 0003:050D:3201.0006: global environment stack underflow [ 281.439908][ T5688] belkin 0003:050D:3201.0006: item 0 4 1 11 parsing failed [ 281.450704][ T5688] belkin 0003:050D:3201.0006: parse failed [ 281.450786][ T5688] belkin 0003:050D:3201.0006: probe with driver belkin failed with error -22 [ 281.633028][ T44] usb 5-1: USB disconnect, device number 29 [ 282.223851][ T5688] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.376753][ T5688] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.376810][ T5688] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 282.376833][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.430548][ T5688] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 283.333610][ T44] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 283.484287][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 283.487446][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.487499][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.487526][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.487546][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.487567][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.488724][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.488750][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.488768][ T44] usb 5-1: Manufacturer: syz [ 283.495889][ T44] usb 5-1: config 0 descriptor?? [ 283.680416][ T5688] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 283.680443][ T5688] stv0680 2-1:4.0: last error: 2, command = 0x4 [ 283.707244][ T5688] usb 2-1: USB disconnect, device number 29 [ 283.803688][ T44] rc_core: IR keymap rc-hauppauge not found [ 283.803711][ T44] Registered IR keymap rc-empty [ 283.803859][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.823717][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.844834][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 283.846769][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 283.849333][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.863888][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.883743][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.903810][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.923780][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.950620][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.967764][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.992212][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.003638][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.025166][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 284.064756][ T44] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.064782][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.276785][ T44] usb 5-1: USB disconnect, device number 30 [ 284.674449][ T5600] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 284.833811][ T5600] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 284.833842][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.833861][ T5600] usb 2-1: Product: syz [ 284.833874][ T5600] usb 2-1: Manufacturer: syz [ 284.833888][ T5600] usb 2-1: SerialNumber: syz [ 284.845655][ T5600] usb 2-1: config 0 descriptor?? [ 285.253729][ T44] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.403533][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 285.416512][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.419840][ T44] usb 5-1: config 4 interface 0 has no altsetting 0 [ 285.444786][ T44] usb 5-1: string descriptor 0 read error: -22 [ 285.444940][ T44] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 285.444963][ T44] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 285.476939][ T44] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 285.522645][ T5600] usb 2-1: Firmware version (0.0) predates our first public release. [ 285.522670][ T5600] usb 2-1: Please update to version 0.2 or newer [ 285.599788][ T44] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.600050][ T44] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 285.600079][ T44] usb 5-1: media controller created [ 285.628965][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'. [ 285.629027][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'. [ 285.712449][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.702295][ T5600] usb 2-1: USB disconnect, device number 30 [ 286.976631][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 287.071191][ T44] usb 5-1: USB disconnect, device number 31 [ 287.814857][ T5600] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 287.971056][ T5600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.971105][ T5600] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 287.971128][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.028187][ T5600] usb 2-1: config 0 descriptor?? [ 288.481243][ T5600] hid_parser_main: 31 callbacks suppressed [ 288.481266][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481304][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481325][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481347][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481371][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481394][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481418][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481442][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481466][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.481491][ T5600] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 288.746636][ T5600] koneplus 0003:1E7D:2E22.0007: hidraw0: USB HID v7f.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 288.750172][ T5600] koneplus 0003:1E7D:2E22.0007: couldn't init struct koneplus_device [ 288.750228][ T5600] koneplus 0003:1E7D:2E22.0007: couldn't install mouse [ 288.850446][ T5600] koneplus 0003:1E7D:2E22.0007: probe with driver koneplus failed with error -71 [ 288.876291][ T5600] usb 2-1: USB disconnect, device number 31 [ 288.946926][ T8852] fido_id[8852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 289.606618][ T5688] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 289.783765][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 289.789522][ T5688] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.789547][ T5688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.791943][ T5688] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.791971][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.791990][ T5688] usb 5-1: Product: syz [ 289.792004][ T5688] usb 5-1: Manufacturer: syz [ 289.792018][ T5688] usb 5-1: SerialNumber: syz [ 289.906421][ T5688] usb 5-1: 0:2 : does not exist [ 290.099510][ T5688] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 290.150075][ T8903] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 290.231405][ T5688] usb 5-1: USB disconnect, device number 32 [ 290.233996][ T8903] tipc: Enabled bearer , priority 10 [ 290.324873][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.443753][ T5763] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 290.605479][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 290.605526][ T5763] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 290.605548][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.613394][ T5763] usb 2-1: config 0 descriptor?? [ 291.032275][ T8916] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 291.032293][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.071526][ T5763] kye 0003:0458:0138.0008: unexpected long global item [ 291.072190][ T5763] kye 0003:0458:0138.0008: parse failed [ 291.072261][ T5763] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 291.099300][ T8919] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 291.099327][ T8919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.116691][ T8922] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 291.116717][ T8922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.116867][ T8922] vhci_hcd vhci_hcd.0: Device attached [ 291.120525][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 291.125989][ T8919] vhci_hcd vhci_hcd.0: Device attached [ 291.127342][ T8923] vhci_hcd: connection closed [ 291.138022][ T8920] vhci_hcd: connection closed [ 291.140084][ T8917] vhci_hcd: connection closed [ 291.183786][ T8132] vhci_hcd vhci_hcd.4: stop threads [ 291.184799][ T8132] vhci_hcd vhci_hcd.4: release socket [ 291.184890][ T8132] vhci_hcd vhci_hcd.4: disconnect device [ 291.185838][ T8132] vhci_hcd vhci_hcd.4: stop threads [ 291.185853][ T8132] vhci_hcd vhci_hcd.4: release socket [ 291.185885][ T8132] vhci_hcd vhci_hcd.4: disconnect device [ 291.187106][ T8132] vhci_hcd vhci_hcd.4: stop threads [ 291.187115][ T8132] vhci_hcd vhci_hcd.4: release socket [ 291.187135][ T8132] vhci_hcd vhci_hcd.4: disconnect device [ 291.270704][ T44] usb 2-1: USB disconnect, device number 32 [ 291.944105][ T5600] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 292.095524][ T5600] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.095556][ T5600] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.095578][ T5600] usb 5-1: config 2 interface 0 has no altsetting 0 [ 292.095608][ T5600] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 292.095631][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.531808][ T5600] elo 0003:04E7:0009.0009: item fetching failed at offset 2/5 [ 292.532495][ T5600] elo 0003:04E7:0009.0009: parse failed [ 292.532606][ T5600] elo 0003:04E7:0009.0009: probe with driver elo failed with error -22 [ 292.749253][ T5695] usb 5-1: USB disconnect, device number 33 [ 292.983666][ T5763] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 293.155884][ T5763] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 293.155915][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 293.155939][ T5763] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 293.158480][ T5763] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 293.158507][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.158517][ T5763] usb 2-1: Product: syz [ 293.158525][ T5763] usb 2-1: Manufacturer: syz [ 293.158532][ T5763] usb 2-1: SerialNumber: syz [ 293.162212][ T5763] usb 2-1: config 0 descriptor?? [ 293.164284][ T8973] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 293.164404][ T8973] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 293.256463][ T5763] usb 2-1: ucan: probing device on interface #0 [ 293.596029][ T5695] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 293.744421][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 293.746807][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.746838][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.746904][ T5695] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 293.746917][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.779849][ T5763] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 293.832021][ T5695] usb 5-1: config 0 descriptor?? [ 293.843120][ T5763] usb 2-1: USB disconnect, device number 33 [ 293.855061][ T5695] hub 5-1:0.0: USB hub found [ 294.046121][ T5695] hub 5-1:0.0: 1 port detected [ 294.247413][ T5695] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 294.247441][ T5695] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 294.272272][ T5695] usbhid 5-1:0.0: can't add hid device: -71 [ 294.272390][ T5695] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 294.339151][ T5695] usb 5-1: USB disconnect, device number 34 [ 294.655118][ T5763] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 294.817002][ T5763] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.817033][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.817053][ T5763] usb 2-1: Product: syz [ 294.817066][ T5763] usb 2-1: Manufacturer: syz [ 294.817080][ T5763] usb 2-1: SerialNumber: syz [ 294.903795][ T5695] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.781230][ T44] usb 2-1: USB disconnect, device number 34 [ 295.854887][ T9039] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.864986][ T9040] tipc: Started in network mode [ 295.865007][ T9040] tipc: Node identity 2007ff, cluster identity 4711 [ 295.865019][ T9040] tipc: Node number set to 2099199 [ 296.098396][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1065'. [ 296.099510][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1065'. [ 296.193722][ T5695] usb 2-1: Service connection timeout for: 256 [ 296.193747][ T5695] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 296.277399][ T5695] ath9k_htc: Failed to initialize the device [ 296.277705][ T44] usb 2-1: ath9k_htc: USB layer deinitialized [ 296.463617][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 296.625745][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 296.625794][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 296.625817][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.631146][ T9] usb 5-1: config 0 descriptor?? [ 297.062586][ T9] hid_parser_main: 223 callbacks suppressed [ 297.062610][ T9] kye 0003:0458:0138.000A: unknown main item tag 0x3 [ 297.062636][ T9] kye 0003:0458:0138.000A: unexpected long global item [ 297.063351][ T9] kye 0003:0458:0138.000A: parse failed [ 297.065220][ T9] kye 0003:0458:0138.000A: probe with driver kye failed with error -22 [ 297.256799][ T5600] usb 5-1: USB disconnect, device number 35 [ 298.124748][ T5600] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 298.283526][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 298.286027][ T5600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.286052][ T5600] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.289783][ T5600] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.289811][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.289831][ T5600] usb 5-1: Product: syz [ 298.289844][ T5600] usb 5-1: Manufacturer: syz [ 298.289858][ T5600] usb 5-1: SerialNumber: syz [ 298.366517][ T5600] usb 5-1: 0:2 : does not exist [ 298.568787][ T5600] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 298.728626][ T5600] usb 5-1: USB disconnect, device number 36 [ 299.403571][ T5695] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 299.413673][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 299.554165][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 299.558044][ T5695] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 299.558063][ T5695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.558073][ T5695] usb 2-1: config 0 has no interface number 0 [ 299.560954][ T5695] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 299.560981][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.560995][ T5695] usb 2-1: Product: syz [ 299.561002][ T5695] usb 2-1: Manufacturer: syz [ 299.561009][ T5695] usb 2-1: SerialNumber: syz [ 299.572139][ T5695] usb 2-1: config 0 descriptor?? [ 299.625077][ T5695] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 299.625253][ T5695] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 299.625329][ T5695] uvcvideo 2-1:0.31: No valid video chain found. [ 299.652198][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.652266][ T9] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 1280, setting to 64 [ 299.652288][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 299.676003][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 299.676031][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.676049][ T9] usb 5-1: Product: syz [ 299.676143][ T9] usb 5-1: Manufacturer: syz [ 299.676157][ T9] usb 5-1: SerialNumber: syz [ 299.706600][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 299.722262][ T9] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 299.724366][ T9] scsi host1: usb-storage 5-1:1.0 [ 299.823084][ T5600] usb 2-1: USB disconnect, device number 35 [ 299.902302][ T32] usb 5-1: USB disconnect, device number 37 [ 300.467332][ T9133] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 301.143683][ T9] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 301.300721][ T9] usb 2-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 301.300753][ T9] usb 2-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.300777][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.300804][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 301.300822][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.332574][ T9] usb 2-1: config 0 descriptor?? [ 301.333764][ T9144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.851401][ T9] holtek_mouse 0003:04D9:A070.000B: unknown main item tag 0x2 [ 301.851441][ T9] holtek_mouse 0003:04D9:A070.000B: global environment stack underflow [ 301.851456][ T9] holtek_mouse 0003:04D9:A070.000B: item 0 4 1 11 parsing failed [ 301.852182][ T9] holtek_mouse 0003:04D9:A070.000B: hid parse failed: -22 [ 301.852262][ T9] holtek_mouse 0003:04D9:A070.000B: probe with driver holtek_mouse failed with error -22 [ 302.013618][ T5600] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 302.161705][ T9] usb 2-1: USB disconnect, device number 36 [ 302.188117][ T5600] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.188146][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.188164][ T5600] usb 5-1: Product: syz [ 302.188177][ T5600] usb 5-1: Manufacturer: syz [ 302.188191][ T5600] usb 5-1: SerialNumber: syz [ 302.266942][ T5702] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 303.892361][ T5702] usb 5-1: Service connection timeout for: 256 [ 303.892386][ T5702] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 303.958255][ T5600] usb 5-1: USB disconnect, device number 38 [ 304.053728][ T5702] ath9k_htc: Failed to initialize the device [ 304.054031][ T5600] usb 5-1: ath9k_htc: USB layer deinitialized [ 304.943721][ T821] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 305.003606][ T5702] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 305.127572][ T821] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 305.127602][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.127621][ T821] usb 2-1: Product: syz [ 305.127634][ T821] usb 2-1: Manufacturer: syz [ 305.127646][ T821] usb 2-1: SerialNumber: syz [ 305.153780][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 305.175666][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.175715][ T5702] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 305.175737][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.176229][ T821] ums-karma 2-1:1.0: USB Mass Storage device detected [ 305.196144][ T5702] usb 5-1: config 0 descriptor?? [ 305.241836][ T821] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 305.241836][ T821] Please send a copy of this message to and [ 305.607760][ T821] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 305.651593][ T5702] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 305.778385][ T5695] usb 2-1: USB disconnect, device number 37 [ 306.045723][ T9207] fuse: Bad value for 'fd' [ 306.066300][ T5702] usb 5-1: USB disconnect, device number 39 [ 306.775091][ T5695] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 306.963528][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 306.973847][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.973873][ T5695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.983608][ T5695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.983637][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.983656][ T5695] usb 2-1: Product: syz [ 306.983669][ T5695] usb 2-1: Manufacturer: syz [ 306.983682][ T5695] usb 2-1: SerialNumber: syz [ 307.095304][ T5695] usb 2-1: 0:2 : does not exist [ 307.283510][ T5695] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 307.476123][ T5695] usb 2-1: USB disconnect, device number 38 [ 307.698195][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.013629][ T5702] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 308.163622][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 308.166838][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 308.186293][ T5702] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 308.186326][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.186346][ T5702] usb 5-1: Product: syz [ 308.186360][ T5702] usb 5-1: Manufacturer: syz [ 308.186373][ T5702] usb 5-1: SerialNumber: syz [ 308.373600][ T5600] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 308.565688][ T5600] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.565718][ T5600] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 308.565738][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.565801][ T5600] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.565826][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 308.565851][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.567606][ T5600] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.567635][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.567653][ T5600] usb 2-1: Product: syz [ 308.567666][ T5600] usb 2-1: Manufacturer: syz [ 308.586874][ T5702] usb 5-1: BAAD HEADSET c_chmask mismatch [ 308.603843][ T9255] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 308.607134][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 308.607152][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 308.629615][ T5600] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 308.629638][ T5600] cdc_wdm 2-1:1.0: Unknown control protocol [ 308.958237][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.958363][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.958824][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.958845][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.959117][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.959137][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.959377][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.959396][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.959619][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.959637][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.959929][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.959947][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.960159][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.960177][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.960389][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.960406][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.960616][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.960633][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.960844][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.960861][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 309.148657][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 309.172006][ T821] usb 2-1: USB disconnect, device number 39 [ 309.485125][ T5702] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 309.503853][ T5702] usb 5-1: USB disconnect, device number 40 [ 309.549581][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.124068][ T9291] capability: warning: `syz.1.1166' uses deprecated v2 capabilities in a way that may be insecure [ 310.733648][ T5695] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 310.920719][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.920760][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.943187][ T5695] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 310.943229][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.943249][ T5695] usb 5-1: Product: syz [ 310.943262][ T5695] usb 5-1: Manufacturer: syz [ 310.943274][ T5695] usb 5-1: SerialNumber: syz [ 310.988500][ T5695] usb 5-1: config 0 descriptor?? [ 311.001862][ T5695] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 311.026675][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.038217][ T5695] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 311.038276][ T5695] usb 5-1: media controller created [ 311.144842][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.212243][ T5695] DVB: Unable to find symbol tda10046_attach() [ 311.212258][ T5695] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 311.212272][ T5695] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 311.819351][ T5695] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 311.847621][ T5702] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 311.903174][ T5695] usb 5-1: USB disconnect, device number 41 [ 312.019045][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.020196][ T5702] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 312.054196][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 312.054339][ T5702] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 312.054362][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.980093][ T5702] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 313.018489][ T5702] usb 2-1: USB disconnect, device number 40 [ 314.175709][ T32] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 314.340739][ T32] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 314.340769][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.349215][ T32] usb 2-1: config 0 descriptor?? [ 314.600750][ T32] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 314.638453][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1228'. [ 315.152880][ T9449] netlink: 730 bytes leftover after parsing attributes in process `syz.2.1235'. [ 315.242841][ T32] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 315.242865][ T32] [drm] Initialized udl on minor 2 [ 315.349320][ T32] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 315.463385][ T32] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 315.691269][ T32] usb 2-1: USB disconnect, device number 41 [ 315.702916][ T5600] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 315.706448][ T5600] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 315.961725][ T9470] loop8: detected capacity change from 0 to 7 [ 316.220151][ T9470] Dev loop8: unable to read RDB block 7 [ 316.220194][ T9470] loop8: unable to read partition table [ 316.220386][ T9470] loop8: partition table beyond EOD, truncated [ 316.220417][ T9470] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 316.293993][ T6619] Flush: task=udevd[6619] dev=loop8 state=2 [ 316.451510][ T6619] Teardown: task=udevd[6619] dev=loop8 state=2 [ 316.712439][ T9493] veth1_to_bond: entered allmulticast mode [ 316.712807][ T9493] veth1_to_bond: left allmulticast mode [ 316.815611][ T5695] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 316.868073][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 316.984160][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 316.985985][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.986015][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.986052][ T5695] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 316.986075][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.991841][ T5695] usb 2-1: config 0 descriptor?? [ 317.266842][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273837][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.508509][ T5695] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 317.508545][ T5695] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 317.691159][ T5695] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 317.894473][ T5695] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 318.003674][ T5763] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 318.094856][ T5695] ft260 0003:0403:6030.000D: failed to retrieve status: -71, no wakeup [ 318.097048][ T5695] ft260 0003:0403:6030.000D: failed to retrieve status: -71 [ 318.099186][ T5695] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 318.181633][ T5763] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 318.181661][ T5763] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 318.181679][ T5763] usb 5-1: config 220 has no interface number 2 [ 318.181716][ T5763] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 318.181730][ T5763] usb 5-1: config 220 interface 0 has no altsetting 0 [ 318.181739][ T5763] usb 5-1: config 220 interface 76 has no altsetting 0 [ 318.181748][ T5763] usb 5-1: config 220 interface 1 has no altsetting 0 [ 318.192461][ T5763] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 318.192491][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.192510][ T5763] usb 5-1: Product: syz [ 318.192523][ T5763] usb 5-1: Manufacturer: syz [ 318.192537][ T5763] usb 5-1: SerialNumber: syz [ 318.393247][ T5695] usb 2-1: USB disconnect, device number 42 [ 318.550284][ T5763] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 318.550354][ T5763] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 318.550385][ T5763] uvcvideo 5-1:220.0: No valid video chain found. [ 318.550444][ T5763] usb 5-1: selecting invalid altsetting 0 [ 318.627439][ T5763] usb 5-1: selecting invalid altsetting 0 [ 318.627463][ T5763] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 318.658252][ T5763] usb 5-1: USB disconnect, device number 42 [ 318.713225][ T9547] loop8: detected capacity change from 0 to 7 [ 318.739035][ T9547] Dev loop8: unable to read RDB block 7 [ 318.739071][ T9547] loop8: unable to read partition table [ 318.739234][ T9547] loop8: partition table beyond EOD, truncated [ 318.739257][ T9547] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 318.759454][ T6619] Flush: task=udevd[6619] dev=loop8 state=2 [ 318.847405][ T6619] Teardown: task=udevd[6619] dev=loop8 state=2 [ 319.094111][ T821] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 319.242426][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 319.248772][ T821] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 319.248800][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.248817][ T821] usb 2-1: Product: syz [ 319.248830][ T821] usb 2-1: Manufacturer: syz [ 319.248843][ T821] usb 2-1: SerialNumber: syz [ 319.273223][ T821] usb 2-1: config 0 descriptor?? [ 319.330178][ T821] gspca_main: spca508-2.14.0 probing 041e:4018 [ 319.383667][ T5702] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 319.538307][ T821] gspca_spca508: reg_read err -32 [ 319.539276][ T5702] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 319.539303][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.539937][ T821] gspca_spca508: reg_read err -32 [ 319.540856][ T821] gspca_spca508: reg_read err -32 [ 319.587921][ T5702] usb 5-1: config 0 descriptor?? [ 319.601667][ T5702] pwc: Creative Labs Webcam 5 detected. [ 319.743274][ T821] gspca_spca508: reg_read err -71 [ 319.750298][ T821] gspca_spca508: reg write: error -71 [ 319.750389][ T821] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 319.760428][ T821] usb 2-1: USB disconnect, device number 43 [ 320.215850][ T5702] pwc: recv_control_msg error -32 req 02 val 2b00 [ 320.420213][ T5702] pwc: recv_control_msg error -71 req 04 val 1600 [ 320.427384][ T5702] pwc: recv_control_msg error -71 req 02 val 2c00 [ 320.429536][ T5702] pwc: recv_control_msg error -71 req 04 val 1000 [ 320.429887][ T5702] pwc: recv_control_msg error -71 req 04 val 1300 [ 320.430214][ T5702] pwc: recv_control_msg error -71 req 04 val 1400 [ 320.430550][ T5702] pwc: recv_control_msg error -71 req 02 val 2000 [ 320.430867][ T5702] pwc: recv_control_msg error -71 req 02 val 2100 [ 320.431181][ T5702] pwc: recv_control_msg error -71 req 06 val 0600 [ 320.476723][ T5702] pwc: recv_control_msg error -71 req 04 val 1500 [ 320.485120][ T5702] pwc: recv_control_msg error -71 req 02 val 2500 [ 320.490178][ T5702] pwc: recv_control_msg error -71 req 02 val 2400 [ 320.498372][ T5702] pwc: recv_control_msg error -71 req 02 val 2600 [ 320.504856][ T5702] pwc: recv_control_msg error -71 req 02 val 2900 [ 320.519331][ T5702] pwc: recv_control_msg error -71 req 02 val 2800 [ 320.520110][ T5702] pwc: recv_control_msg error -71 req 04 val 1100 [ 320.520577][ T5702] pwc: recv_control_msg error -71 req 04 val 1200 [ 320.521251][ T5702] pwc: Failed to power off camera (-71) [ 320.573678][ T5600] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 320.630144][ T5702] pwc: Registered as video103. [ 320.656362][ T5702] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 320.681504][ T5702] usb 5-1: USB disconnect, device number 43 [ 320.731369][ T5600] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.731396][ T5600] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.731415][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.731464][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.731489][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 320.743071][ T5600] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.743103][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.743123][ T5600] usb 2-1: Product: syz [ 320.743137][ T5600] usb 2-1: Manufacturer: syz [ 320.839657][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 320.839676][ T5600] cdc_wdm 2-1:1.0: skipping garbage [ 320.889828][ T5600] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 320.889849][ T5600] cdc_wdm 2-1:1.0: Unknown control protocol [ 321.141698][ T5763] usb 2-1: USB disconnect, device number 44 [ 321.142729][ C1] wdm_int_callback: 518 callbacks suppressed [ 321.142751][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 321.142767][ C1] wdm_int_callback: 518 callbacks suppressed [ 321.142781][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 321.142795][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 321.635563][ T5702] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 321.783565][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 321.786347][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 321.786380][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.791114][ T5702] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.791143][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.791163][ T5702] usb 5-1: Product: syz [ 321.791175][ T5702] usb 5-1: Manufacturer: syz [ 321.791189][ T5702] usb 5-1: SerialNumber: syz [ 321.865322][ T5702] usb 5-1: config 0 descriptor?? [ 321.871567][ T5702] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.871601][ T5702] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 322.493231][ T5702] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 322.494206][ T5702] em28xx 5-1:0.0: Config register raw data: 0xf7 [ 322.494224][ T5702] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 322.494239][ T5702] em28xx 5-1:0.0: No AC97 audio processor [ 322.707542][ T5702] usb 5-1: USB disconnect, device number 44 [ 324.626486][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.073601][ T5702] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 325.223674][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 325.226071][ T5702] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 325.226124][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.226147][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.226170][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.226193][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.226299][ T5702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.226321][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.498568][ T5702] usb 5-1: usb_control_msg returned -32 [ 325.498597][ T5702] usbtmc 5-1:16.0: can't read capabilities [ 325.728525][ T5763] usb 5-1: USB disconnect, device number 45 [ 325.888565][ T821] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 326.024731][ T821] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.040768][ T9813] netlink: 'syz.4.1386': attribute type 27 has an invalid length. [ 327.244095][ T5763] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 327.417729][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.417756][ T5763] usb 2-1: config 0 has no interfaces? [ 327.419452][ T5763] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.419477][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.419497][ T5763] usb 2-1: Product: syz [ 327.419510][ T5763] usb 2-1: Manufacturer: syz [ 327.426037][ T5763] usb 2-1: config 0 descriptor?? [ 327.525006][ T5702] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 327.673553][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 327.692978][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.723086][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.723163][ T5702] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 327.723200][ T5702] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.730813][ T5702] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 327.730842][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.730861][ T5702] usb 5-1: Product: syz [ 327.730885][ T5702] usb 5-1: Manufacturer: syz [ 327.730898][ T5702] usb 5-1: SerialNumber: syz [ 328.037257][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.037838][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.059276][ T5763] usb 2-1: USB disconnect, device number 45 [ 328.138741][ T5702] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 328.139055][ T5702] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 328.491216][ T5702] usb 5-1: 2:1 : can't get Cluster Descriptor [ 328.700011][ T5763] usb 5-1: USB disconnect, device number 46 [ 329.550533][ T9871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1413'. [ 329.552992][ T9870] overlayfs: failed to clone upperpath [ 329.606296][ T9872] overlayfs: failed to clone upperpath [ 329.985428][ T9889] misc userio: Begin command sent, but we're already running [ 330.143671][ T5702] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 330.296945][ T5702] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 330.296992][ T5702] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 330.297018][ T5702] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 330.297043][ T5702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.297082][ T5702] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 330.297104][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.319736][ T5702] usb 2-1: config 0 descriptor?? [ 330.320900][ T9884] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.613720][ T32] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 330.731523][ T5702] playstation 0003:054C:05C4.000F: unknown main item tag 0x0 [ 330.731548][ T5702] playstation 0003:054C:05C4.000F: reserved main item tag 0xe [ 330.731593][ T5702] playstation 0003:054C:05C4.000F: unknown main item tag 0x2 [ 330.770385][ T5702] playstation 0003:054C:05C4.000F: hidraw0: USB HID v0.0c Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 330.786333][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.786385][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.786406][ T32] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 330.786426][ T32] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.786463][ T32] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 330.786485][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.815660][ T32] opticon 5-1:1.0: opticon converter detected [ 330.915978][ T32] usb 5-1: opticon converter now attached to ttyUSB0 [ 330.950067][ T5702] playstation 0003:054C:05C4.000F: Failed to retrieve feature with reportID 18: -71 [ 330.950094][ T5702] playstation 0003:054C:05C4.000F: Failed to retrieve DualShock4 pairing info: -71 [ 330.950144][ T5702] playstation 0003:054C:05C4.000F: Failed to get MAC address from DualShock4 [ 330.950158][ T5702] playstation 0003:054C:05C4.000F: Failed to create dualshock4. [ 330.988538][ T5702] playstation 0003:054C:05C4.000F: probe with driver playstation failed with error -71 [ 331.008456][ T5702] usb 2-1: USB disconnect, device number 46 [ 331.101831][ T9893] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 331.120543][ T9] usb 5-1: USB disconnect, device number 47 [ 331.152645][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 331.163890][ T9] opticon 5-1:1.0: device disconnected [ 331.532782][ T9912] gadgetfs: bound to dummy_udc driver [ 331.973732][ T5702] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 332.131354][ T5702] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.131385][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.131403][ T5702] usb 2-1: Product: syz [ 332.131417][ T5702] usb 2-1: Manufacturer: syz [ 332.131439][ T5702] usb 2-1: SerialNumber: syz [ 332.163861][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 332.230149][ T5600] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 332.353605][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 332.359242][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.359283][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.359304][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.359336][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 332.359357][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.424161][ T9] usb 5-1: config 0 descriptor?? [ 332.865704][ T9] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 332.865746][ T9] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 332.865772][ T9] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 332.865797][ T9] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 332.865831][ T9] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 332.866801][ T9] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 333.042871][ T9] usb 2-1: USB disconnect, device number 47 [ 333.064135][ T5702] usb 5-1: USB disconnect, device number 48 [ 333.553654][ T5600] usb 2-1: Service connection timeout for: 256 [ 333.553677][ T5600] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 333.614834][ T5600] ath9k_htc: Failed to initialize the device [ 333.615205][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 333.621102][ T37] audit: type=1326 audit(1785855143.829:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9949 comm="syz.5.1449" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01e725e019 code=0x0 [ 333.682705][ T9954] gadgetfs: bound to dummy_udc driver [ 333.808956][ T9959] ªªªªªª: renamed from vlan0 (while UP) [ 334.093583][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 334.147616][ T9969] gadgetfs: bound to dummy_udc driver [ 334.263619][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 334.277568][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.278881][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.278956][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 334.278996][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.281465][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 334.281491][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.281511][ T9] usb 2-1: Product: syz [ 334.281524][ T9] usb 2-1: Manufacturer: syz [ 334.281538][ T9] usb 2-1: SerialNumber: syz [ 334.524270][ T9976] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 334.639788][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 334.640200][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 334.997584][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 335.002543][ T9] usb 2-1: 2:1 : can't get Cluster Descriptor [ 335.222144][ T9] usb 2-1: USB disconnect, device number 48 [ 336.411410][T10019] ima: rule for LSM 'unconfined_t' is undefined [ 336.411546][ T37] audit: type=1807 audit(1785855146.619:13): action=measure func=FILE_CHECK obj_type=unconfined_t res=0 [ 336.411775][ T37] audit: type=1802 audit(1785855146.619:14): pid=10019 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.4.1482" res=0 errno=0 [ 336.412277][T10018] ima: policy update failed [ 336.412480][ T37] audit: type=1802 audit(1785855146.619:15): pid=10018 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.4.1482" res=0 errno=0 [ 336.552928][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'. [ 338.269413][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 339.024842][T10119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1514'. [ 339.337013][ T5702] IPVS: starting estimator thread 0... [ 339.378571][T10124] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 339.464956][T10127] IPVS: using max 8 ests per chain, 19200 per kthread [ 339.735646][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1522'. [ 339.759726][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'. [ 340.766640][T10186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 340.793715][ T5763] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 341.001217][ T5763] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 341.001236][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 341.001246][ T5763] usb 5-1: Product: syz [ 341.001253][ T5763] usb 5-1: SerialNumber: syz [ 341.034710][ T5763] usb 5-1: config 0 descriptor?? [ 341.295714][ T5763] hso 5-1:0.0: Failed to find BULK eps [ 341.317531][T10205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.350279][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 341.380119][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 341.405433][ T44] libceph: connect (1)[c::]:6789 error -101 [ 341.405562][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 341.453020][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 341.453150][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 341.483660][ T5702] usb 5-1: USB disconnect, device number 49 [ 341.674992][ T5600] libceph: connect (1)[c::]:6789 error -101 [ 341.675116][ T5600] libceph: mon0 (1)[c::]:6789 connect error [ 341.707798][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 341.707930][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 341.753557][T10198] ceph: No mds server is up or the cluster is laggy [ 341.753578][T10201] ceph: No mds server is up or the cluster is laggy [ 342.886826][T10239] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 342.896825][T10239] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 343.261363][T10249] input: syz0 as /devices/virtual/input/input19 [ 344.059777][T10271] fuse: fd is not a fuse device [ 344.236236][T10281] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 344.299748][T10285] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 345.113250][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 345.853230][T10316] fuse: Bad value for 'fd' [ 346.197927][T10332] netlink: 'syz.2.1585': attribute type 4 has an invalid length. [ 346.232879][T10332] netlink: 'syz.2.1585': attribute type 4 has an invalid length. [ 346.467276][T10343] fuse: Bad value for 'fd' [ 346.554625][ T5702] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 346.706369][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 346.727129][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.727160][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.727208][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 346.727234][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 346.727260][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 346.727308][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.727384][ T5702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.727407][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.966267][ T5702] usb 5-1: GET_CAPABILITIES returned 0 [ 346.966314][ T5702] usbtmc 5-1:16.0: can't read capabilities [ 346.983945][ T5600] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 347.135623][ T5600] usb 2-1: not running at top speed; connect to a high speed hub [ 347.136706][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 347.142706][ T5600] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 347.142736][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.142753][ T5600] usb 2-1: Product: syz [ 347.142766][ T5600] usb 2-1: Manufacturer: syz [ 347.142773][ T5600] usb 2-1: SerialNumber: syz [ 347.199129][ T5600] oti6858 2-1:1.0: oti6858 converter detected [ 347.222939][ T5600] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 347.310226][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 347.410002][ T5600] usb 5-1: USB disconnect, device number 50 [ 347.485197][ T5702] usb 2-1: USB disconnect, device number 49 [ 347.485244][ C0] usb 2-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -19 [ 347.630432][ T5702] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 347.637967][ T5702] oti6858 2-1:1.0: device disconnected [ 348.257992][T10393] syzkaller1: entered promiscuous mode [ 348.258018][T10393] syzkaller1: entered allmulticast mode [ 348.735420][T10408] kvm: emulating exchange as write [ 348.742245][T10412] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 349.655049][T10435] syzkaller1: entered promiscuous mode [ 349.655066][T10435] syzkaller1: entered allmulticast mode [ 350.273557][ T5600] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 350.423582][ T5600] usb 2-1: Using ep0 maxpacket: 32 [ 350.426631][ T5600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 350.429068][ T5600] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 350.429096][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 350.429115][ T5600] usb 2-1: Product: syz [ 350.429128][ T5600] usb 2-1: Manufacturer: syz [ 350.429142][ T5600] usb 2-1: SerialNumber: syz [ 350.432987][ T5600] usb 2-1: config 0 descriptor?? [ 350.456116][T10446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.458208][ T5600] hub 2-1:0.0: bad descriptor, ignoring hub [ 350.458251][ T5600] hub 2-1:0.0: probe with driver hub failed with error -5 [ 350.602212][T10451] overlayfs: failed to clone upperpath [ 350.611087][T10452] netlink: 'syz.5.1627': attribute type 4 has an invalid length. [ 350.637857][T10452] netlink: 'syz.5.1627': attribute type 4 has an invalid length. [ 350.796029][ T5695] usb 2-1: USB disconnect, device number 50 [ 351.093543][ T5702] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 351.243626][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 351.246099][ T5702] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 351.246123][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.246142][ T5702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.248400][ T5702] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.248427][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.248445][ T5702] usb 5-1: Product: syz [ 351.248459][ T5702] usb 5-1: Manufacturer: syz [ 351.248472][ T5702] usb 5-1: SerialNumber: syz [ 351.314810][ T5702] usb 5-1: 0:2 : does not exist [ 351.438561][T10468] fuse: Bad value for 'fd' [ 351.531613][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.547061][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.565875][ T5702] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 351.738657][ T5702] usb 5-1: USB disconnect, device number 51 [ 351.778728][T10477] netlink: 'syz.1.1638': attribute type 4 has an invalid length. [ 351.825696][T10477] netlink: 'syz.1.1638': attribute type 4 has an invalid length. [ 352.602656][T10506] overlayfs: failed to resolve './cgroup': -2 [ 355.212242][T10571] fuse: Bad value for 'fd' [ 355.429031][ T5695] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 355.456199][ T5695] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.650940][T10510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.060494][ T5600] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 356.203629][ T5600] usb 2-1: Using ep0 maxpacket: 16 [ 356.211603][ T5600] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.211628][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.211647][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.243356][ T5600] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.243386][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.243404][ T5600] usb 2-1: Product: syz [ 356.245400][ T5600] usb 2-1: Manufacturer: syz [ 356.245420][ T5600] usb 2-1: SerialNumber: syz [ 356.292606][ T5600] usb 2-1: 0:2 : does not exist [ 356.498422][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.500108][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.531865][ T5600] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 356.594619][ T5600] usb 2-1: USB disconnect, device number 51 [ 358.005573][T10640] fuse: fd is not a fuse device [ 358.275808][ T5695] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 358.339507][T10653] overlayfs: failed to clone upperpath [ 358.447560][ T5695] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 358.447611][ T5695] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 358.447624][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.505322][T10641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.512498][ T5695] opticon 5-1:1.0: opticon converter detected [ 358.570155][ T5695] usb 5-1: opticon converter now attached to ttyUSB0 [ 359.168134][T10676] fuse: fd is not a fuse device [ 361.360790][ T5702] usb 5-1: USB disconnect, device number 52 [ 361.426023][ T5702] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 361.427345][ T5702] opticon 5-1:1.0: device disconnected [ 361.750940][T10721] fuse: fd is not a fuse device [ 361.815789][T10726] fuse: fd is not a fuse device [ 361.930812][T10732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.011257][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.432201][T10746] fuse: fd is not a fuse device [ 362.679908][T10756] netlink: 'syz.2.1749': attribute type 2 has an invalid length. [ 362.679921][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1749'. [ 362.873612][ T5600] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 362.877551][T10758] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(131081.115.0), cmd(18) [ 363.034369][ T5600] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.034423][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.034442][ T5600] usb 2-1: Product: syz [ 363.034455][ T5600] usb 2-1: Manufacturer: syz [ 363.034469][ T5600] usb 2-1: SerialNumber: syz [ 363.117444][T10766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.122563][ T5702] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.819642][T10779] fuse: fd is not a fuse device [ 363.990220][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.029958][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.905299][ T5702] usb 2-1: Service connection timeout for: 256 [ 364.905342][ T5702] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 364.944921][ T32] usb 2-1: USB disconnect, device number 52 [ 364.980725][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 365.054990][ T5702] ath9k_htc: Failed to initialize the device [ 365.055403][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 365.211102][T10801] overlayfs: failed to clone upperpath [ 365.393659][ T5695] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 365.560803][ T5695] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 365.560831][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.560849][ T5695] usb 5-1: Product: syz [ 365.560861][ T5695] usb 5-1: Manufacturer: syz [ 365.560875][ T5695] usb 5-1: SerialNumber: syz [ 365.613132][ T5695] usb 5-1: config 0 descriptor?? [ 365.801970][T10826] fuse: fd is not a fuse device [ 365.832412][ T5695] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 367.052552][ T5695] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 367.066013][ T5695] usb 5-1: USB disconnect, device number 54 [ 367.664356][T10833] syzkaller1: entered promiscuous mode [ 367.664383][T10833] syzkaller1: entered allmulticast mode [ 367.801403][T10840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.513613][ T32] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 368.627440][T10874] overlayfs: failed to clone upperpath [ 368.673696][ T821] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 368.676710][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 368.683237][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.683255][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.683276][ T32] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 368.683288][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.702942][ T32] usb 2-1: config 0 descriptor?? [ 368.833947][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 368.837058][ T821] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 368.837109][ T821] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 368.837136][ T821] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.837162][ T821] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 368.892953][ T821] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 368.892981][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.892999][ T821] usb 5-1: Product: syz [ 368.893012][ T821] usb 5-1: Manufacturer: syz [ 368.893025][ T821] usb 5-1: SerialNumber: syz [ 368.940157][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 368.967931][ T821] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 369.125522][ T32] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 369.125558][ T32] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 369.173635][ T821] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.173655][ T821] (id 0x00) [ 369.243694][ T821] rc_core: IR keymap rc-imon-pad not found [ 369.243716][ T821] Registered IR keymap rc-empty [ 369.243907][ T821] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 369.243926][ T821] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 369.317763][ T32] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 369.371755][ T821] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 369.380694][ T821] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 369.470452][ T821] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:55> initialized [ 369.526463][ T32] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 369.726141][ T32] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 369.726890][ T32] ft260 0003:0403:6030.0012: failed to retrieve status: -32 [ 369.941520][ T32] usb 2-1: USB disconnect, device number 53 [ 369.973351][T10891] imon:send_packet: task interrupted [ 369.976263][T10891] imon:send_packet: packet tx failed (-512) [ 369.976306][T10891] imon:vfd_write: send packet #1 failed [ 369.981745][T10891] imon:send_packet: packet tx failed (-32) [ 369.993634][T10891] imon:vfd_write: send packet #0 failed [ 370.118631][ T821] usb 5-1: USB disconnect, device number 55 [ 370.421542][T10898] fuse: fd is not a fuse device [ 370.828832][T10918] fuse: fd is not a fuse device [ 370.897317][T10921] fuse: fd is not a fuse device [ 370.902332][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 370.943607][ T32] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 370.982055][T10925] fuse: fd is not a fuse device [ 371.109013][ T32] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 371.109044][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.109060][ T32] usb 5-1: Product: syz [ 371.109067][ T32] usb 5-1: Manufacturer: syz [ 371.109074][ T32] usb 5-1: SerialNumber: syz [ 371.186158][ T5600] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.891077][ T5600] usb 5-1: Service connection timeout for: 256 [ 372.891101][ T5600] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 372.896739][ T5702] usb 5-1: USB disconnect, device number 56 [ 372.929999][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 372.993858][ T5600] ath9k_htc: Failed to initialize the device [ 372.994257][ T5702] usb 5-1: ath9k_htc: USB layer deinitialized [ 373.833601][ T5600] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 373.985188][ T5600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.985206][ T5600] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.986307][ T5600] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.986323][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.986333][ T5600] usb 5-1: SerialNumber: syz [ 374.221475][ T5600] usb 5-1: 0:2 : does not exist [ 374.288580][ T5600] usb 5-1: USB disconnect, device number 57 [ 374.401261][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.185872][T10994] overlayfs: failed to clone upperpath [ 375.314615][ T5600] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 375.466061][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 375.468284][ T5600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.468336][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.468364][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.468384][ T5600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.468406][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.469930][ T5600] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.470001][ T5600] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.470022][ T5600] usb 5-1: Manufacturer: syz [ 375.570912][ T5600] usb 5-1: config 0 descriptor?? [ 375.873827][ T5600] rc_core: IR keymap rc-hauppauge not found [ 375.873850][ T5600] Registered IR keymap rc-empty [ 375.874159][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.901938][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.914761][ T5600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 375.918642][ T5600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 375.922035][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.935568][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.955154][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.979812][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 375.993662][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.016293][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.036141][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.055044][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.073771][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.098108][ T5600] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 376.170011][ T5600] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 376.170091][ T5600] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 376.371478][ T5600] usb 5-1: USB disconnect, device number 58 [ 377.373639][ T5695] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 377.539490][ T5695] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.539519][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.539537][ T5695] usb 5-1: Product: syz [ 377.539551][ T5695] usb 5-1: Manufacturer: syz [ 377.539565][ T5695] usb 5-1: SerialNumber: syz [ 377.640642][ T821] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.886326][T11077] overlayfs: failed to clone upperpath [ 378.023800][T11081] netlink: 'syz.5.1875': attribute type 10 has an invalid length. [ 378.297271][T11086] overlayfs: failed to clone upperpath [ 378.553378][T11090] fuse: fd is not a fuse device [ 378.695025][T11095] fuse: fd is not a fuse device [ 378.764555][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.764660][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.319106][ T821] usb 5-1: Service connection timeout for: 256 [ 379.319123][ T821] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 379.345370][ T5763] usb 5-1: USB disconnect, device number 59 [ 379.365874][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 379.443813][ T821] ath9k_htc: Failed to initialize the device [ 379.444254][ T5763] usb 5-1: ath9k_htc: USB layer deinitialized [ 379.752754][T11102] fuse: fd is not a fuse device [ 379.819509][T11108] netlink: 'syz.2.1885': attribute type 10 has an invalid length. [ 379.858231][T11110] fuse: fd is not a fuse device [ 380.044206][ T821] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 380.193646][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 380.197494][ T821] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 380.197521][ T821] usb 2-1: config 0 has no interface number 0 [ 380.197565][ T821] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 380.197604][ T821] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 380.224421][ T821] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 380.224450][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.224468][ T821] usb 2-1: Product: syz [ 380.224482][ T821] usb 2-1: Manufacturer: syz [ 380.224496][ T821] usb 2-1: SerialNumber: syz [ 380.238086][ T821] usb 2-1: config 0 descriptor?? [ 380.239356][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.239692][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.457566][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.457637][T11106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.661089][ T821] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 380.945829][T11148] fuse: fd is not a fuse device [ 381.130049][T11152] fuse: fd is not a fuse device [ 381.873014][ T821] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.873044][ T821] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 381.873333][ T821] asix 2-1:0.34: probe with driver asix failed with error -71 [ 381.918710][ T821] usb 2-1: USB disconnect, device number 54 [ 382.580954][T11189] fuse: fd is not a fuse device [ 382.620474][T11191] fuse: fd is not a fuse device [ 382.703605][ T5702] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 382.853919][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 382.858786][ T5702] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 382.858813][ T5702] usb 2-1: config 0 has no interface number 0 [ 382.858856][ T5702] usb 2-1: config 0 interface 12 has no altsetting 0 [ 382.861585][ T5702] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 382.861614][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.861642][ T5702] usb 2-1: Product: syz [ 382.861650][ T5702] usb 2-1: Manufacturer: syz [ 382.861657][ T5702] usb 2-1: SerialNumber: syz [ 382.937338][ T5702] usb 2-1: config 0 descriptor?? [ 383.625611][T11216] fuse: fd is not a fuse device [ 384.056058][T11224] fuse: fd is not a fuse device [ 384.056097][T11223] fuse: fd is not a fuse device [ 384.776470][ T5702] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 384.776621][ T5702] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 384.776647][ T5702] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 384.776738][ T5702] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 384.828807][ T5702] usb 2-1: USB disconnect, device number 55 [ 385.094199][T11258] binder: 11257:11258 ioctl c0306201 200000000080 returned -14 [ 385.103841][T11258] binder: 11257:11258 ioctl c0306201 2000000003c0 returned -14 [ 385.307150][T11264] overlayfs: failed to clone upperpath [ 385.454969][T11267] fuse: fd is not a fuse device [ 385.709381][T11269] syz.1.1946 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.709419][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.1.1946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.709435][T11269] Tainted: [L]=SOFTLOCKUP [ 385.709439][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.709452][T11269] Call Trace: [ 385.709526][T11269] [ 385.709584][T11269] dump_stack_lvl+0xe8/0x150 [ 385.709652][T11269] dump_header+0xd3/0x4b0 [ 385.709669][T11269] oom_kill_process+0x3ab/0x970 [ 385.709687][T11269] out_of_memory+0x1064/0x1480 [ 385.709707][T11269] ? __pfx_out_of_memory+0x10/0x10 [ 385.709750][T11269] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.709761][T11269] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 385.709772][T11269] ? _mutex_lock_killable+0x152/0x1d0 [ 385.709786][T11269] ? try_charge_memcg+0xbb6/0x15b0 [ 385.709806][T11269] try_charge_memcg+0xc75/0x15b0 [ 385.709815][T11269] ? __lock_acquire+0x6df/0x2e40 [ 385.709833][T11269] ? __pfx_try_charge_memcg+0x10/0x10 [ 385.709843][T11269] ? reacquire_held_locks+0x117/0x1a0 [ 385.709859][T11269] ? percpu_ref_tryget+0x15/0x180 [ 385.709872][T11269] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 385.709892][T11269] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 385.709907][T11269] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 385.709922][T11269] __memcg_slab_post_alloc_hook+0x94e/0xf60 [ 385.709944][T11269] ? sk_prot_alloc+0x57/0x210 [ 385.709959][T11269] kmem_cache_alloc_noprof+0x419/0x680 [ 385.709974][T11269] ? sk_prot_alloc+0x57/0x210 [ 385.709986][T11269] ? sk_prot_alloc+0x57/0x210 [ 385.710003][T11269] sk_prot_alloc+0x57/0x210 [ 385.710016][T11269] ? sk_alloc+0x27/0x390 [ 385.710031][T11269] sk_alloc+0x3a/0x390 [ 385.710047][T11269] tipc_sk_create+0xfe/0x2600 [ 385.710060][T11269] ? kmem_cache_alloc_noprof+0x3be/0x680 [ 385.710073][T11269] ? security_inode_alloc+0x39/0x2d0 [ 385.710088][T11269] ? security_inode_alloc+0x39/0x2d0 [ 385.710105][T11269] ? lock_acquire+0x115/0x350 [ 385.710124][T11269] ? rcu_read_unlock+0x87/0xa0 [ 385.710139][T11269] __sock_create+0x4e8/0x960 [ 385.710155][T11269] __sys_socket+0xd9/0x320 [ 385.710169][T11269] __x64_sys_socket+0x7a/0x90 [ 385.710182][T11269] do_syscall_64+0x17b/0x530 [ 385.710192][T11269] ? irqentry_exit+0x10f/0x8f0 [ 385.710201][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.710212][T11269] ? clear_bhb_loop+0x40/0x90 [ 385.710229][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.710244][T11269] RIP: 0033:0x7f92fce6e019 [ 385.710283][T11269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.710319][T11269] RSP: 002b:00007f92fb0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 385.710379][T11269] RAX: ffffffffffffffda RBX: 00007f92fd0f5fa0 RCX: 00007f92fce6e019 [ 385.710394][T11269] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 385.710406][T11269] RBP: 00007f92fcf0500c R08: 0000000000000000 R09: 0000000000000000 [ 385.710418][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.710430][T11269] R13: 00007f92fd0f6038 R14: 00007f92fd0f5fa0 R15: 00007ffce6540868 [ 385.710459][T11269] [ 385.710464][T11269] memory: usage 8kB, limit 8kB, failcnt 21 [ 385.710471][T11269] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 385.710478][T11269] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 385.710485][T11269] Memory cgroup stats for /syz1/test: [ 385.710740][T11269] cache 0 [ 385.710745][T11269] rss 0 [ 385.710748][T11269] shmem 0 [ 385.710751][T11269] mapped_file 0 [ 385.710754][T11269] dirty 0 [ 385.710758][T11269] writeback 0 [ 385.710761][T11269] workingset_refault_anon 0 [ 385.710764][T11269] workingset_refault_file 0 [ 385.710768][T11269] swap 0 [ 385.710771][T11269] swapcached 0 [ 385.710774][T11269] pgpgin 0 [ 385.710777][T11269] pgpgout 0 [ 385.710780][T11269] pgfault 0 [ 385.710783][T11269] pgmajfault 0 [ 385.710786][T11269] inactive_anon 0 [ 385.710789][T11269] active_anon 0 [ 385.710792][T11269] inactive_file 0 [ 385.710796][T11269] active_file 0 [ 385.710799][T11269] unevictable 0 [ 385.710802][T11269] hierarchical_memory_limit 8192 [ 385.710806][T11269] hierarchical_memsw_limit 9223372036854771712 [ 385.710810][T11269] total_cache 0 [ 385.710813][T11269] total_rss 0 [ 385.710816][T11269] total_shmem 0 [ 385.710819][T11269] total_mapped_file 0 [ 385.710822][T11269] total_dirty 0 [ 385.710826][T11269] total_writeback 0 [ 385.710829][T11269] total_workingset_refault_anon 0 [ 385.710833][T11269] total_workingset_refault_file 0 [ 385.710837][T11269] total_swap 0 [ 385.710840][T11269] total_swapcached 0 [ 385.710843][T11269] total_pgpgin 0 [ 385.710847][T11269] total_pgpgout 0 [ 385.710850][T11269] total_pgfault 0 [ 385.710854][T11269] total_pgmajfault 0 [ 385.710857][T11269] total_inactive_anon 0 [ 385.710861][T11269] total_active_anon 0 [ 385.710865][T11269] total_inactive_file 0 [ 385.710868][T11269] total_active_file 0 [ 385.710873][T11269] total_unevictable 0 [ 385.710879][T11269] anon_cost 0 [ 385.710882][T11269] file_cost 0 [ 385.710886][T11269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1946,pid=11268,uid=0 [ 386.219219][T11269] Memory cgroup out of memory: Killed process 11268 (syz.1.1946) total-vm:102384kB, anon-rss:1436kB, file-rss:22932kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 386.362981][T11281] fuse: fd is not a fuse device [ 387.543554][ T821] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 387.727967][ T821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 387.727987][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.727997][ T821] usb 2-1: Product: syz [ 387.728004][ T821] usb 2-1: Manufacturer: syz [ 387.728011][ T821] usb 2-1: SerialNumber: syz [ 387.731171][ T821] usb 2-1: config 0 descriptor?? [ 387.938629][ T821] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 389.367514][ T821] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 389.381850][ T821] usb 2-1: USB disconnect, device number 56 [ 389.574498][T11318] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 389.574512][T11318] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1966'. [ 389.588933][T11318] bond0: entered promiscuous mode [ 389.588954][T11318] bond_slave_0: entered promiscuous mode [ 389.589196][T11318] bond_slave_1: entered promiscuous mode [ 389.589371][T11318] team0: entered promiscuous mode [ 389.589385][T11318] team_slave_0: entered promiscuous mode [ 389.589578][T11318] team_slave_1: entered promiscuous mode [ 389.597252][T11318] bridge0: port 3(bond0) entered blocking state [ 389.597674][T11318] bridge0: port 3(bond0) entered disabled state [ 389.597976][T11318] bond0: entered allmulticast mode [ 389.598002][T11318] bond_slave_0: entered allmulticast mode [ 389.598036][T11318] bond_slave_1: entered allmulticast mode [ 389.598056][T11318] team0: entered allmulticast mode [ 389.598068][T11318] team_slave_0: entered allmulticast mode [ 389.598088][T11318] team_slave_1: entered allmulticast mode [ 389.698659][T11318] bridge0: port 3(bond0) entered blocking state [ 389.705744][T11318] bridge0: port 3(bond0) entered forwarding state [ 389.838824][T11324] fuse: fd is not a fuse device [ 391.492191][T11382] fuse: fd is not a fuse device [ 391.654063][ T5600] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 391.818310][ T5600] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.818341][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.818359][ T5600] usb 2-1: Product: syz [ 391.818373][ T5600] usb 2-1: Manufacturer: syz [ 391.818386][ T5600] usb 2-1: SerialNumber: syz [ 391.930986][ T3128] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 392.003652][ T32] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 392.174590][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 392.182239][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.182266][ T32] usb 5-1: config 0 has no interface number 0 [ 392.182308][ T32] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 392.182329][ T32] usb 5-1: config 0 interface 1 has no altsetting 0 [ 392.227115][ T32] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 392.227146][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.227244][ T32] usb 5-1: Product: syz [ 392.227257][ T32] usb 5-1: Manufacturer: syz [ 392.227268][ T32] usb 5-1: SerialNumber: syz [ 392.306769][ T32] usb 5-1: config 0 descriptor?? [ 392.540780][ T32] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 392.588062][ T32] cx231xx 5-1:0.1: Failed to read PCB config [ 392.588389][ T32] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 392.615764][ T32] usb 5-1: USB disconnect, device number 60 [ 392.977718][T11410] fuse: fd is not a fuse device [ 393.134064][ T32] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 393.283616][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 393.303788][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.303815][ T32] usb 5-1: config 0 has no interface number 0 [ 393.304163][ T32] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 393.304186][ T32] usb 5-1: config 0 interface 1 has no altsetting 0 [ 393.314417][ T3128] usb 2-1: Service connection timeout for: 256 [ 393.314441][ T3128] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 393.387592][ T32] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 393.387621][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.387640][ T32] usb 5-1: Product: syz [ 393.387654][ T32] usb 5-1: Manufacturer: syz [ 393.387668][ T32] usb 5-1: SerialNumber: syz [ 393.429361][ T32] usb 5-1: config 0 descriptor?? [ 393.566425][ T3128] ath9k_htc: Failed to initialize the device [ 393.668644][ T32] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 393.724913][ T32] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 393.875922][ T32] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 393.878702][ T32] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 393.879281][ T32] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 393.885276][ T32] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 393.911420][ T32] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 393.911447][ T32] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71 [ 394.075906][ T32] i2c i2c-3: Added multiplexed i2c bus 5 [ 394.111893][ T32] i2c i2c-3: Added multiplexed i2c bus 6 [ 394.122735][ T32] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 394.122773][ T32] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 394.236088][ T3128] usb 2-1: ath9k_htc: USB layer deinitialized [ 394.257814][T11429] fuse: fd is not a fuse device [ 394.331263][ T32] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 394.343923][ T32] usb 5-1: USB disconnect, device number 61 [ 394.416401][ T5763] usb 2-1: USB disconnect, device number 57 [ 394.539553][T11434] fuse: fd is not a fuse device [ 394.635604][T11441] fuse: fd is not a fuse device [ 395.097986][T11466] fuse: fd is not a fuse device [ 396.033667][ T3128] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 396.176451][T11500] fuse: fd is not a fuse device [ 396.224168][ T3128] usb 5-1: Using ep0 maxpacket: 16 [ 396.229075][ T3128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.229098][ T3128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.263091][ T3128] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.263121][ T3128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.263151][ T3128] usb 5-1: Product: syz [ 396.263165][ T3128] usb 5-1: Manufacturer: syz [ 396.263185][ T3128] usb 5-1: SerialNumber: syz [ 396.312059][ T3128] usb 5-1: 0:2 : does not exist [ 396.512757][ T3128] usb 5-1: USB disconnect, device number 62 [ 397.008267][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2047'. [ 397.759895][T11536] kvm: pic: level sensitive irq not supported [ 397.932545][T11545] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 398.352593][T11551] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 398.352730][T11551] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 398.377737][T11551] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 398.381800][T11551] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 398.382243][T11551] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 398.382514][T11551] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 398.382962][T11551] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 398.383072][T11551] kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 398.400077][T11551] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 398.403164][T11551] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 398.656340][T11562] overlayfs: failed to clone upperpath [ 399.291474][T11578] fuse: fd is not a fuse device [ 399.892684][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 400.653566][ T821] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 400.811987][ T821] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 400.812016][ T821] usb 5-1: config 220 has an invalid descriptor of length 110, skipping remainder of the config [ 400.812035][ T821] usb 5-1: config 220 has no interface number 2 [ 400.812093][ T821] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 400.812108][ T821] usb 5-1: config 220 interface 0 has no altsetting 0 [ 400.812117][ T821] usb 5-1: config 220 interface 76 has no altsetting 0 [ 400.812126][ T821] usb 5-1: config 220 interface 1 has no altsetting 0 [ 400.876009][ T821] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 400.876037][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.876055][ T821] usb 5-1: Product: syz [ 400.876067][ T821] usb 5-1: Manufacturer: syz [ 400.876080][ T821] usb 5-1: SerialNumber: syz [ 401.174823][ T821] usb 5-1: selecting invalid altsetting 0 [ 401.175456][ T821] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 401.175523][ T821] uvcvideo 5-1:220.0: No valid video chain found. [ 401.176561][T11615] futex_wake_op: syz.2.2083 tries to shift op by 144; fix this program [ 401.235136][ T821] usb 5-1: selecting invalid altsetting 0 [ 401.235172][ T821] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 401.284574][ T821] usb 5-1: USB disconnect, device number 63 [ 402.185595][ T3128] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 402.283583][ T32] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 402.370883][ T3128] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.370912][ T3128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.370929][ T3128] usb 5-1: Product: syz [ 402.370942][ T3128] usb 5-1: Manufacturer: syz [ 402.370954][ T3128] usb 5-1: SerialNumber: syz [ 402.447519][ T32] usb 2-1: config 0 has no interfaces? [ 402.452124][ T32] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 402.452142][ T32] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 402.452153][ T32] usb 2-1: Product: syz [ 402.452160][ T32] usb 2-1: Manufacturer: syz [ 402.452167][ T32] usb 2-1: SerialNumber: syz [ 402.503798][ T32] usb 2-1: config 0 descriptor?? [ 402.731132][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.751825][ T32] usb 2-1: USB disconnect, device number 58 [ 402.856892][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 402.856967][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 404.520278][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 404.521515][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 404.521992][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 404.522043][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 404.576846][ T3128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 404.604915][ T3128] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 404.620066][ T3128] usb 5-1: USB disconnect, device number 64 [ 405.570178][T11677] futex_wake_op: syz.5.2107 tries to shift op by 144; fix this program [ 407.714503][ T3128] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 407.873794][ T3128] usb 2-1: Using ep0 maxpacket: 32 [ 407.893286][ T3128] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.893311][ T3128] usb 2-1: config 0 has no interface number 0 [ 407.893355][ T3128] usb 2-1: config 0 interface 184 has no altsetting 0 [ 407.919843][ T3128] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.919873][ T3128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.919892][ T3128] usb 2-1: Product: syz [ 407.919905][ T3128] usb 2-1: Manufacturer: syz [ 407.919917][ T3128] usb 2-1: SerialNumber: syz [ 407.967866][ T3128] usb 2-1: config 0 descriptor?? [ 408.183655][ T5763] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 408.348103][ T5763] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 408.348134][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.348153][ T5763] usb 5-1: Product: syz [ 408.348166][ T5763] usb 5-1: Manufacturer: syz [ 408.348180][ T5763] usb 5-1: SerialNumber: syz [ 408.352707][ T5763] usb 5-1: config 0 descriptor?? [ 408.399616][ T5763] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 408.611768][ T3128] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 408.611798][ T3128] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 408.799844][T11744] tipc: Enabled bearer , priority 0 [ 408.801703][T11744] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 408.810323][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.813772][T11744] bond0: (slave team0): Enslaving as an active interface with an up link [ 410.885350][ T3128] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 410.885394][ T3128] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 410.885413][ T3128] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 410.885704][ T3128] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 410.940650][ T3128] usb 2-1: USB disconnect, device number 59 [ 411.071534][ T5763] gspca_stk1135: reg_w 0x350 err -71 [ 411.072648][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072657][ T5763] gspca_stk1135: Sensor write failed [ 411.072692][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072699][ T5763] gspca_stk1135: Sensor write failed [ 411.072713][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072718][ T5763] gspca_stk1135: Sensor read failed [ 411.072738][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072742][ T5763] gspca_stk1135: Sensor read failed [ 411.072746][ T5763] gspca_stk1135: Detected sensor type unknown (0x0) [ 411.072763][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072767][ T5763] gspca_stk1135: Sensor read failed [ 411.072780][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072784][ T5763] gspca_stk1135: Sensor read failed [ 411.072798][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072802][ T5763] gspca_stk1135: Sensor write failed [ 411.072815][ T5763] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072820][ T5763] gspca_stk1135: Sensor write failed [ 411.072883][ T5763] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 411.089003][ T5763] usb 5-1: USB disconnect, device number 65 [ 411.673059][T11814] netlink: 'syz.5.2155': attribute type 4 has an invalid length. [ 411.716396][ T5763] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 411.897457][ T5763] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.897486][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.897504][ T5763] usb 2-1: Product: syz [ 411.897517][ T5763] usb 2-1: Manufacturer: syz [ 411.897531][ T5763] usb 2-1: SerialNumber: syz [ 412.000981][ T821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 413.720306][ T821] usb 2-1: Service connection timeout for: 256 [ 413.720331][ T821] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 413.722304][ T5695] usb 2-1: USB disconnect, device number 60 [ 413.758170][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 413.828337][ T821] ath9k_htc: Failed to initialize the device [ 413.829142][ T5695] usb 2-1: ath9k_htc: USB layer deinitialized [ 414.366493][ T37] audit: type=1800 audit(1785855224.579:16): pid=11868 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2169" name="idVendor" dev="configfs" ino=38086 res=0 errno=0 [ 414.452453][ T37] audit: type=1800 audit(1785855224.639:17): pid=11871 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2169" name="manufacturer" dev="configfs" ino=37830 res=0 errno=0 [ 414.459252][ T37] audit: type=1800 audit(1785855224.669:18): pid=11871 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2169" name="product" dev="configfs" ino=37831 res=0 errno=0 [ 414.482501][ T37] audit: type=1800 audit(1785855224.699:19): pid=11868 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2169" name="serialnumber" dev="configfs" ino=38088 res=0 errno=0 [ 414.502187][ T37] audit: type=1800 audit(1785855224.709:20): pid=11868 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2169" name="configuration" dev="configfs" ino=37833 res=0 errno=0 [ 415.036091][ T3128] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 415.189154][ T3128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.189207][ T3128] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.189225][ T3128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.221273][ T3128] usb 5-1: config 0 descriptor?? [ 415.230368][ T3128] pwc: Askey VC010 type 2 USB webcam detected. [ 415.430166][ T3128] pwc: send_video_command error -71 [ 415.430276][ T3128] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 415.430392][ T3128] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 415.431722][T11894] syzkaller0: entered promiscuous mode [ 415.431744][T11894] syzkaller0: entered allmulticast mode [ 415.470631][ T3128] usb 5-1: USB disconnect, device number 66 [ 415.850731][ T37] audit: type=1800 audit(1785855226.059:21): pid=11897 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.2177" name="local" dev="configfs" ino=38932 res=0 errno=0 [ 415.919777][ T37] audit: type=1800 audit(1785855226.139:22): pid=11897 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.2177" name="scan_secs" dev="configfs" ino=38934 res=0 errno=0 [ 416.017626][ T3128] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 416.080971][T11905] overlayfs: missing 'lowerdir' [ 416.204106][ T3128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.204162][ T3128] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 416.204189][ T3128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.213018][ T3128] usb 5-1: config 0 descriptor?? [ 416.259177][ T3128] pwc: Askey VC010 type 2 USB webcam detected. [ 416.616620][ T3128] pwc: recv_control_msg error -32 req 02 val 2b00 [ 416.617244][ T3128] pwc: recv_control_msg error -32 req 02 val 2700 [ 416.618083][ T3128] pwc: recv_control_msg error -32 req 02 val 2c00 [ 416.618662][ T3128] pwc: recv_control_msg error -32 req 04 val 1000 [ 416.621844][ T3128] pwc: recv_control_msg error -32 req 04 val 1300 [ 416.622442][ T3128] pwc: recv_control_msg error -32 req 04 val 1400 [ 416.623249][ T3128] pwc: recv_control_msg error -32 req 02 val 2000 [ 416.624419][ T3128] pwc: recv_control_msg error -32 req 02 val 2100 [ 416.644179][ T3128] pwc: recv_control_msg error -32 req 04 val 1500 [ 416.645472][ T3128] pwc: recv_control_msg error -32 req 02 val 2500 [ 416.646463][ T3128] pwc: recv_control_msg error -32 req 02 val 2400 [ 416.647515][ T3128] pwc: recv_control_msg error -32 req 02 val 2600 [ 416.648347][ T3128] pwc: recv_control_msg error -32 req 02 val 2900 [ 416.649243][ T3128] pwc: recv_control_msg error -32 req 02 val 2800 [ 416.660582][ T3128] pwc: recv_control_msg error -32 req 04 val 1100 [ 416.729684][ T3128] pwc: Registered as video103. [ 416.736461][ T3128] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 416.880879][ T3128] usb 5-1: USB disconnect, device number 67 [ 417.433595][ T821] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 417.586226][ T821] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 417.586254][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.586272][ T821] usb 2-1: config 0 has no interface number 0 [ 417.586311][ T821] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 417.586325][ T821] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.586339][ T821] usb 2-1: config 0 interface 11 has no altsetting 0 [ 417.586363][ T821] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 417.586374][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.667282][ T821] usb 2-1: config 0 descriptor?? [ 417.668085][T11926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.686671][ T821] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 417.687139][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 417.704651][ T3128] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 417.722556][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 417.722650][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 417.722811][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 417.722905][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 417.722977][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 417.723058][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 417.773685][ T821] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 417.778286][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 417.778378][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 417.778458][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 417.778534][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 417.778607][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 417.778686][ T821] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 417.780947][ T821] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 417.904396][ T3128] usb 5-1: config 0 has no interfaces? [ 417.911098][ T3128] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 417.911127][ T3128] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 417.911146][ T3128] usb 5-1: Product: syz [ 417.911161][ T3128] usb 5-1: Manufacturer: syz [ 417.911174][ T3128] usb 5-1: SerialNumber: syz [ 417.926410][ T3128] usb 5-1: config 0 descriptor?? [ 417.946882][T11926] netlink: 'syz.1.2188': attribute type 12 has an invalid length. [ 418.147732][T11929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.174311][ T821] usb 5-1: USB disconnect, device number 68 [ 418.774188][T11961] netlink: 'syz.4.2197': attribute type 4 has an invalid length. [ 419.095260][T11973] ------------[ cut here ]------------ [ 419.095271][T11973] !chanctx_conf [ 419.095290][T11973] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5b8/0x640, CPU#0: syz.2.2201/11973 [ 419.095320][T11973] Modules linked in: [ 419.095336][T11973] CPU: 0 UID: 0 PID: 11973 Comm: syz.2.2201 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.095351][T11973] Tainted: [L]=SOFTLOCKUP [ 419.095355][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.095364][T11973] RIP: 0010:rate_control_rate_init+0x5b8/0x640 [ 419.095390][T11973] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 da 51 92 00 cc e8 e4 04 04 f7 90 0f 0b 90 eb e1 e8 d9 04 04 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 00 00 00 [ 419.095406][T11973] RSP: 0018:ffffc9001171efc0 EFLAGS: 00010287 [ 419.095423][T11973] RAX: ffffffff8ac19ed7 RBX: ffff8880321ac050 RCX: 0000000000080000 [ 419.095437][T11973] RDX: ffffc9000ebb2000 RSI: 00000000000024da RDI: 00000000000024db [ 419.095450][T11973] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.095463][T11973] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffffffff8ac19a37 [ 419.095477][T11973] R13: ffff88804f141180 R14: 0000000000000001 R15: 0000000000000000 [ 419.095490][T11973] FS: 00007f46fa4966c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 419.095507][T11973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.095522][T11973] CR2: 00007f46fc228e80 CR3: 000000003d138000 CR4: 00000000003526f0 [ 419.095539][T11973] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 419.095546][T11973] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 419.095554][T11973] Call Trace: [ 419.095559][T11973] [ 419.095568][T11973] rate_control_rate_init_all_links+0xf4/0x190 [ 419.095587][T11973] sta_apply_auth_flags+0x1bc/0x430 [ 419.095608][T11973] sta_apply_parameters+0x126d/0x1b10 [ 419.095631][T11973] ieee80211_add_station+0x3de/0x700 [ 419.095647][T11973] rdev_add_station+0xfc/0x290 [ 419.095664][T11973] nl80211_new_station+0x1b4e/0x1fd0 [ 419.095682][T11973] ? __rtnl_unlock+0xc8/0xf0 [ 419.095699][T11973] ? __pfx_nl80211_new_station+0x10/0x10 [ 419.095727][T11973] ? do_raw_spin_lock+0x12b/0x2f0 [ 419.095756][T11973] ? nl80211_pre_doit+0x55a/0x8b0 [ 419.095773][T11973] genl_family_rcv_msg_doit+0x233/0x340 [ 419.095792][T11973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.095811][T11973] ? bpf_lsm_capable+0x9/0x20 [ 419.095822][T11973] ? security_capable+0x74/0x280 [ 419.095839][T11973] genl_rcv_msg+0x614/0x7a0 [ 419.095854][T11973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.095865][T11973] ? ref_tracker_free+0x668/0x820 [ 419.095879][T11973] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 419.095890][T11973] ? __pfx_nl80211_new_station+0x10/0x10 [ 419.095903][T11973] ? __pfx_nl80211_post_doit+0x10/0x10 [ 419.095915][T11973] ? ____sys_sendmsg+0x565/0x870 [ 419.095929][T11973] ? ___sys_sendmsg+0x2a5/0x360 [ 419.095943][T11973] ? __x64_sys_sendmsg+0x1b7/0x290 [ 419.095957][T11973] ? do_syscall_64+0x17b/0x530 [ 419.095966][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.095982][T11973] netlink_rcv_skb+0x226/0x4a0 [ 419.095998][T11973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.096010][T11973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.096036][T11973] genl_rcv+0x28/0x40 [ 419.096048][T11973] netlink_unicast+0x7f5/0x990 [ 419.096068][T11973] netlink_sendmsg+0x813/0xb40 [ 419.096088][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.096104][T11973] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 419.096125][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.096140][T11973] sock_sendmsg_nosec+0x13a/0x180 [ 419.096153][T11973] ____sys_sendmsg+0x565/0x870 [ 419.096172][T11973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.096208][T11973] ? import_iovec+0x73/0xa0 [ 419.096228][T11973] ___sys_sendmsg+0x2a5/0x360 [ 419.096243][T11973] ? __lock_acquire+0x6df/0x2e40 [ 419.096255][T11973] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.096272][T11973] ? futex_wait+0x2a2/0x390 [ 419.096309][T11973] ? __fget_files+0x2a/0x420 [ 419.096320][T11973] ? __fget_files+0x3a8/0x420 [ 419.096336][T11973] __x64_sys_sendmsg+0x1b7/0x290 [ 419.096353][T11973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.096378][T11973] do_syscall_64+0x17b/0x530 [ 419.096389][T11973] ? irqentry_exit+0x10f/0x8f0 [ 419.096398][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.096409][T11973] ? clear_bhb_loop+0x40/0x90 [ 419.096423][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.096434][T11973] RIP: 0033:0x7f46fc23e019 [ 419.096444][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.096453][T11973] RSP: 002b:00007f46fa496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.096464][T11973] RAX: ffffffffffffffda RBX: 00007f46fc4c5fa0 RCX: 00007f46fc23e019 [ 419.096472][T11973] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 419.096478][T11973] RBP: 00007f46fc2d500c R08: 0000000000000000 R09: 0000000000000000 [ 419.096485][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.096491][T11973] R13: 00007f46fc4c6038 R14: 00007f46fc4c5fa0 R15: 00007ffdd57bb2d8 [ 419.096508][T11973] [ 419.096514][T11973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 419.096524][T11973] CPU: 0 UID: 0 PID: 11973 Comm: syz.2.2201 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.096539][T11973] Tainted: [L]=SOFTLOCKUP [ 419.096542][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.096549][T11973] Call Trace: [ 419.096556][T11973] [ 419.096563][T11973] vpanic+0x56c/0xa60 [ 419.096584][T11973] ? __pfx__printk+0x10/0x10 [ 419.096608][T11973] ? __pfx_vpanic+0x10/0x10 [ 419.096625][T11973] ? is_bpf_text_address+0x292/0x2b0 [ 419.096647][T11973] ? is_bpf_text_address+0x26/0x2b0 [ 419.096673][T11973] panic+0xc5/0xd0 [ 419.096684][T11973] ? __pfx_panic+0x10/0x10 [ 419.096702][T11973] __warn+0x315/0x4c0 [ 419.096712][T11973] ? rate_control_rate_init+0x5b8/0x640 [ 419.096728][T11973] ? rate_control_rate_init+0x5b8/0x640 [ 419.096741][T11973] __report_bug+0x276/0x570 [ 419.096754][T11973] ? rate_control_rate_init+0x5b8/0x640 [ 419.096768][T11973] ? __pfx___report_bug+0x10/0x10 [ 419.096781][T11973] ? __lock_acquire+0x6df/0x2e40 [ 419.096795][T11973] ? __schedule+0x171f/0x5530 [ 419.096814][T11973] ? rate_control_rate_init+0x5b8/0x640 [ 419.096827][T11973] report_bug+0x16a/0x220 [ 419.096838][T11973] ? rate_control_rate_init+0x5b8/0x640 [ 419.096850][T11973] ? rate_control_rate_init+0x5ba/0x640 [ 419.096862][T11973] handle_bug+0x9c/0x200 [ 419.096874][T11973] exc_invalid_op+0x1a/0x50 [ 419.096886][T11973] asm_exc_invalid_op+0x1a/0x20 [ 419.096896][T11973] RIP: 0010:rate_control_rate_init+0x5b8/0x640 [ 419.096910][T11973] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 da 51 92 00 cc e8 e4 04 04 f7 90 0f 0b 90 eb e1 e8 d9 04 04 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 00 00 00 [ 419.096919][T11973] RSP: 0018:ffffc9001171efc0 EFLAGS: 00010287 [ 419.096928][T11973] RAX: ffffffff8ac19ed7 RBX: ffff8880321ac050 RCX: 0000000000080000 [ 419.096935][T11973] RDX: ffffc9000ebb2000 RSI: 00000000000024da RDI: 00000000000024db [ 419.096942][T11973] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.096949][T11973] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffffffff8ac19a37 [ 419.096956][T11973] R13: ffff88804f141180 R14: 0000000000000001 R15: 0000000000000000 [ 419.096964][T11973] ? rate_control_rate_init+0x117/0x640 [ 419.096978][T11973] ? rate_control_rate_init+0x5b7/0x640 [ 419.096998][T11973] rate_control_rate_init_all_links+0xf4/0x190 [ 419.097014][T11973] sta_apply_auth_flags+0x1bc/0x430 [ 419.097033][T11973] sta_apply_parameters+0x126d/0x1b10 [ 419.097055][T11973] ieee80211_add_station+0x3de/0x700 [ 419.097069][T11973] rdev_add_station+0xfc/0x290 [ 419.097086][T11973] nl80211_new_station+0x1b4e/0x1fd0 [ 419.097103][T11973] ? __rtnl_unlock+0xc8/0xf0 [ 419.097120][T11973] ? __pfx_nl80211_new_station+0x10/0x10 [ 419.097133][T11973] ? do_raw_spin_lock+0x12b/0x2f0 [ 419.097160][T11973] ? nl80211_pre_doit+0x55a/0x8b0 [ 419.097175][T11973] genl_family_rcv_msg_doit+0x233/0x340 [ 419.097191][T11973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.097209][T11973] ? bpf_lsm_capable+0x9/0x20 [ 419.097220][T11973] ? security_capable+0x74/0x280 [ 419.097236][T11973] genl_rcv_msg+0x614/0x7a0 [ 419.097251][T11973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.097262][T11973] ? ref_tracker_free+0x668/0x820 [ 419.097275][T11973] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 419.097293][T11973] ? __pfx_nl80211_new_station+0x10/0x10 [ 419.097306][T11973] ? __pfx_nl80211_post_doit+0x10/0x10 [ 419.097318][T11973] ? ____sys_sendmsg+0x565/0x870 [ 419.097332][T11973] ? ___sys_sendmsg+0x2a5/0x360 [ 419.097346][T11973] ? __x64_sys_sendmsg+0x1b7/0x290 [ 419.097361][T11973] ? do_syscall_64+0x17b/0x530 [ 419.097370][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.097385][T11973] netlink_rcv_skb+0x226/0x4a0 [ 419.097402][T11973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.097414][T11973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.097440][T11973] genl_rcv+0x28/0x40 [ 419.097456][T11973] netlink_unicast+0x7f5/0x990 [ 419.097476][T11973] netlink_sendmsg+0x813/0xb40 [ 419.097495][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.097512][T11973] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 419.097532][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.097551][T11973] sock_sendmsg_nosec+0x13a/0x180 [ 419.097564][T11973] ____sys_sendmsg+0x565/0x870 [ 419.097583][T11973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.097602][T11973] ? import_iovec+0x73/0xa0 [ 419.097620][T11973] ___sys_sendmsg+0x2a5/0x360 [ 419.097634][T11973] ? __lock_acquire+0x6df/0x2e40 [ 419.097645][T11973] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.097662][T11973] ? futex_wait+0x2a2/0x390 [ 419.097692][T11973] ? __fget_files+0x2a/0x420 [ 419.097710][T11973] ? __fget_files+0x3a8/0x420 [ 419.097740][T11973] __x64_sys_sendmsg+0x1b7/0x290 [ 419.097772][T11973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.097814][T11973] do_syscall_64+0x17b/0x530 [ 419.097826][T11973] ? irqentry_exit+0x10f/0x8f0 [ 419.097836][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.097846][T11973] ? clear_bhb_loop+0x40/0x90 [ 419.097859][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.097869][T11973] RIP: 0033:0x7f46fc23e019 [ 419.097879][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.097887][T11973] RSP: 002b:00007f46fa496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.097898][T11973] RAX: ffffffffffffffda RBX: 00007f46fc4c5fa0 RCX: 00007f46fc23e019 [ 419.097905][T11973] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 419.097912][T11973] RBP: 00007f46fc2d500c R08: 0000000000000000 R09: 0000000000000000 [ 419.097918][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.097924][T11973] R13: 00007f46fc4c6038 R14: 00007f46fc4c5fa0 R15: 00007ffdd57bb2d8 [ 419.097940][T11973] [ 419.098110][T11973] Kernel Offset: disabled