last executing test programs: 10.519364002s ago: executing program 4 (id=1223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@broadcast, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e22, 0x975a, 0x2, 0x10, 0x80, 0x2c}, {0x2, 0x3, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0xd, 0x5}, {0x1bf, 0x73, 0x6c0, 0x28d}, 0x1, 0x6e6bbe, 0x1, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in6=@loopback, 0x3503, 0x0, 0x1, 0x7, 0x4, 0x7, 0xd}}, 0xe8) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0x9, 0x20e0) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r5) fallocate(r6, 0x10, 0x0, 0x72000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) cachestat(r2, &(0x7f00000001c0)={0x5, 0x100000000}, &(0x7f0000000200), 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 8.700874527s ago: executing program 4 (id=1226): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef509", 0xa2}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759ce58fc5bb9", 0x5e}, {&(0x7f0000000380)="094c81a0c9a55b9edaf82d7e5636a7a4650567e7996ce4b30118ddab0910c16fb73ffae0eea0b412", 0x28}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001b00)="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", 0xfb}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717d132f7f9cea38c3101acd6114173a5be889d2204af3b4487008c2f1cf0c2e1ab662e39b4e3caa0331bb8ddac94bb2dda49efa5d010d7bcab", 0xf1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="01000000000000000100000001000000264a0bf4448bd08ae6a71fd0cee3eb7f7f111f6600000000000000bf1c33e2dff449bd3a123b9b8780b3cb37971cd0f01a6ee65cdf310ff24983a4e09e512b3c10edc801eef34521e6fcdfcc8d4bc66c0cb6bbdab23252d07a4ad19f7fe3e6fd379f59c75f7d4d642aa3b4e7f661c0b72ab7a4fc7ebfbf2586c61d6763566b7d266435960796c6e8ccb6a3939635dff55447a2afabd010489cf3180d444c7982760432994075", @ANYRES32=r5, @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32], 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) r9 = timerfd_create(0x0, 0x0) r10 = syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3a, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x5}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0xc, 0x1, 0x3, 0x2, 0x1, 0x3, 0x2, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x2, {0x8000, 0x0, 0x2, 0x7, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) timerfd_settime(r9, 0x2, &(0x7f00000005c0), 0x0) io_uring_enter(r10, 0x1f82, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.077870903s ago: executing program 0 (id=1229): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pread64(r0, &(0x7f00000004c0)=""/19, 0x13, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x711243, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) (async) r7 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) (async) fcntl$setlease(r8, 0x400, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x2, 0x0) (async) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) (async) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r9) (async) r10 = dup(r9) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r12, 0x2, {0x1, 0x1, 0x2}, 0xff}, 0x18) r13 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') 7.991345306s ago: executing program 3 (id=1230): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x105, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x34, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed01020301090222f400000000000904000001437b6a00090500000000012100070594"], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c00000042c4", @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf2524000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x7, 0x9, 0x3, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0xd, [{@local}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x7ea, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8739, 0x9, 0xef9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x10, 0x4, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x8, 0x5}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x17c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) fchdir(r5) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01032dbd70009f662f5cb639001100000010000280040004af378776ab35886bd933bd320fd13e6cb2bea90e81c402f86599fc59e9ae75676bfa47bef629f64a1de55dce383bda0024f7e4ccf477f57e50f75eef1469e0103a7690a884e96409b13c"], 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x42000) 7.713952049s ago: executing program 0 (id=1232): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0, @ANYRES16=r1], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) capset(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 6.959817203s ago: executing program 4 (id=1235): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x4, r2, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32], 0x24}}, 0x8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r2, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="11250e0000000e322657640200d93e08006001e679c850286e7439f484ffe7a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.903762539s ago: executing program 1 (id=1236): userfaultfd(0x80001) (async) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2b000002", @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d6) (async) sendfile(r2, r0, 0x0, 0x4000000053d6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400000000ffdbdf2500008400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000c0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 6.794138962s ago: executing program 1 (id=1237): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x10080) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) epoll_create1(0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="20005a801c000080043873038700030008000700050008008100000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd700004400000060003"], 0x30}}, 0x8040) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname(r10, 0x0, &(0x7f0000000180)) 6.726739304s ago: executing program 3 (id=1238): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB]) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x4c, r6, 0x101, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x0, 0x0, {0xfffffffffffffff8, 0x5, 0x0, 0x31f, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x5, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r9, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa2000000000d0c8be48fe7e2ba387701000007020000f8ffffffb703000808000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000010fafb270000040000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x101000, 0x1) poll(&(0x7f0000000140)=[{r4, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 5.55379251s ago: executing program 4 (id=1239): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x66b5, 0x262042) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x6, 0x0, '\x00', {0x0, @reserved}}) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x6, 0x0, '\x00', {0x0, @reserved}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x1, 0x0, {0x379, 0xb, 0xff, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000240)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000240)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast}, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x30, {0x2, 0x4e23, @local}, 'veth1_to_team\x00'}) (async) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast}, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x30, {0x2, 0x4e23, @local}, 'veth1_to_team\x00'}) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000300)={0x1, 0x0, 0x6, {0x0, 0x8ab, 0x10, 0x7}}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000340)) getpeername$packet(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x14) (async) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0xff81, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x5c, r4}, {0x8000, 0x2, 0x6, 0x3, 0x7, 0x7, 0x7, 0x2}, {0x10001, 0x12, 0x100, 0x10}, 0xa9f, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x8, 0xb, 0x6, 0xa}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0xff81, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x5c, r4}, {0x8000, 0x2, 0x6, 0x3, 0x7, 0x7, 0x7, 0x2}, {0x10001, 0x12, 0x100, 0x10}, 0xa9f, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x8, 0xb, 0x6, 0xa}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000580)={r5, 0x0, 0xfffffffffffff000, 0x100000000}) (async) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000580)={r5, 0x0, 0xfffffffffffff000, 0x100000000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x7, 0x10000, 0x48, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8000, 0x8, 0x3, 0x7}}) r8 = syz_clone(0x1000, &(0x7f0000000680)="c3a42f90b6015ae7d6aa10f77e1ebd1997106116b433d6f3536a34a55f01c144dc6b5052f077106531df7b1d5e349171d22aba6c255ffe8f3040e47d191d2f23d39eedea143689c3ed9bb1599501457692fa937950d4a80da5adfb669eab22cb0e508aed5157788113bfd43f9268f20ba9e4ce98b246d989f977f4094a535e7ab529d5f6ea1ca6388dd698845070ae9ef586e2eacefa03c5f7d2126620f34eee1aa2", 0xa2, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="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") ptrace$PTRACE_GETSIGMASK(0x420a, r8, 0x8, &(0x7f00000017c0)) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$can_bcm(0x1d, 0x2, 0x2) execve(&(0x7f0000001800)='./file0\x00', &(0x7f0000001880)={[&(0x7f0000001840)='\x00']}, &(0x7f0000001a80)={[&(0x7f00000018c0)='!\x00', &(0x7f0000001900)='veth1_to_team\x00', &(0x7f0000001940), &(0x7f0000001980)='\'\xc6\x00', &(0x7f00000019c0)='\x00', &(0x7f0000001a00)='!\x00', &(0x7f0000001a40)='./cgroup.net/syz0\x00']}) (async) execve(&(0x7f0000001800)='./file0\x00', &(0x7f0000001880)={[&(0x7f0000001840)='\x00']}, &(0x7f0000001a80)={[&(0x7f00000018c0)='!\x00', &(0x7f0000001900)='veth1_to_team\x00', &(0x7f0000001940), &(0x7f0000001980)='\'\xc6\x00', &(0x7f00000019c0)='\x00', &(0x7f0000001a00)='!\x00', &(0x7f0000001a40)='./cgroup.net/syz0\x00']}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000001b40)={r9}) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(r7, &(0x7f0000001b80)="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", 0xfc) fsmount(r6, 0x0, 0x8) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000001cc0)=0x4) 5.282688415s ago: executing program 3 (id=1240): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x531d, 0x4d0002) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x42, 0x6, 0x80006, 0xe3, 0xfffffffc, 0xfffffffffffffffd}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x1, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x13, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4e, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x87}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) socket$packet(0x11, 0x3, 0x300) 5.107688636s ago: executing program 4 (id=1241): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x28) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @remote, 0x80000001}, 0x1c) r2 = dup(r1) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) close_range(r3, r3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x45a6, 0x0) (async) r5 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) (async) r6 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f00000006c0)="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", 0x1c2, 0xfffffffffffffffa) (async) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f00000006c0)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532ddfc437c1b13403656c86711f6e7500255fdffffffffffffc7bf5c78dc804dd041016160e8bef7b30c05e298aa9572540dd9503079873510115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbac0d0000c3f614746b436fe86a72dc642dd698970604a69b4f22cd0076beedc18056ab4aea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a6848773af5fd3b39bce244bbe73b916eeafb731cc9ade7567e1b428ac4097affd1148ba2e05547f0ff2b17bffdafc62ff6090e0a00f5113c1c1fc8bf957860c29d51125ba8477626680b14d0ce6391a3838b05e57d3ba21445a1f974ede4da130f57cb68c19099aaf9ad17cecd0b58f5b590574de094360b4e35285b66d56f9215716a42337805c52482e5df0389af82ef39d074e565128b506a656d8ac496be08008004007071283f0781618b3d3699348ff106685e833404e1f85778896c69cf414dcec3c6564c6b0ab204c2cc0805c3d3093ee1aaef1dbbc508f7a82f573cabbbb776403ffac156d40f5a150d08cb000034fe6b42e01e9c5980b05c5853cd073a27", 0x1c2, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r7, r6}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) 5.003962924s ago: executing program 1 (id=1242): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="7800000c18002507b9e93f409b1435182ea3053a6e5dd820ffff00000204be04020b06050e020909430009df3e04064c0a0006000d0085a168d0bf46d32345653600cb9f50f9a4435c5e6ad033bb006aa8c828bbaf4b8d423c7b71a98e972f867e178ac5ede09b6da8271448f1112a9e6337eb19eabc5aaeac4b9923c6665a30", 0x80, 0xc0c0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0xc, &(0x7f0000001b80)}, 0x44880) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f7000000", @ANYRES32=r4, @ANYBLOB="208001"], 0x38}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x114e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1586dd6416c26611181101ff010000000000000000000000000001fe8000000000000000000000000000aa3b0007296600000062000a406400000000008138660000008706040303280500ff02000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000163a020000000000000600a2bef01a14b49c4dde5209a3fcb851fe03afd0fef7065c7ae885f342aeb36c58946beb4ecec25a0731c8fcc7cde5684b493dcf65a390c6bea50633b8f05b644eb5e5be26ab0d1961ed4dab2231cc119181e95539348bb6305a07b862d26edd9c39e08ab824b6b8234a7a8f3345f744d914871d4aaa3d45e3317e606f2608e766583c951b6510b29abb84c2a48edf6390ab194aa27481c5673671d50eca3a93963b87b55ea0161223905ac6838617e93e60f96b21498ff53df47afb66364bff345a0b29ffe042f2d0f5e7ec08853ff24ebf19faf1310e65ba472f9bbabc40447c3805a94655aeefa5cdbafdf8760ae823ffd7932f74cac1a5f33bdbfac24197cf467b4d016a2160a1eb0c25e33fc699c7120eac15f6505a65fb57dc3d3347bffa9909bbd3dbf3876a98b599cd033f775e908fc795bfa368af3755095c9fcc2d2352fdd334d7dd90cd3c092c283f4d0f36edf3fffe011d761ce28d1fa444ec834d518d9be1373eb9a6b48475e183e24ec90c0fa3bb9cdfa80aaf5660648e79bd1c04e51e005d486216031da8028c05805cd0831af06d74272f125656209cdc0876ec5751e677227095810d2121a2e05c3d738b63ab78c8a3a8a8451fa72f00cba92437354dc455a42a1c29e8396772b3644b1c717669ccb96ac1c82485295842fa5c49ce3fb6480554aa74dea4732cc391d2f71a84ed1cce4ee1d0bf020d4482887d75b10ff89c9cd5eb6ca6c36046c799425141da9fc051a8ba1f11146f4b33723dbb3a8bd945f650d8a2fbbb304794a41f7a2ceb14777717bc939585cedcf7b77c71f829e6e98ad5df0ae0a54869177c6fd72c4297a7d5470f8a1505560352b2f5dd0e14b39d6b556feb301b5d95eb86fc228c92e793b8a22ca7c62495ef3ae335f75e727ef6e7dad3ab1d2d4af6c5065ad44bc1902406071d36d6985df15335418eaac5fd87d6157cbe7888edad6d895f4190c5722d52ca9d3a6ff48f807c961efd43886131eced233778659f74dae0314182df8b0939d5a87d990f424ed80ba0e037d7871b6775ee836db2658ce9ed13a7ec43c07baf3bc57f82a8de06c3fe188856ba9b00405ea8a8544519f682e382e896fb9fedd9914fe7d2dd0e607a21a46b51211c92904790a6289653629af28c37ad6c9a3f003d7f735db8fc75c4ccaac8c1819a031c45d1ba8b0b90b600f68f0fa06cf4a88e7e10ba04a3e7e0395df7bcd89663f749c154356e54ccefcb65c0a1f205640d0266ad4b2963621d908490b8f567866ffe5157c574ca640c4eca72fc8d1d15e6a51e30dd07bdfa781917032d09239f21f143104a5f15e66d274029418dabe374a3b9a29b62bc7470fbbf17fb23c7c32bd4064e131cf3d6de4989a5c1b9df670a3c9c44839c06df5c91dec54f42df28ee203cf351802514c2aaa98fbbd1a54caf4a7acc45a30a8f6e02d545648d636630113149e6a125883b4436897c33cf833fa8e8a3c8508445e59fa71ab7365b514318f6ba38213a4fc1c4c53d16e2baeed6fc510fb42c51ef955cf73b5a7664b49f93abb25d17d1e4bf0696c4c44dae9e6852fe1690bc984f123f7d6c411e9808917d7aeab67d64e9ae797baf39967756b49f03e06549dda0ff620820fa2dcc4b5a5ddb09a8075aaaf7c2afffbca30adefd86bae4ed4b43a75cc4ca3c6b267307a0bb85281083502712f488ef2f70a0ca746901cd2650b518381f1d1e375640484eca12a4d2b7c05260f7f7e1a38e0b5b7ccd01ae1537b1e210c17e80043338d64ee40f4761b1e6fda463ebb31011d3032ef53e73c9eade1667f8ec373981ce2c22c4c63844cd90b8fcf76217d5e90091b9fbae6bb9db30a605d16234cd0595006f2dcc1f1c2deff81fc5d0e99c97c1658a19c0735448648828cd65a675ed69d5564cead57c6692ded8836f9e279e37df64db592b3405f6d7a7be1f1e1a7fe9aedec7faa76ad6d58ed2f6c265023cbe86e222cd62bd938bc464cf1ee6005ab309e7fb2fa909fc9d403af1ee3fce67c70b4b98dc4e676004cf6fc36c78c03e3d0efb42587470f8dbfaa75254dadcd81a1c951fcc3f2cb36b306070ec45c7c6d3981436bd363c7a1ca4e49de0bf113cba4d4bb5775ece3519dde2e587afd70b147a59ce25c722df9cbe31db337b0d21491f7c6d14ed4f1eac5e16bc6619bc33b0f5f4720688d2ded04b3ea8212ec5e46443d0db67629b014101b3bc0e5e3b9dad2b65c049c187acb10eef8e7624eead6c9f3c0c7150bc230d4c89fe8b1f2b7cbfaf86c60c12f3795c2633d15c21771a39191fd0182f7986f500e1aec8d32c8b0468f0952440cc5a8e311cde489c52e91cbb2e7910799b5e8e019ed9dd0683f7e34d892a0d34c8ba498906380be4d65aeb329c322d49b6321b679ff74a3a663845c3d6068831c56edca660f959e9300948ee3a25be95f975e1ac99100a82bc919d19aadc1f25db3f1c8838171722801a1b1c07ecbedaecdd8715ab21bf206628e0109f91e44353e1ea120114b312126586f882fc179fa18128eadb01952570a045be539fab96895cfe255ef5402cd988f7086a5bc65984052db30de38039195c53a2f8ab9db2ec47f92af9676e5ef9388fc2cf6e0f7b582784bb844c54d302a220b1af75b19b31fe80eea5c439d5fcd290c41f1f0996a246475cdee6095dfd0a3ef2f744c59dbd2c1cbd639f01dd1bfd0094027e1315a1e7e9725623e687f1e6e73c80ff62ad115dc3181a5f4c314ee7800b1befd082223290a0d5f10e884a6839c3b50cd055e7ee128042f8227f405c10ed81f524a2b0af1cbb6d5ba1c3c006981ae4fc8ac1d2b7fcc3ce6673c816485601e9c8c220808e48038468c1201f1d5a560df52c8d41b3e9d3ae887526816af84fd40c09a48290f0e5555a89230bee602e4bd7d6f477bc9dbe09a740c1d8dbd1a62e40e4735c5df5135b1c2c7ca7f52ddba64b1ad7953e53786985424f6f333936877f5a74bd01c152f81f2e903e95f6c19d03e91d9ca14601289839a3f2ae01376e158e6ecfe1f47460ab4d0cb4cc1dce6d404dce7a078917384548a55e3f0bf2ae06a2013b6a58827ead608889cd0cf02379a202c30d86267ec874a2abfe32713a0b1f8e29d00d49df277140aaab0eb3dd7810489c5b4cb070ee20870f40681a717edffde0ec5603166638efdace8d2cccc991768cb2d87382d81e98b2dcc1c694f576262061b99b9cab6df7c0fa96df2bf7fc8bdbca184f3c904c977b0a50f7883a3ee2c05d1a88cbf8c2db5fc62dce555d3dcf135f3651dfae44b92d53dc9a530a6dcf6a586837cf142afd5375f57b824e65c0b279e62d2a723fad97c21134c8642607b41d54ff9e28a6a8784f44d9c76bc3ae56a713c367ab3241f6c58e79bdb5a28b9fc58b2103bdbdaa44386c54d719ac17cbce06526aa0d82694abd5882a3399d2d3a7bb97fbb87f6201b2e1039d4cb98f48349551e9ec0c5ac1198fdb5e32f4fa2948c90a73d29c7645cbb0e1e6eca7508daabeb20e19fc6d123a702dd3e60eb38ee3b82a977a4b1e914e33605e371c9d29fcaabaa2174454ecdb6390abdfdf325e75242f976860107f9a1842c5f6a28784e379d3fae9dcbbdf4006b2cffc791fbd6b6aee404a189700b4ce0603598f26d0d2de5d81ed7802386fb4afc37affed7f2f1aa4ac807104c0c56ec196decc4086671b369e42dc4146a977df44456ee64ffb7d6a96ec935ecbf1191f29f5f268bb9ef10287144f2713709f19e5d110453e468d681ef0cf3d2f56f4d95094a91a473d8395c8437f968515de9b94bc8c0974c0e1626f971d7f1cc1877bd3440b2f112720241c3d08ee953be86882f8c076910a878d70187d4af0b8da2cdf4850919c6f49f2a3ad768e2446031ef7745b7731811f1e5e5b25b13a3009dd6e21b489ba18fbf070df20a95d9c40e16601395707817e2867039fce21f8cb86094ee1a340e49ca2f80b0b0c0eb20b534ee485cc57912d58fb6c2a8766eef4e32adf44167a091cdbdc61d227d868cf3f84e356701327d5f4c3b9dd52d1c69c807955f18b9f58a39c7dcb1924e0818b03b60c05eca13f02b8e10b3a9c3bdc89a2d641d049b1684abafbe2840e681be8a15a68d8b2c5d626bcfb4aefaeee413ef57622a023a475976d1662aafc910cf147e4be631472b07553a9f341d20c7b9161e9fa7c3f825bee0cd4ae44b4422df550e0f94bc04d6526bf4dc3e5803ed914afd345a6171ea4ceef39a259740f7e3197e282d3f05628904cb06158bac6919bda38a48b264638d489bf3681ba5c0fb8331007f3883076aff6a9ef42215c3ea0dd2e1f90828c9cd36815735d61e7b0d42ab9fe480aeb0aef1074948150d7be94f140f534127715443b72f8da3dc2d61cc8c93893d2fa3334b355287f63750bc82d77a180806cbee1780b070ec92d3556475f58884f01c4873a05dedb98bef8c351fa59948acf1a13fca2bec619dd418e589f4f608eb51c568a05137a84c33622ebfaea8fa984a433a7aa734c281ea2f0026f750f1f53bf1a44ed88666ac1ffcd8726b0feea7b8ee713968534877c845ad5a658e1cc3a00c684f8670d0fa65b4d1f45d261065e3e68add39deaf9f0ddf2f981e48be45dac0decdf08e088ca0358822b8c9c1b2ddabd59902ff7ded0a52d2f96c5ad00e7279a4321ddb69d7be48b8c781b3704b0519acc33b1ddd85d44a622d5ee96218c142a448192bd4e19c1ddb472098fe57a35fc92beea23a697dbdc8b659b6c66939634a29697a9146dcbb38ae97ec14eebf523a49375d1dc00b6ed2f2eb0f88801ebe6497babd62fc2f9bb609541fcc9349e66804610eaea4ac94b11367f26eb1cfc730e69cc452d07d125b938e365db98d1f733ebd73b52ed9276a7cf515aa2d05a98f66187c51e"], 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)}) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.662906126s ago: executing program 0 (id=1243): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000000000000000000500000000000000000100000000000000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x5, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) 3.863385386s ago: executing program 2 (id=1244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@broadcast, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e22, 0x975a, 0x2, 0x10, 0x80, 0x2c}, {0x2, 0x3, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0xd, 0x5}, {0x1bf, 0x73, 0x6c0, 0x28d}, 0x1, 0x6e6bbe, 0x1, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in6=@loopback, 0x3503, 0x0, 0x1, 0x7, 0x4, 0x7, 0xd}}, 0xe8) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0x9, 0x20e0) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r5) fallocate(r6, 0x10, 0x0, 0x72000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 3.860489704s ago: executing program 1 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c002080040002"], 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) 3.461146387s ago: executing program 3 (id=1246): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40844) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.38462589s ago: executing program 1 (id=1247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x80008, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, &(0x7f0000000640), 0x0, 0x0, 0xe}, 0x4048043) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r2, 0x56, "6746ba576aa4744826bd50a8b4ad465f5399a19d4f772be41c1e401cd701756f0e08ebbabee1aa21e6bd5eb494f832d75cb8b9eb50603d6357080a3c04f32436a5f2968d8cb16da6387353eb78b5aaa48119242c313d"}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.277828975s ago: executing program 1 (id=1248): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5370, 0x4, 0x0, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000008c0), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESDEC=r5], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) fsmount(r4, 0x0, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.320785373s ago: executing program 0 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c00018010000200f9ffffff"], 0x9c}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "be74ea8625aa6cf6aa7430376148861329c09e0d4be58feb1c691b2111c3f529b5831fa9711eb4596080302f79f0d53c7d126230b6ac118ce92667aec56506c9", 0x2d}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0xc00, 0x0, 0x100, 0x100}}, 0x50) (async) r4 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0x4a092, r4, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fallocate(r4, 0x3, 0x6, 0xfffffffa) (async) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x450, 0x0, 0x0, 0x0, 0xff, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x40, 0xaf, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0xd16}}, {{{0x9, 0x5, 0x81, 0x3, 0x260, 0xf, 0x98, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0xa, 0x8}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0xb3, 0x3, 0x40, 0x9}, 0xea, &(0x7f0000000080)={0x5, 0xf, 0xea, 0x5, [@generic={0xa2, 0x10, 0x4, "f3298ad0ed90eae69780ef1eacf6fd417e874eb83313c60d24f1af1cb2352eb45d7922a0c1a58a95b7de7c57708d93ff8ded834083fb8b407b028b72d53fb1742fcf0977e63e8c8f4ff75d85bd3d71ebcf96aaac74dcfd21db5b2973ce42071acd12a5ce3a5acf74370c62e5f61c07a7c580a8e1c94ab94b1d910a158c57a6535cc467763e6f8123a1ef9b7725e7a8626110934d3b73f584348e367de00ddb"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x4, 0xf, 0x3, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3f566cef46f74e4400b97b543d332365"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a1ef2b4c121a366ee9188ed3f53b7402"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x8, 0x7, 0x100, 0x2}]}, 0x6, [{0x8b, &(0x7f0000000180)=@string={0x8b, 0x3, "ab3f6b506353b042b75d42907b5551260d2a38a053fa499289e84ef3c13f4b5e8e2612218eaa6a4d2260e9dd9276d2c264de7af0b4502cebe8bd8784be67e2881a7132afba2d3dc5956ca6eab316db8df104e8b8ce619878f3b9b1dd7882ac33646b95a366c0f58a4aad287e8d0c06bcc818aaf9d019ef49cee1960c97aa569b5fa2549b8bdb13b098"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c05}}, {0x50, &(0x7f00000003c0)=@string={0x50, 0x3, "3a5049ed52a2ed045baa84dde3d89894b7f48907bf07c697959b377c1d14c0d1353d516ddbf1035b2ea960c5210f8280f232e7f961b591c5e82b86e56658fa30e46c88d9b03cfd40ec27db0e1d8a"}}]}) syz_usb_control_io(r5, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0x7, 0x59, {0x59, 0x1, "f921e95a6a6fda5f95a3a358946a16fe20e629a862c8518227d769901e44e58e505c9ae794a862855c7516e5e11f542d611d7264dd061c47bf524fc51271a36fd9e2e5fe060c0c1f169ce17f56a06a49f0fac3200363d5"}}, &(0x7f0000000940)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "a0974ab9080586b83ecafbc22f2ff0ab11a6f233cacafb21584d9784edfa55a8f9f12d9fad863fcc65a24156cb785dc32ff6b54fe2f39f4f1923a946add97fcab14c11ae3b2d91ee89f3669ca50e5ffdfaebb8c85592f79c49170a6442ca2ba87fd37410ba9e9ceb68cf9a13d2"}}, &(0x7f00000009c0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x6, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "2103a200da8b908a1d46dcd4d3eac3ee"}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xca, 0x0, 0x8, 0x6, "09bc97b1", "a37b4952"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x0, 0xf2, 0x2, 0x7}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)={0x20, 0x8, 0x36, "69cb560732e2aa51ac014e3d539b59b4fcc3c86b1ded9ae0dd42f1547a7a7e155a5155411139bb1040552bb3d9b3ce1f5ae8cc75465d"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0xf000]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "551e"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000d80)={0x40, 0x19, 0x2, 'u]'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0xdf}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x5}}) 2.14990039s ago: executing program 2 (id=1250): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_usb_connect(0x3, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201003c7216ae20e20424140a8a0102030109022f00010000000009040000000266b9000524060e82524c4316ff8b06749ae386e8e1e98f998269f2463b8b62b50a23c65e730acc4fd2c0f6c9c7bc189f10bdafc118b5fbb41435adc5ce85b78cfaf87cbda20ef0de3a1d238de52b698bae57e9d1446fa3f24f167e1f5806781620127d1dbfccbb2cec1af829f4d05493b10adac4283f1b0afb7cb1a080bd54dbcf559454fae99df1b5d95acbde05985d74873183fd9e811ebc4a8155a7d243a7201e4bba"], 0x0) 2.11571295s ago: executing program 0 (id=1251): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) 1.954983281s ago: executing program 0 (id=1252): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce090503"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) close(0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 1.872339388s ago: executing program 3 (id=1253): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0xf5, 0x12, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x12, 0x10000}, 0x80, 0x0}, 0x24000049) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) r0 = socket$igmp6(0xa, 0x3, 0x2) getpeername(r0, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40142, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7, 0x201d}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0xb0d20b983e4c970a, @in={0x2, 0x4e24, @broadcast}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0xb0d20b983e4c970a, @in={0x2, 0x4e24, @broadcast}}}, 0xa0) r6 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) fsetxattr$security_ima(r6, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.651943626s ago: executing program 3 (id=1254): socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000003c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) connect(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000002200)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001feffff000800000100000040000000"], 0x118) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1308000000000000110011000000040009803400098000000100030000004e00010000000000000002000000000008000100000000000800020000000000a9fd010000000000"], 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.227655516s ago: executing program 4 (id=1255): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002000000"], 0x0) 1.06207423s ago: executing program 2 (id=1256): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x2d, 0xa, 0xffffffffffffccb4, {0x8, @udp_ip4_spec={@rand_addr=0x3, @local, 0x4e22, 0x4e22, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4d8, 0x73d, [0x24, 0x9]}, @esp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x2, 0x6b}, {0x0, @remote, 0x80, 0x3, [0x6, 0xfffffffb]}, 0x4, 0x5}}}) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0xcdd5, 0x7}}, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4) r6 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r7 = fsmount(r6, 0x0, 0xb) r8 = socket$inet(0x2, 0x3, 0x100) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) sendmsg$inet_sctp(r8, &(0x7f0000000640)={&(0x7f0000000080)=@in={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x8000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000180), 0xfea7) getsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f00000004c0)=""/220, &(0x7f00000005c0)=0xdc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) lseek(r0, 0x5, 0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r11, r10, 0x0, 0x100000002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x2, 0x30}, &(0x7f0000000300)=0xc) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000000c0)='/dev/video#\x00', &(0x7f00000006c0)="1f3ce10315e5a5f5beb5aa687b94cae1dba5801d6931d720b215e1aaf4466f1f57a09490e12ed4442f9b4fd5b71d9e1ce77eda535424b72f05932e3d0c0fad954436bd318044103ce14d209fec5d91b22248389f6840409f3040a6fb9dbb707c0eb695859cc134c02b5420ead729a0909755a7ac5b12b6d23c6a36b3ddac0e37bce27243b39a76c7dd230fc730d2084fd9def8fcbe09", 0x96) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000340)={r12, 0xd6, "107b4c3eca5a536ed8e01d3ff7baa83c071ad2e20269fd66de27a83edb9fde2be7df15c9fcd17beaf77aea32e2c0d402e76a52b19075017eff6200191f39116ce241a77d75d05c2b6e9b53c09cc54fd67ae91baffc0400f05670f2a13003f11829d5cb5f60804e71c84a5eb0df20d3ba7ce3107efa9a812d5c4bc951c0ee2626e4e45f809a159221a3b592b8a88ab4907026379c68a7f692d93bbb832bd930cffde14d2a36d04e672277cbf650f8095a99cc91e76e570be47e4834eb5a9af170e1c71cb8e3bc94ae213f66a96f8cf4e07aa6a8958710"}, &(0x7f0000000480)=0xde) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f00000001c0)={0x3, @win={{0x0, 0x0, 0x1, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0}}) 892.605689ms ago: executing program 2 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x79e, 0x20000) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000280)) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@code={0xa, 0x5d, {"410fc7bd2e4f000066baf80cb87681238bef66bafc0cb000eed0c8440f01f866baf80cb823ebdb8def66bafc0cec0f01c266bad104ed0fb9b835280000b9e20a00000f32c44329416c71da0d"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x4, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c00, 0xfffffffffffffff9, 0x1, 0xd8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x847, 0x6}}, @in_dx={0x69, 0x20, {0xf756, 0x5}}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4818, 0x100000001, 0x2}}], 0x1a5}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) 451.675301ms ago: executing program 2 (id=1258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x80008, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, &(0x7f0000000640), 0x0, 0x0, 0xe}, 0x4048043) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r2, 0x56, "6746ba576aa4744826bd50a8b4ad465f5399a19d4f772be41c1e401cd701756f0e08ebbabee1aa21e6bd5eb494f832d75cb8b9eb50603d6357080a3c04f32436a5f2968d8cb16da6387353eb78b5aaa48119242c313d"}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) (fail_nth: 4) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1259): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x97, 0x9}, {0x9, 0x5, 0x0, 0x2, 0x8, 0xa, 0x10, 0x93}, {0x9, 0x5, 0x9, 0x3, 0x600, 0xf9, 0x2, 0xc0}}}}}}]}}, 0x0) syz_usb_disconnect(r1) kernel console output (not intermixed with test programs): ፦쯷撋곲隩嗉 [ 300.757194][ T5998] usb 4-1: SerialNumber: 倊 [ 300.808599][ T5912] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 300.824288][ T9346] misc userio: No port type given on /dev/userio [ 300.839225][ T5912] usb 5-1: device descriptor read/8, error -71 [ 300.853727][ T9344] misc userio: The device must be registered before sending interrupts [ 300.863616][ T912] usb 2-1: Using ep0 maxpacket: 8 [ 300.872149][ T912] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 300.888149][ T912] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 300.909492][ T912] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 300.921041][ T912] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 300.931107][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.994688][ T5998] usbhid 4-1:1.0: can't add hid device: -71 [ 301.001675][ T5998] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 301.034573][ T5998] usb 4-1: USB disconnect, device number 53 [ 301.097064][ T5912] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 301.136970][ T5912] usb 5-1: device descriptor read/8, error -71 [ 301.147581][ T912] usb 2-1: string descriptor 0 read error: -71 [ 301.204367][ T912] usb 2-1: USB disconnect, device number 53 [ 301.246989][ T5912] usb usb5-port1: unable to enumerate USB device [ 301.491528][ T9361] netlink: 92 bytes leftover after parsing attributes in process `syz.2.835'. [ 301.503038][ T9361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.089388][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 302.107600][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 302.117169][ T5998] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 302.127612][ T9371] loop6: detected capacity change from 0 to 524288000 [ 302.279529][ T5998] usb 4-1: Using ep0 maxpacket: 32 [ 302.286816][ T5998] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 302.295140][ T5998] usb 4-1: config 0 has no interface number 0 [ 302.311404][ T5998] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 302.325195][ T5998] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 302.337711][ T5998] usb 4-1: config 0 interface 126 has no altsetting 0 [ 302.354064][ T5998] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 302.365948][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.379751][ T5998] usb 4-1: Product: syz [ 302.397286][ T5998] usb 4-1: Manufacturer: syz [ 302.420760][ T5998] usb 4-1: SerialNumber: syz [ 302.485435][ T5998] usb 4-1: config 0 descriptor?? [ 302.495856][ T9367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.507055][ T9367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.806372][ T5910] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 302.919864][ T5998] ir_usb 4-1:0.126: IR Dongle converter detected [ 302.974117][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.989366][ T5910] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 303.009745][ T5910] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 303.029282][ T5910] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.043837][ T5910] usb 5-1: config 1 interface 0 has no altsetting 0 [ 303.058252][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 303.068142][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.084489][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.115723][ T9376] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 303.125484][ T5998] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 303.125796][ T9376] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 303.133755][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 303.158359][ T9388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.843'. [ 303.171039][ T9388] fuse: Bad value for 'user_id' [ 303.175940][ T9388] fuse: Bad value for 'user_id' [ 303.222723][ T5910] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 303.338421][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.360189][ T9367] kvm: pic: non byte write [ 303.366835][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 303.376697][ T9] usb 3-1: config 9 has an invalid interface number: 207 but max is 0 [ 303.385479][ T9] usb 3-1: config 9 has no interface number 0 [ 303.393311][ T9] usb 3-1: config 9 interface 207 has no altsetting 0 [ 303.403785][ T9] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 303.414621][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.431999][ T9] usb 3-1: Product: syz [ 303.445928][ T9] usb 3-1: Manufacturer: syz [ 303.452441][ T9] usb 3-1: SerialNumber: syz [ 303.466505][ T5910] usb 5-1: USB disconnect, device number 58 [ 303.504178][ T5998] usb 4-1: USB disconnect, device number 54 [ 303.532071][ T5998] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 303.554666][ T5998] ir_usb 4-1:0.126: device disconnected [ 303.722364][ T9] usb 3-1: USB disconnect, device number 61 [ 304.595098][ T9416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 304.984936][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.853'. [ 305.512239][ T9438] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 305.906474][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 306.036383][ T5912] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 306.191835][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 306.200712][ T9] usb 5-1: config 0 has no interfaces? [ 306.206372][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 306.214368][ T5912] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 306.225844][ T5912] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 306.226787][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 306.246648][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 306.246688][ T5912] usb 4-1: config 127 has no interface number 1 [ 306.254766][ T9] usb 5-1: Manufacturer: syz [ 306.271988][ T9] usb 5-1: config 0 descriptor?? [ 306.297744][ T5912] usb 4-1: config 127 interface 171 has no altsetting 0 [ 306.357439][ T9450] veth0: entered promiscuous mode [ 306.371982][ T9450] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 306.430259][ T5912] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 306.444996][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.466808][ T5912] usb 4-1: Product: syz [ 306.479785][ T5912] usb 4-1: Manufacturer: syz [ 306.497914][ T5912] usb 4-1: SerialNumber: syz [ 306.546958][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.558277][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.469282][ T9] usb 5-1: USB disconnect, device number 59 [ 308.618590][ T5912] xr_serial 4-1:127.171: xr_serial converter detected [ 308.652181][ T5912] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 308.694041][ T5912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 308.829169][ T9478] vivid-007: disconnect [ 308.845599][ T5912] usb 4-1: USB disconnect, device number 55 [ 308.881304][ T5912] xr_serial 4-1:127.171: device disconnected [ 309.000447][ T9482] fuse: Bad value for 'user_id' [ 309.018086][ T9482] fuse: Bad value for 'user_id' [ 309.104791][ T9485] overlayfs: missing 'lowerdir' [ 309.314440][ T9487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.869'. [ 309.500611][ T9474] vivid-007: reconnect [ 309.596671][ T5998] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 309.677994][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 309.709930][ T9496] program syz.4.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.786532][ T5998] usb 4-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 309.797507][ T5998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.203818][ T9506] vivid-007: disconnect [ 310.218462][ T9506] netlink: 168 bytes leftover after parsing attributes in process `syz.4.874'. [ 310.500469][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.556732][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.587439][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.626633][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.041548][ T9501] vivid-007: reconnect [ 311.274813][ T9517] netlink: 76 bytes leftover after parsing attributes in process `syz.1.877'. [ 311.333933][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 311.491867][ T9523] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 311.657508][ T9531] binder: BINDER_SET_CONTEXT_MGR already set [ 311.663597][ T9531] binder: 9521:9531 ioctl 4018620d 200000000040 returned -16 [ 311.723612][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 311.839858][ T9530] PKCS7: Unknown OID: [4] 4.2(bad) [ 311.855832][ T9530] PKCS7: Only support pkcs7_signedData type [ 311.926395][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 311.935216][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 311.944193][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 312.052926][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 312.237692][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 312.271586][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.462677][ T5998] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.481708][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.506874][ T5998] usb 4-1: Product: syz [ 312.521465][ T5998] usb 4-1: can't set config #1, error -71 [ 312.528765][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 312.607460][ T5998] usb 4-1: USB disconnect, device number 56 [ 312.616339][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 312.646288][ T9] usb 2-1: Product: syz [ 312.652696][ T9] usb 2-1: Manufacturer: syz [ 312.668940][ T9] usb 2-1: SerialNumber: syz [ 312.691914][ T9] usb 2-1: config 0 descriptor?? [ 312.720227][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 312.764514][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 312.960615][ T9] usb 2-1: USB disconnect, device number 54 [ 312.966667][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 312.981420][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 313.126661][ T5998] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 313.324406][ T9531] syz.4.881 (9531): drop_caches: 2 [ 313.339790][ T5998] usb 3-1: Using ep0 maxpacket: 16 [ 313.409432][ T5998] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 313.419153][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.499119][ T5998] usb 3-1: config 0 descriptor?? [ 313.928720][ T9537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.944860][ T9537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.186362][ T912] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 314.266320][ T5912] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 314.316305][ T912] usb 2-1: device descriptor read/64, error -71 [ 314.429889][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.441601][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.459800][ T5912] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 314.480200][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.498064][ T5912] usb 5-1: config 0 descriptor?? [ 314.626370][ T912] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 314.786445][ T912] usb 2-1: device descriptor read/64, error -71 [ 314.896707][ T912] usb usb2-port1: attempt power cycle [ 314.932710][ T5912] sony 0003:054C:024B.0011: unexpected long global item [ 314.941784][ T5912] sony 0003:054C:024B.0011: parse failed [ 314.954022][ T5912] sony 0003:054C:024B.0011: probe with driver sony failed with error -22 [ 315.276519][ T912] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 315.298654][ T912] usb 2-1: device descriptor read/8, error -71 [ 315.566303][ T912] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 315.586952][ T912] usb 2-1: device descriptor read/8, error -71 [ 315.663423][ T5912] usb 5-1: USB disconnect, device number 60 [ 315.697142][ T912] usb usb2-port1: unable to enumerate USB device [ 315.818754][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 315.943192][ T5998] usbhid 3-1:0.0: can't add hid device: -71 [ 315.958487][ T5998] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 316.043568][ T5998] usb 3-1: USB disconnect, device number 62 [ 316.063299][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 316.826346][ T5998] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 316.976277][ T5998] usb 4-1: Using ep0 maxpacket: 16 [ 316.984428][ T5998] usb 4-1: config 0 has no interfaces? [ 317.005690][ T5998] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.042673][ T5998] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.074982][ T5998] usb 4-1: Manufacturer: syz [ 317.141615][ T5998] usb 4-1: config 0 descriptor?? [ 317.164042][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.173135][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.261100][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 317.408843][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.419078][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.697101][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 318.626742][ T5828] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 318.776611][ T5828] usb 2-1: device descriptor read/64, error -71 [ 319.158693][ T5828] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 319.342681][ T5828] usb 2-1: device descriptor read/64, error -71 [ 319.456930][ T5828] usb usb2-port1: attempt power cycle [ 319.815702][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 319.835355][ T5828] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 319.852097][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.912'. [ 319.981688][ T9662] loop6: detected capacity change from 0 to 524288000 [ 320.245142][ T5828] usb 2-1: device descriptor read/8, error -71 [ 320.517952][ T5828] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 320.569756][ T5828] usb 2-1: device descriptor read/8, error -71 [ 320.689036][ T5828] usb usb2-port1: unable to enumerate USB device [ 320.801112][ T912] usb 4-1: USB disconnect, device number 57 [ 320.943170][ T9674] dlm: no locking on control device [ 321.646549][ T5912] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 321.686406][ T912] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 322.027985][ T912] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 322.036506][ T912] usb 2-1: config 0 has no interface number 0 [ 322.061115][ T912] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 322.072825][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.101869][ T5912] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 322.126934][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.149679][ T912] usb 2-1: Product: syz [ 322.179734][ T912] usb 2-1: Manufacturer: syz [ 322.191201][ T5912] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 322.210575][ T912] usb 2-1: SerialNumber: syz [ 322.232101][ T912] usb 2-1: config 0 descriptor?? [ 322.245816][ T5912] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 322.274982][ T5912] usb 4-1: Manufacturer: syz [ 322.319236][ T5912] usb 4-1: config 0 descriptor?? [ 322.474634][ T9699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.496278][ T5912] rc_core: IR keymap rc-hauppauge not found [ 322.523092][ T5912] Registered IR keymap rc-empty [ 322.530592][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 322.544948][ T9699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.549086][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 322.566973][ T912] usb 2-1: Firmware version (0.0) predates our first public release. [ 322.586487][ T912] usb 2-1: Please update to version 0.2 or newer [ 322.661865][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 322.781196][ T912] usb 2-1: USB disconnect, device number 63 [ 322.965664][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.997162][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.028137][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.045447][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 323.045463][ T30] audit: type=1326 audit(1766306264.017:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.2.923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0700d8f749 code=0x0 [ 323.045549][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.116491][ T5828] usb 4-1: USB disconnect, device number 58 [ 323.356286][ T5912] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 323.358772][ T9718] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 323.371585][ T912] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 323.614774][ T5912] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 323.631331][ T912] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.645558][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.722268][ T912] usb 2-1: Product: syz [ 323.802404][ T912] usb 2-1: Manufacturer: syz [ 323.825496][ T912] usb 2-1: SerialNumber: syz [ 323.831394][ T5912] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 323.849987][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.865968][ T912] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.991877][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 324.005497][ T5912] usb 3-1: Product: syz [ 324.038636][ T5912] usb 3-1: Manufacturer: syz [ 324.065970][ T5912] usb 3-1: SerialNumber: syz [ 324.083542][ T5912] usb 3-1: config 0 descriptor?? [ 324.107714][ T5913] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 324.128858][ T5912] go7007-loader 3-1:0.0: can't handle multiple config [ 324.151921][ T5912] go7007-loader 3-1:0.0: probe failed [ 324.266274][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 324.279681][ T5913] usb 5-1: config 0 has no interfaces? [ 324.300430][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 324.330604][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 324.365378][ T5913] usb 5-1: Manufacturer: syz [ 324.385872][ T5913] usb 5-1: config 0 descriptor?? [ 324.615142][ T5828] usb 2-1: USB disconnect, device number 64 [ 324.645928][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.655739][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.836451][ T5913] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 324.862020][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.874894][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.998945][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 325.013613][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.031407][ T5913] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 325.045410][ T5913] usb 4-1: config 4 has no interface number 0 [ 325.052265][ T5913] usb 4-1: config 4 interface 146 has no altsetting 0 [ 325.063039][ T5913] usb 4-1: New USB device found, idVendor=13d8, idProduct=0421, bcdDevice=af.79 [ 325.076298][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 325.084772][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.094639][ T24] ath9k_htc: Failed to initialize the device [ 325.104396][ T5913] usb 4-1: Product: syz [ 325.109602][ T5828] usb 2-1: ath9k_htc: USB layer deinitialized [ 325.122480][ T5913] usb 4-1: Manufacturer: syz [ 325.132087][ T5913] usb 4-1: SerialNumber: syz [ 325.363747][ T5913] usb 4-1: USB disconnect, device number 59 [ 325.581862][ T9737] kAFS: unable to lookup cell '(,c' [ 325.657622][ T9732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.663957][ T9732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.670412][ T9732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.678786][ T9732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.685164][ T9732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.131498][ T24] usb 3-1: USB disconnect, device number 63 [ 326.375509][ T5828] usb 5-1: USB disconnect, device number 61 [ 326.533424][ T30] audit: type=1326 audit(1766306267.507:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.625201][ T30] audit: type=1326 audit(1766306267.507:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.691090][ T30] audit: type=1326 audit(1766306267.507:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.728072][ T30] audit: type=1326 audit(1766306267.507:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.777319][ T5913] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 326.796958][ T30] audit: type=1326 audit(1766306267.507:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.846356][ T30] audit: type=1326 audit(1766306267.517:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.899725][ T30] audit: type=1326 audit(1766306267.517:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 326.958869][ T5913] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 326.988788][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.018860][ T30] audit: type=1326 audit(1766306267.517:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 327.043882][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.077205][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.089788][ T30] audit: type=1326 audit(1766306267.517:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 327.162145][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.191547][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.230253][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.257160][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.312221][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.352250][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.378908][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.406701][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.488975][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.508657][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.543520][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.586529][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.604662][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.625323][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.637789][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.645424][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.655778][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.676577][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.687733][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.697586][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.707300][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.718277][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.718290][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.734282][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 327.755061][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.768693][ T5913] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 327.778202][ T5913] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 327.789353][ T5913] usb 3-1: Product: syz [ 327.805603][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.805603][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.822119][ T5913] usb 3-1: Manufacturer: syz [ 327.828198][ T5913] usb 3-1: SerialNumber: syz [ 327.855313][ T5913] usb 3-1: config 0 descriptor?? [ 327.878766][ T5913] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 328.067311][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 328.067322][ T30] audit: type=1326 audit(1766306269.047:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.180339][ T30] audit: type=1326 audit(1766306269.067:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.241837][ T9762] binder: 9761:9762 ioctl c0306201 200000000080 returned -14 [ 328.264929][ T30] audit: type=1326 audit(1766306269.127:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.300350][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 328.314282][ T9762] binder: 9761:9762 ioctl 4018620d 200000000040 returned -16 [ 328.344970][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.368317][ T30] audit: type=1326 audit(1766306269.127:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.401217][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.444567][ T30] audit: type=1326 audit(1766306269.127:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0700d8df90 code=0x7ffc0000 [ 328.477379][ T30] audit: type=1326 audit(1766306269.127:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.504423][ T30] audit: type=1326 audit(1766306269.127:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.555265][ T30] audit: type=1326 audit(1766306269.127:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.594526][ T30] audit: type=1326 audit(1766306269.127:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 328.631538][ T30] audit: type=1326 audit(1766306269.127:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0700d8f749 code=0x7ffc0000 [ 329.287443][ T5913] usb 3-1: USB disconnect, device number 64 [ 329.296740][ T5913] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 329.491513][ T9789] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 329.661277][ T9792] netlink: 'syz.0.943': attribute type 7 has an invalid length. [ 329.829652][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 330.016290][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 330.027135][ T24] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 330.035302][ T24] usb 4-1: config 0 has no interface number 1 [ 330.048155][ T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 330.057496][ T5913] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 330.066360][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.110190][ T24] usb 4-1: Product: syz [ 330.114381][ T24] usb 4-1: Manufacturer: syz [ 330.128871][ T24] usb 4-1: SerialNumber: syz [ 330.301707][ T24] usb 4-1: config 0 descriptor?? [ 330.307327][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 330.346339][ T5913] usb 3-1: config 0 has no interfaces? [ 330.369385][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.395149][ T24] snd-usb-audio 4-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 330.395521][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 330.432198][ T5913] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.458518][ T5913] usb 3-1: Manufacturer: syz [ 330.527508][ T5913] usb 3-1: config 0 descriptor?? [ 330.528564][ T5828] usb 4-1: USB disconnect, device number 60 [ 330.576980][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 330.910231][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.940613][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.656336][ T5913] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 331.846783][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 331.885696][ T5913] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 331.907352][ T5913] usb 2-1: config 179 has no interface number 0 [ 331.913734][ T5913] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 331.955153][ T5913] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 332.040542][ T9828] binder: 9823:9828 ioctl 4018620d 0 returned -22 [ 332.050003][ T9828] binder: 9823:9828 ioctl c018620c 200000000380 returned -1 [ 332.096118][ T5913] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.108805][ T5913] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 332.676770][ T5913] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 332.690714][ T5913] usb 2-1: config 179 interface 65 has no altsetting 0 [ 332.706393][ T5913] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 332.715940][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.759064][ T5913] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26 [ 333.293378][ T5913] usb 3-1: USB disconnect, device number 65 [ 333.886309][ T5913] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 334.111478][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.122807][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.266532][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 334.273474][ T5913] usb 3-1: config 1 interface 0 has no altsetting 0 [ 334.286627][ T5913] usb 3-1: string descriptor 0 read error: -71 [ 334.299325][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 334.327711][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.352971][ T5913] usb 3-1: can't set config #1, error -71 [ 334.372538][ T5913] usb 3-1: USB disconnect, device number 66 [ 334.582402][ T9842] random: crng reseeded on system resumption [ 334.878869][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'. [ 335.156863][ T5913] usb 2-1: USB disconnect, device number 65 [ 335.786407][ T5913] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 335.966301][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 335.978506][ T5913] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 335.996272][ T5998] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 336.005604][ T5913] usb 2-1: config 0 has no interface number 0 [ 336.019533][ T5913] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.029681][ T5913] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 336.040172][ T5913] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 336.058083][ T5913] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 336.072045][ T5913] usb 2-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 336.101776][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.119254][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.964'. [ 336.130860][ T5913] usb 2-1: Product: syz [ 336.135050][ T5913] usb 2-1: Manufacturer: syz [ 336.141275][ T5913] usb 2-1: SerialNumber: syz [ 336.146392][ T5998] usb 3-1: Using ep0 maxpacket: 8 [ 336.153813][ T5913] usb 2-1: config 0 descriptor?? [ 336.158140][ T5998] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 336.177135][ T5998] usb 3-1: config 0 has no interface number 0 [ 336.189669][ T5998] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.209926][ T5998] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 336.222716][ T5998] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.240221][ T5998] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.270779][ T5998] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.281013][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.296418][ T5998] usb 3-1: config 0 descriptor?? [ 336.306819][ T5998] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 336.328220][ T5828] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 336.369498][ T5913] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 336.381628][ T5913] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 336.391851][ T5913] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 336.408032][ T5913] usb 2-1: USB disconnect, device number 66 [ 336.486558][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 336.493758][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.515347][ T5828] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 336.532910][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.555238][ T5828] usb 4-1: config 0 descriptor?? [ 336.574491][ T5828] gspca_main: spca501-2.14.0 probing 0000:0000 [ 336.616449][ T5998] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 336.779759][ T9871] support for the xor transformation has been removed. [ 336.800197][ T5998] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.812132][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.842265][ T5998] usb 5-1: config 0 descriptor?? [ 336.855437][ T5998] cp210x 5-1:0.0: cp210x converter detected [ 336.992774][ T5828] gspca_spca501: reg write: error -71 [ 337.005566][ T5828] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 337.014392][ T5828] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 337.041601][ T5828] usb 4-1: USB disconnect, device number 61 [ 337.264783][ T5998] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 337.322095][ T5998] usb 5-1: cp210x converter now attached to ttyUSB0 [ 337.444687][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 337.444704][ T30] audit: type=1326 audit(1766306278.417:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a12f8f749 code=0x7ffc0000 [ 337.476045][ T30] audit: type=1326 audit(1766306278.417:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a12f8f749 code=0x7ffc0000 [ 337.503954][ T9885] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 337.512153][ T9885] netlink: 'syz.4.967': attribute type 2 has an invalid length. [ 337.648684][ T30] audit: type=1326 audit(1766306278.447:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7a12f8f749 code=0x7ffc0000 [ 337.762589][ T5998] usb 5-1: USB disconnect, device number 62 [ 337.772314][ T30] audit: type=1326 audit(1766306278.447:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a12f8f749 code=0x7ffc0000 [ 337.865898][ T30] audit: type=1326 audit(1766306278.447:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f7a12f8f749 code=0x7ffc0000 [ 337.895674][ T5998] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 337.968806][ T5998] cp210x 5-1:0.0: device disconnected [ 338.035443][ T9919] input: syz1 as /devices/virtual/input/input27 [ 338.166372][ T5913] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 338.336356][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 338.352411][ T5913] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 53 [ 338.381065][ T5913] usb 4-1: can't read configurations, error -22 [ 338.536415][ T5913] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 338.881750][ T24] usb 3-1: USB disconnect, device number 67 [ 338.909485][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 338.989897][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 339.014570][ T5913] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 53 [ 339.033686][ T5913] usb 4-1: can't read configurations, error -22 [ 339.040101][ T912] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 339.055876][ T5913] usb usb4-port1: attempt power cycle [ 339.208439][ T912] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 339.221094][ T912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 339.234728][ T912] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.254254][ T912] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.276316][ T912] usb 2-1: Product: syz [ 339.280853][ T912] usb 2-1: Manufacturer: syz [ 339.285511][ T912] usb 2-1: SerialNumber: syz [ 339.292660][ T912] usb 2-1: config 0 descriptor?? [ 339.305840][ T912] usb 2-1: selecting invalid altsetting 0 [ 339.396386][ T24] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 339.416399][ T5913] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 339.456936][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 339.470661][ T5913] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 53 [ 339.486321][ T5913] usb 4-1: can't read configurations, error -22 [ 339.489872][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.508375][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.549799][ T9934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.579750][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 339.601230][ T24] usb 3-1: config 5 has an invalid interface number: 38 but max is 1 [ 339.607621][ T9930] loop7: detected capacity change from 0 to 16384 [ 339.619005][ T24] usb 3-1: config 5 has an invalid interface number: 67 but max is 1 [ 339.627386][ T5913] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 339.647128][ T24] usb 3-1: config 5 has no interface number 0 [ 339.665603][ T24] usb 3-1: config 5 has no interface number 1 [ 339.673035][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 339.685831][ T5913] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 53 [ 339.698289][ T24] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 339.709455][ T5913] usb 4-1: can't read configurations, error -22 [ 339.722803][ T5913] usb usb4-port1: unable to enumerate USB device [ 339.729261][ T24] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 339.755395][ T24] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 339.786290][ T24] usb 3-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 339.803840][ T24] usb 3-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 339.814667][ T24] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 339.825639][ T24] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 339.838038][ T24] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x6, skipping [ 339.849672][ T24] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x2, skipping [ 340.022834][ T24] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x7, skipping [ 340.024059][ T9939] loop7: detected capacity change from 16384 to 16380 [ 340.033992][ T24] usb 3-1: config 5 interface 38 has no altsetting 0 [ 340.095662][ T24] usb 3-1: config 5 interface 67 has no altsetting 0 [ 340.118050][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=0002, bcdDevice= 5.96 [ 340.127180][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.143998][ T24] usb 3-1: Product: syz [ 340.155316][ T24] usb 3-1: Manufacturer: syz [ 340.182896][ T24] usb 3-1: SerialNumber: syz [ 340.225350][ T9932] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 340.500267][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.523400][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.666592][ T24] usb 3-1: USB disconnect, device number 68 [ 341.472200][ T9968] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 341.504156][ T9968] netdevsim netdevsim2: Direct firmware load for / [ 341.504156][ T9968] failed with error -2 [ 341.522784][ T9968] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 341.522784][ T9968] [ 341.618498][ T5998] usb 2-1: USB disconnect, device number 67 [ 342.496307][ T5998] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 342.699883][ T5998] usb 4-1: device descriptor read/64, error -71 [ 342.726129][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.992'. [ 342.738135][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.992'. [ 343.026648][ T5998] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 343.156653][ T5998] usb 4-1: device descriptor read/64, error -71 [ 343.277063][ T5998] usb usb4-port1: attempt power cycle [ 343.616288][ T5998] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 343.677388][ T5998] usb 4-1: device descriptor read/8, error -71 [ 343.797256][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.846733][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.894028][T10003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.906622][ T5828] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 343.926356][ T5998] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 343.967315][ T5998] usb 4-1: device descriptor read/8, error -71 [ 344.038810][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.111336][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.111792][ T5998] usb usb4-port1: unable to enumerate USB device [ 344.156501][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 344.166507][ T5913] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 344.184264][ T5828] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 344.194417][ T5828] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 344.208546][ T5828] usb 2-1: config 127 has no interface number 1 [ 344.214976][ T5828] usb 2-1: config 127 interface 171 has no altsetting 0 [ 344.372262][ T5913] usb 3-1: not running at top speed; connect to a high speed hub [ 344.394214][ T5913] usb 3-1: config 5 has an invalid interface number: 38 but max is 1 [ 344.402441][ T912] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 344.411887][ T5828] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 344.421359][ T5913] usb 3-1: config 5 has an invalid interface number: 67 but max is 1 [ 344.421544][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.429653][ T5913] usb 3-1: config 5 has no interface number 0 [ 344.448510][ T5913] usb 3-1: config 5 has no interface number 1 [ 344.454662][ T5913] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 344.466224][ T5913] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 344.494909][ T5828] usb 2-1: Product: syz [ 344.503890][ T5828] usb 2-1: Manufacturer: syz [ 344.509945][ T5913] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 344.519503][ T5828] usb 2-1: SerialNumber: syz [ 344.539653][ T5913] usb 3-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 344.557217][ T5913] usb 3-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 344.574254][ T5913] usb 3-1: config 5 interface 38 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 344.595640][ T5913] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 344.610797][ T912] usb 5-1: Using ep0 maxpacket: 16 [ 344.619715][ T912] usb 5-1: config 0 has no interfaces? [ 344.626915][ T912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.636766][ T912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.653192][ T912] usb 5-1: Manufacturer: syz [ 344.665806][ T5913] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x6, skipping [ 344.689858][ T912] usb 5-1: config 0 descriptor?? [ 344.699541][ T5913] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x2, skipping [ 344.735226][ T5913] usb 3-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x7, skipping [ 344.766389][ T5913] usb 3-1: config 5 interface 38 has no altsetting 0 [ 344.805305][ T5913] usb 3-1: config 5 interface 67 has no altsetting 0 [ 344.822743][ T5913] usb 3-1: New USB device found, idVendor=1557, idProduct=0002, bcdDevice= 5.96 [ 344.832345][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.842938][ T5913] usb 3-1: Product: syz [ 344.851350][ T5913] usb 3-1: Manufacturer: syz [ 344.861827][ T5913] usb 3-1: SerialNumber: syz [ 344.899127][T10007] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 344.946454][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.960237][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.123322][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.155778][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.313657][ T5913] usb 3-1: USB disconnect, device number 69 [ 346.158052][ T5913] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 346.181752][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 346.339690][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 346.347922][ T5913] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 346.358594][ T5913] usb 4-1: config 0 has no interface number 0 [ 346.365208][ T5913] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.378607][ T5913] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 346.387975][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.396153][ T5913] usb 4-1: Product: syz [ 346.401106][ T5913] usb 4-1: Manufacturer: syz [ 346.405864][ T5913] usb 4-1: SerialNumber: syz [ 346.415025][ T5913] usb 4-1: config 0 descriptor?? [ 346.429020][ T5913] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 346.440237][ T5913] em28xx 4-1:0.132: Video interface 132 found: [ 346.786683][ T5913] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 346.858859][ T5913] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 346.876935][ T5913] em28xx 4-1:0.132: board has no eeprom [ 346.936645][ T5913] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 346.952890][ T5913] em28xx 4-1:0.132: analog set to bulk mode. [ 346.968797][ T912] em28xx 4-1:0.132: Registering V4L2 extension [ 347.063062][ T5913] usb 4-1: USB disconnect, device number 70 [ 347.087020][ T5913] em28xx 4-1:0.132: Disconnecting em28xx [ 347.111474][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.121572][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.154038][T10041] netlink: 'syz.0.1006': attribute type 9 has an invalid length. [ 347.183559][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.199762][ T912] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 347.207673][ T912] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 347.210055][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.214968][ T912] em28xx 4-1:0.132: No AC97 audio processor [ 347.339772][ T5828] xr_serial 2-1:127.171: xr_serial converter detected [ 347.373145][ T912] usb 4-1: Decoder not found [ 347.383808][ T5828] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 347.387430][ T912] em28xx 4-1:0.132: failed to create media graph [ 347.404835][ T5828] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 347.453177][ T24] usb 5-1: USB disconnect, device number 63 [ 347.508146][ T912] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 347.536854][ T912] em28xx 4-1:0.132: Remote control support is not available for this card. [ 347.553177][ T5828] usb 2-1: USB disconnect, device number 68 [ 347.580820][ T5913] em28xx 4-1:0.132: Closing input extension [ 347.607569][ T5828] xr_serial 2-1:127.171: device disconnected [ 347.684642][ T5913] em28xx 4-1:0.132: Freeing device [ 347.862725][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.885061][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.027500][ T5913] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 348.086596][ T5828] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 348.176405][ T5998] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 348.187770][ T5913] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.197845][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.204483][ T5913] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 348.214011][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.225373][ T5913] usb 4-1: config 0 descriptor?? [ 348.238778][ T5828] usb 5-1: not running at top speed; connect to a high speed hub [ 348.248430][ T5828] usb 5-1: config 5 has an invalid interface number: 38 but max is 1 [ 348.257278][ T5828] usb 5-1: config 5 has an invalid interface number: 67 but max is 1 [ 348.265482][ T5828] usb 5-1: config 5 has no interface number 0 [ 348.272983][ T5828] usb 5-1: config 5 has no interface number 1 [ 348.280173][ T5828] usb 5-1: config 5 interface 38 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 348.291184][ T5828] usb 5-1: config 5 interface 38 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 348.302269][ T5828] usb 5-1: config 5 interface 38 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 348.314543][ T5828] usb 5-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 348.325207][ T5828] usb 5-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 348.335973][ T5998] usb 3-1: Using ep0 maxpacket: 8 [ 348.341241][ T5828] usb 5-1: config 5 interface 38 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 348.352435][ T5828] usb 5-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 348.363332][ T5828] usb 5-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x6, skipping [ 348.374398][ T5828] usb 5-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x2, skipping [ 348.385869][ T5828] usb 5-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x7, skipping [ 348.396863][ T5998] usb 3-1: config 4 has an invalid interface number: 219 but max is 0 [ 348.405039][ T5998] usb 3-1: config 4 has no interface number 0 [ 348.411301][ T5828] usb 5-1: config 5 interface 38 has no altsetting 0 [ 348.427817][ T5828] usb 5-1: config 5 interface 67 has no altsetting 0 [ 348.438281][ T5998] usb 3-1: New USB device found, idVendor=1b3d, idProduct=016b, bcdDevice=85.e8 [ 348.450473][ T5828] usb 5-1: New USB device found, idVendor=1557, idProduct=0002, bcdDevice= 5.96 [ 348.460146][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.468520][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.484287][ T5998] usb 3-1: Product: syz [ 348.494524][ T5828] usb 5-1: Product: syz [ 348.498872][ T5998] usb 3-1: Manufacturer: syz [ 348.503477][ T5998] usb 3-1: SerialNumber: syz [ 348.509656][ T5828] usb 5-1: Manufacturer: syz [ 348.517062][ T5828] usb 5-1: SerialNumber: syz [ 348.530392][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 348.565259][ T5998] ftdi_sio 3-1:4.219: FTDI USB Serial Device converter detected [ 348.589769][ T5998] ftdi_sio ttyUSB0: unknown device type: 0x85e8 [ 348.767095][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.774176][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.781298][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.796582][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.807304][T10074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1014'. [ 348.816389][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.816432][ T5913] sunplus 0003:04FC:05D8.0012: unknown main item tag 0x0 [ 348.819607][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.841242][ T5913] sunplus 0003:04FC:05D8.0012: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 348.892273][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.912142][ T24] usb 4-1: USB disconnect, device number 71 [ 348.959771][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'. [ 349.069371][T10079] fido_id[10079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 349.094672][ T912] usb 3-1: USB disconnect, device number 70 [ 349.158060][ T5828] usb 5-1: USB disconnect, device number 64 [ 349.184849][ T912] ftdi_sio 3-1:4.219: device disconnected [ 349.224179][T10084] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1016'. [ 349.668794][T10096] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 349.784236][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 350.046422][ T912] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 350.047086][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 350.061697][ T5828] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 350.276394][ T912] usb 5-1: Using ep0 maxpacket: 32 [ 350.283389][ T912] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 350.292754][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.315687][ T912] usb 5-1: config 0 descriptor?? [ 350.334157][ T912] gspca_main: sunplus-2.14.0 probing 041e:400b [ 350.346314][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 350.359172][ T5828] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 350.368498][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 350.373731][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.386050][ T9] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 350.398746][ T5828] usb 2-1: Product: syz [ 350.404071][ T9] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 350.434333][ T5828] usb 2-1: Manufacturer: syz [ 350.440126][ T5828] usb 2-1: SerialNumber: syz [ 350.447527][ T9] usb 3-1: config 127 has no interface number 1 [ 350.455650][ T9] usb 3-1: config 127 interface 171 has no altsetting 0 [ 350.464110][ T5828] usb 2-1: config 0 descriptor?? [ 350.479220][ T5828] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 350.494442][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 350.503768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.523937][ T9] usb 3-1: Product: syz [ 350.534150][ T9] usb 3-1: Manufacturer: syz [ 350.562633][ T9] usb 3-1: SerialNumber: syz [ 351.492978][ T5828] gspca_sonixj: reg_w1 err -110 [ 351.493124][ T912] gspca_sunplus: reg_w_riv err -110 [ 351.498741][ T5828] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 351.568091][ T912] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 351.585815][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.613600][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.572146][ T9] xr_serial 3-1:127.171: xr_serial converter detected [ 352.582592][ T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 352.582751][T10122] binder: 10121:10122 ioctl 80047210 200000000240 returned -22 [ 352.629227][ T912] usb 5-1: USB disconnect, device number 65 [ 352.684933][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 352.687105][T10126] binder: BINDER_SET_CONTEXT_MGR already set [ 352.714313][T10126] binder: 10121:10126 ioctl 4018620d 200000004a80 returned -16 [ 352.750020][ T9] usb 3-1: USB disconnect, device number 71 [ 352.789401][ T9] xr_serial 3-1:127.171: device disconnected [ 353.012372][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1029'. [ 353.087103][ T912] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 353.103528][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.112418][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.131759][T10138] netlink: 'syz.3.1029': attribute type 13 has an invalid length. [ 353.139777][T10138] netlink: 'syz.3.1029': attribute type 27 has an invalid length. [ 353.233378][T10141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1030'. [ 353.246316][ T912] usb 5-1: device descriptor read/64, error -71 [ 353.486263][ T912] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 353.644098][ T912] usb 5-1: device descriptor read/64, error -71 [ 353.763715][ T912] usb usb5-port1: attempt power cycle [ 353.892566][ T5828] usb 2-1: USB disconnect, device number 69 [ 354.116419][ T912] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 354.179612][ T912] usb 5-1: device descriptor read/8, error -71 [ 354.282055][T10159] netlink: 'syz.1.1034': attribute type 5 has an invalid length. [ 354.306711][T10159] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1034'. [ 354.426315][ T912] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 354.467429][ T912] usb 5-1: device descriptor read/8, error -71 [ 354.587245][ T912] usb usb5-port1: unable to enumerate USB device [ 354.676306][ T5828] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 354.844666][ T5828] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.895144][ T5828] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.916646][ T5828] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.926458][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.964758][T10159] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 355.000785][ T5828] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.412356][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 355.580169][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 355.587957][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 355.596863][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.607717][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.652123][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.661572][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.670448][ T9] usb 4-1: Product: syz [ 355.683372][ T9] usb 4-1: Manufacturer: syz [ 355.700752][ T9] usb 4-1: SerialNumber: syz [ 356.159078][ T9] usb 4-1: 0:2 : does not exist [ 356.406576][T10177] netlink: 'syz.0.1038': attribute type 4 has an invalid length. [ 356.547045][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.619323][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.880009][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.980798][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.527629][ T912] usb 2-1: USB disconnect, device number 70 [ 357.686273][ T5912] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 357.778852][T10188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.790309][T10188] block device autoloading is deprecated and will be removed. [ 357.846302][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 357.854618][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.900381][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.915729][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.916733][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.949930][ T5912] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 357.972713][T10195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1044'. [ 357.977564][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.027350][ T9] usb 4-1: USB disconnect, device number 72 [ 358.028663][ T5912] usb 3-1: config 0 descriptor?? [ 358.379128][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1045'. [ 358.447680][ T5912] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 358.510747][T10205] netlink: 'syz.1.1045': attribute type 13 has an invalid length. [ 358.519907][ T5912] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 358.531378][ T5912] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 358.543165][ T5912] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 358.554558][ T5912] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 358.565043][T10205] netlink: 'syz.1.1045': attribute type 27 has an invalid length. [ 358.572354][ T5912] savu 0003:1E7D:2D5A.0013: unbalanced collection at end of report description [ 358.619307][ T5912] savu 0003:1E7D:2D5A.0013: parse failed [ 358.633121][ T5912] savu 0003:1E7D:2D5A.0013: probe with driver savu failed with error -22 [ 358.735771][ T9] usb 3-1: USB disconnect, device number 72 [ 359.857069][T10220] bond3: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 359.880531][T10220] bond3 (unregistering): Released all slaves [ 360.542929][T10241] netlink: 'syz.4.1052': attribute type 15 has an invalid length. [ 360.560617][ T30] audit: type=1326 audit(1766306301.497:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.706267][ T30] audit: type=1326 audit(1766306301.497:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.743506][ T30] audit: type=1326 audit(1766306301.497:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.771675][ T30] audit: type=1326 audit(1766306301.497:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.819474][ T30] audit: type=1326 audit(1766306301.497:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.842696][ T30] audit: type=1326 audit(1766306301.497:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.873737][ T30] audit: type=1326 audit(1766306301.497:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f122038df90 code=0x7ffc0000 [ 360.897464][ T30] audit: type=1326 audit(1766306301.507:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.921031][ T30] audit: type=1326 audit(1766306301.507:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 360.997116][ T30] audit: type=1326 audit(1766306301.507:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10235 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122038f749 code=0x7ffc0000 [ 361.629447][T10247] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 361.646314][ T5912] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 361.816435][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 361.852307][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.875998][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.889617][ T5912] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 361.899720][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.929767][ T5912] usb 3-1: config 0 descriptor?? [ 362.497626][ T912] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 362.617317][ T5912] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 362.656312][ T912] usb 4-1: Using ep0 maxpacket: 16 [ 362.665190][ T912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.674606][ T912] usb 4-1: config 0 has no interface number 0 [ 362.687225][ T912] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 362.707955][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.718215][ T912] usb 4-1: Product: syz [ 362.722497][ T912] usb 4-1: Manufacturer: syz [ 362.731167][ T912] usb 4-1: SerialNumber: syz [ 362.743138][ T912] usb 4-1: config 0 descriptor?? [ 362.772916][ T912] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 362.912264][T10268] netlink: 'syz.1.1062': attribute type 11 has an invalid length. [ 362.913391][ T5912] usb 3-1: USB disconnect, device number 73 [ 363.450661][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.461972][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.595309][T10282] input: syz1 as /devices/virtual/input/input29 [ 364.462972][T10294] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 364.579602][ T912] gspca_spca1528: reg_r err -32 [ 364.584787][ T912] spca1528 4-1:0.1: probe with driver spca1528 failed with error -32 [ 364.772881][T10300] Cannot find del_set index 286 as target [ 365.566452][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 365.728880][ T5828] usb 4-1: USB disconnect, device number 73 [ 365.749722][ T9] usb 2-1: config 0 has no interfaces? [ 365.773607][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 365.852405][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.895421][ T9] usb 2-1: Product: syz [ 365.901257][ T9] usb 2-1: Manufacturer: syz [ 365.905993][ T9] usb 2-1: SerialNumber: syz [ 365.920925][ T9] usb 2-1: config 0 descriptor?? [ 366.639520][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1083'. [ 366.655315][T10321] veth0_vlan: left promiscuous mode [ 366.670345][T10321] veth0_vlan: entered promiscuous mode [ 366.676409][ T5828] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 366.685921][ T912] usb 2-1: USB disconnect, device number 71 [ 366.850073][ T5828] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.868389][ T5828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.890853][ T5828] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.916341][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.931347][ T5828] usb 5-1: SerialNumber: syz [ 367.024592][ T912] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 367.173008][ T5828] usb 5-1: 0:2 : does not exist [ 367.192100][ T912] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 367.194325][ T5828] usb 5-1: unit 5: unexpected type 0x09 [ 367.201683][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.201708][ T912] usb 3-1: Product: syz [ 367.201722][ T912] usb 3-1: Manufacturer: syz [ 367.201736][ T912] usb 3-1: SerialNumber: syz [ 367.258198][ T912] usb 3-1: config 0 descriptor?? [ 367.261619][ T5828] usb 5-1: USB disconnect, device number 70 [ 367.269363][ T912] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 367.426570][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 367.596610][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 367.603354][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 367.631574][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 367.642478][ T912] gspca_sunplus: reg_r err -71 [ 367.655629][ T24] usb 4-1: config 0 has no interface number 0 [ 367.669994][ T912] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 367.694258][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 367.731392][ T912] usb 3-1: USB disconnect, device number 74 [ 367.758962][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.806689][ T24] usb 4-1: Product: syz [ 367.820040][ T24] usb 4-1: Manufacturer: syz [ 367.844467][ T24] usb 4-1: SerialNumber: syz [ 367.892315][ T24] usb 4-1: config 0 descriptor?? [ 367.917720][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 368.226303][ T912] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 368.250898][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 368.295846][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 368.388280][ T912] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 368.436416][ T912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.493042][ T912] usb 5-1: config 0 has no interface number 0 [ 368.512245][ T912] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.536480][ T912] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 368.546771][ T912] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 368.567626][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.627245][ T912] usb 5-1: config 0 descriptor?? [ 368.648877][ T912] ldusb 5-1:0.55: Interrupt in endpoint not found [ 368.738643][T10396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'. [ 368.762255][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 368.776851][ T24] usb 4-1: USB disconnect, device number 74 [ 368.793517][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 368.806400][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 368.836680][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 368.860277][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1091'. [ 368.874189][ T912] usb 5-1: USB disconnect, device number 71 [ 368.885815][ T24] quatech2 4-1:0.51: device disconnected [ 368.946420][ T9] usb 3-1: device descriptor read/64, error -71 [ 369.446492][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 369.652763][ T9] usb 3-1: device descriptor read/64, error -71 [ 369.792848][ T9] usb usb3-port1: attempt power cycle [ 369.973414][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.983880][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.146353][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 370.176880][ T9] usb 3-1: device descriptor read/8, error -71 [ 370.446304][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 370.478621][ T9] usb 3-1: device descriptor read/8, error -71 [ 370.587011][ T9] usb usb3-port1: unable to enumerate USB device [ 370.966261][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 370.987789][T10430] program syz.4.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.151147][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 371.333711][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 371.346324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.365814][ T9] usb 2-1: Product: syz [ 371.382265][ T9] usb 2-1: Manufacturer: syz [ 371.392446][ T9] usb 2-1: SerialNumber: syz [ 371.402363][ T9] usb 2-1: config 0 descriptor?? [ 371.434358][ T9] gspca_main: 2770:9120 too many config [ 371.640500][T10425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1100'. [ 371.940627][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 371.954724][T10444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 372.366294][ T9] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 372.568727][ T9] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 372.577047][ T9] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 372.588760][ T9] usb 3-1: config 0 has no interface number 0 [ 372.599654][ T9] usb 3-1: config 0 interface 158 altsetting 2 endpoint 0x3 has invalid maxpacket 5170, setting to 64 [ 372.611220][ T9] usb 3-1: config 0 interface 158 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.624675][ T9] usb 3-1: config 0 interface 158 has no altsetting 0 [ 372.634341][ T9] usb 3-1: New USB device found, idVendor=187f, idProduct=0301, bcdDevice=53.f3 [ 372.646355][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.665303][ T9] usb 3-1: Product: syz [ 372.671396][ T9] usb 3-1: Manufacturer: syz [ 372.689254][T10468] netlink: zone id is out of range [ 372.694503][T10468] netlink: zone id is out of range [ 372.700039][ T9] usb 3-1: SerialNumber: syz [ 372.704801][T10468] netlink: zone id is out of range [ 372.708783][ T9] usb 3-1: config 0 descriptor?? [ 372.711235][T10468] netlink: zone id is out of range [ 372.716817][T10451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.749359][T10468] netlink: zone id is out of range [ 372.781968][T10468] netlink: zone id is out of range [ 372.794859][T10468] netlink: zone id is out of range [ 372.803007][T10468] netlink: zone id is out of range [ 372.816015][T10468] netlink: zone id is out of range [ 372.946120][ T9] smsusb:smsusb_probe: board id=12, interface number 158 [ 372.961765][ T9] usb 3-1: USB disconnect, device number 79 [ 373.985318][ T24] usb 2-1: USB disconnect, device number 72 [ 374.156698][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 374.172475][ T30] audit: type=1326 audit(1766306315.137:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.200882][ T30] audit: type=1326 audit(1766306315.137:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.274700][ T30] audit: type=1326 audit(1766306315.137:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.306827][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 374.329048][ T30] audit: type=1326 audit(1766306315.137:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.426000][ T30] audit: type=1326 audit(1766306315.137:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.486410][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 374.486450][ T30] audit: type=1326 audit(1766306315.137:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.516445][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 374.549963][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 374.562465][ T30] audit: type=1326 audit(1766306315.137:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f4392b829 code=0x7ffc0000 [ 374.562623][ T9] usb 4-1: config 0 has no interface number 0 [ 374.593489][ T30] audit: type=1326 audit(1766306315.137:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.617910][ T30] audit: type=1326 audit(1766306315.137:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 374.626229][ T9] usb 4-1: config 0 interface 29 has no altsetting 0 [ 374.640675][ T30] audit: type=1326 audit(1766306315.137:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0f439915dc code=0x7ffc0000 [ 374.649998][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 374.686397][ T5998] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 374.704448][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.716284][ T9] usb 4-1: Product: syz [ 374.720554][ T9] usb 4-1: Manufacturer: syz [ 374.722818][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.725297][ T9] usb 4-1: SerialNumber: syz [ 374.736550][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.766439][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.776466][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.786108][ T9] usb 4-1: config 0 descriptor?? [ 374.811620][T10509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.830859][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.847315][ T5998] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 374.857363][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.876307][ T5998] usb 3-1: config 0 has no interfaces? [ 374.887714][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.911431][ T5998] usb 3-1: config 0 has no interfaces? [ 374.927937][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.948358][ T5998] usb 3-1: config 0 has no interfaces? [ 374.980478][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.012183][ T9] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 375.034287][ T5998] usb 3-1: config 0 has no interfaces? [ 375.042102][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.056268][ T5998] usb 3-1: config 0 has no interfaces? [ 375.063097][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.071666][ T24] usb 2-1: USB disconnect, device number 73 [ 375.075117][ T5998] usb 3-1: config 0 has no interfaces? [ 375.088203][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.099140][ T5998] usb 3-1: config 0 has no interfaces? [ 375.107132][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.118124][ T5998] usb 3-1: config 0 has no interfaces? [ 375.123904][ T5998] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 375.135073][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.158195][ T5998] usb 3-1: config 0 descriptor?? [ 375.222375][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 375.230892][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 375.240486][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 375.308475][ T9] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 375.377569][ T24] usb 3-1: USB disconnect, device number 80 [ 375.440100][ T912] usb 4-1: USB disconnect, device number 75 [ 375.778386][T10525] program syz.4.1118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.850764][T10527] netlink: 'syz.1.1119': attribute type 29 has an invalid length. [ 375.861595][T10527] netlink: 'syz.1.1119': attribute type 29 has an invalid length. [ 375.871610][T10527] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1119'. [ 376.396798][T10532] dummy0: entered promiscuous mode [ 376.423781][T10532] macvtap1: entered allmulticast mode [ 376.484102][T10532] dummy0: entered allmulticast mode [ 376.508837][T10532] dummy0: left allmulticast mode [ 376.515423][T10532] dummy0: left promiscuous mode [ 376.583176][T10538] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1123'. [ 378.316354][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 378.386282][ T5912] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 378.544094][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 378.563689][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 378.598941][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.656265][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 378.657782][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.670993][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689747][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.692005][ T9] usb 5-1: config 0 has no interface number 0 [ 378.717730][ T9] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 378.730971][ T9] usb 5-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 378.745110][ T9] usb 5-1: config 0 interface 8 has no altsetting 0 [ 378.755251][ T9] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 378.775307][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.775317][ T5912] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 378.775340][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.783778][ T9] usb 5-1: Product: syz [ 378.861718][ T9] usb 5-1: Manufacturer: syz [ 378.868713][ T9] usb 5-1: SerialNumber: syz [ 378.869773][ T5912] usb 4-1: config 0 descriptor?? [ 378.897703][ T9] usb 5-1: config 0 descriptor?? [ 379.144684][ T9] ath6kl: Failed to submit usb control message: -71 [ 379.155791][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 379.173603][ T9] ath6kl: Unable to send get target info: -71 [ 379.256410][ T9] ath6kl: Failed to init ath6kl core: -71 [ 379.257494][ T9] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 379.262976][ T9] usb 5-1: USB disconnect, device number 72 [ 379.922371][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 379.950232][T10590] hsr_slave_0: left promiscuous mode [ 379.976190][T10590] hsr_slave_1: left promiscuous mode [ 380.292668][T10601] program syz.1.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.491954][ T912] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 380.657027][ T912] usb 3-1: Using ep0 maxpacket: 16 [ 380.665720][ T912] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 380.674831][ T912] usb 3-1: config 0 has no interface number 0 [ 380.691628][ T912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 380.723022][ T912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 380.788794][ T912] usb 3-1: config 0 interface 41 has no altsetting 0 [ 380.811837][ T912] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 380.821577][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.834848][ T912] usb 3-1: Product: syz [ 380.844702][ T912] usb 3-1: Manufacturer: syz [ 380.855618][ T912] usb 3-1: SerialNumber: syz [ 380.873314][ T912] usb 3-1: config 0 descriptor?? [ 380.885102][T10599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.892503][T10599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.962425][T10613] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 381.196754][T10613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.206050][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 381.237158][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 381.250638][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 381.270954][ T5912] usb 4-1: USB disconnect, device number 76 [ 381.304805][T10616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.352193][T10613] bond3: entered allmulticast mode [ 381.377580][T10616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.629746][ T912] Error reading MAC address [ 381.650265][ T912] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 381.827506][ T912] usb 3-1: USB disconnect, device number 81 [ 382.236745][ T912] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 382.397251][ T912] usb 3-1: Using ep0 maxpacket: 32 [ 382.423477][ T912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 382.451706][ T912] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 382.492747][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.676256][ T912] usb 3-1: config 0 descriptor?? [ 383.107950][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 383.107966][ T30] audit: type=1326 audit(1766306324.087:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0700d8f749 code=0x0 [ 383.696472][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 383.809190][T10654] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1150'. [ 384.436602][T10641] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 384.443342][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 384.450547][T10641] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 384.691718][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 384.858995][T10656] syz_tun (unregistering): left allmulticast mode [ 384.885757][ T912] usbhid 3-1:0.0: can't add hid device: -71 [ 384.903509][ T912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 384.939304][ T912] usb 3-1: USB disconnect, device number 82 [ 385.260008][T10641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.266115][T10641] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 385.275110][T10641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.292581][T10641] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 385.505220][T10641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.656679][T10641] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.707346][T10641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.739249][T10641] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 385.893239][T10685] program syz.2.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.735065][ T912] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 386.904866][ T912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.920268][ T912] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.009801][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.064263][ T912] usb 4-1: config 0 descriptor?? [ 387.073572][ T912] pwc: Askey VC010 type 2 USB webcam detected. [ 387.595523][T10714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.611836][T10714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.632113][T10713] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 387.715009][ T912] pwc: recv_control_msg error -32 req 02 val 2700 [ 387.780240][ T912] pwc: recv_control_msg error -71 req 02 val 2c00 [ 387.793076][ T912] pwc: recv_control_msg error -71 req 04 val 1000 [ 387.806375][ T912] pwc: recv_control_msg error -71 req 04 val 1300 [ 387.825942][ T912] pwc: recv_control_msg error -71 req 04 val 1400 [ 387.891488][ T912] pwc: recv_control_msg error -71 req 02 val 2000 [ 387.905273][ T912] pwc: recv_control_msg error -71 req 02 val 2100 [ 387.912372][ T912] pwc: recv_control_msg error -71 req 04 val 1500 [ 387.919598][ T912] pwc: recv_control_msg error -71 req 02 val 2500 [ 387.928052][ T912] pwc: recv_control_msg error -71 req 02 val 2400 [ 387.935061][ T912] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.978193][ T912] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.993847][ T912] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.012328][ T912] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.034532][ T912] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.076953][ T912] pwc: Registered as video103. [ 388.094214][ T912] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 388.192398][ T912] usb 4-1: USB disconnect, device number 77 [ 388.591523][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 388.952501][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'. [ 389.276423][ T912] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 389.448888][ T912] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 389.460452][ T912] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 389.513245][ T912] usb 2-1: config 220 interface 0 has no altsetting 0 [ 389.598003][ T912] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 389.627294][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.677244][ T912] usb 2-1: Product: syz [ 389.698208][ T912] usb 2-1: Manufacturer: syz [ 389.713073][ T912] usb 2-1: SerialNumber: syz [ 389.973471][ T912] uvcvideo 2-1:220.0: Found Unit with invalid ID 0 [ 389.981178][ T912] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 389.992127][ T912] uvcvideo 2-1:220.0: No valid video chain found. [ 390.012279][ T912] usb 2-1: USB disconnect, device number 74 [ 390.731445][T10753] pim6reg: entered allmulticast mode [ 390.742378][T10752] netlink: 'syz.1.1172': attribute type 10 has an invalid length. [ 390.776489][T10752] team0: Port device netdevsim0 added [ 390.839376][T10757] program syz.3.1174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.959632][ T912] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 391.406922][ T912] usb 2-1: device descriptor read/64, error -71 [ 391.753475][ T912] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 391.886356][ T912] usb 2-1: device descriptor read/64, error -71 [ 391.996528][ T912] usb usb2-port1: attempt power cycle [ 392.386325][ T912] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 392.406982][ T912] usb 2-1: device descriptor read/8, error -71 [ 392.656300][ T912] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 392.702518][ T912] usb 2-1: device descriptor read/8, error -71 [ 392.756363][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 392.816995][ T912] usb usb2-port1: unable to enumerate USB device [ 392.927431][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 392.953533][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.956300][ T5998] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 392.964133][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.989725][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.071113][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.111951][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.143849][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.154257][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.176255][ T24] usb 5-1: Manufacturer: syz [ 393.195595][ T24] usb 5-1: config 0 descriptor?? [ 393.401371][ T5998] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 393.411967][ T5998] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.423243][ T5998] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.439544][ T5998] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.451940][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.484575][ T5998] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.496258][ T5998] usb 4-1: invalid MIDI out EP 0 [ 393.898332][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 393.940039][ T5998] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 393.970094][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 393.979824][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 394.021480][ T24] rc_core: IR keymap rc-hauppauge not found [ 394.048566][ T24] Registered IR keymap rc-empty [ 394.067606][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.106603][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.111512][ T5998] usb 4-1: USB disconnect, device number 78 [ 394.150021][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 394.191750][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 394.417939][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.447243][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.476365][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.516465][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.526300][ T912] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 394.560090][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.604924][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.636351][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.676311][ T912] usb 2-1: Using ep0 maxpacket: 32 [ 394.715644][ T912] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 394.724259][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.731812][ T912] usb 2-1: config 0 has no interface number 0 [ 394.746782][ T912] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 394.808384][ T912] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 394.820272][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.842837][ T912] usb 2-1: config 0 interface 126 has no altsetting 0 [ 394.855546][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.873502][ T912] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 394.885565][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.902976][ T912] usb 2-1: Product: syz [ 394.911805][ T912] usb 2-1: Manufacturer: syz [ 394.919607][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 394.932881][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.942840][ T912] usb 2-1: SerialNumber: syz [ 394.960632][ T912] usb 2-1: config 0 descriptor?? [ 394.980124][ T24] usb 5-1: USB disconnect, device number 73 [ 394.989116][T10802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.002427][T10802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.814270][ T912] ir_usb 2-1:0.126: IR Dongle converter detected [ 395.903766][T10815] netlink: 'syz.4.1186': attribute type 29 has an invalid length. [ 395.942809][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 396.011494][ T912] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 396.081918][T10825] program syz.0.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.237146][ T5998] usb 2-1: USB disconnect, device number 79 [ 396.248391][ T5998] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 396.275903][ T5998] ir_usb 2-1:0.126: device disconnected [ 397.239395][T10847] syzkaller0: entered promiscuous mode [ 397.256351][T10847] syzkaller0: entered allmulticast mode [ 398.366054][T10871] loop5: detected capacity change from 0 to 7 [ 398.390722][T10871] Dev loop5: unable to read RDB block 7 [ 398.408188][T10871] loop5: AHDI p1 p2 p3 [ 398.412499][T10871] loop5: partition table partially beyond EOD, truncated [ 398.430432][T10871] loop5: p1 start 50331648 is beyond EOD, truncated [ 398.441294][T10871] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 398.456361][ T912] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 398.559496][ T6491] udevd[6491]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 398.626543][ T912] usb 3-1: Using ep0 maxpacket: 8 [ 398.633848][ T912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.661954][ T912] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 398.673751][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.685058][ T912] usb 3-1: config 0 descriptor?? [ 398.706329][ T5998] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 398.709464][T10876] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 398.846473][ T5998] usb 5-1: device descriptor read/64, error -71 [ 398.957757][ T912] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 399.096465][ T5998] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 399.236308][ T5998] usb 5-1: device descriptor read/64, error -71 [ 399.356928][ T5998] usb usb5-port1: attempt power cycle [ 399.669472][ T912] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 399.718073][ T5998] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 399.741846][ T5998] usb 5-1: device descriptor read/8, error -71 [ 399.828470][ T912] usb 4-1: Using ep0 maxpacket: 32 [ 399.850882][ T912] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 399.859330][ T912] usb 4-1: config 0 has no interface number 0 [ 399.890792][ T912] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 399.900484][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.908612][ T912] usb 4-1: Product: syz [ 399.912827][ T912] usb 4-1: Manufacturer: syz [ 399.920130][ T912] usb 4-1: SerialNumber: syz [ 399.937855][ T912] usb 4-1: config 0 descriptor?? [ 399.946767][ T912] smsc95xx v2.0.0 [ 399.996264][ T5998] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 400.027309][ T5998] usb 5-1: device descriptor read/8, error -71 [ 400.140265][ T5998] usb usb5-port1: unable to enumerate USB device [ 400.326288][ T24] usb 3-1: USB disconnect, device number 83 [ 400.355639][T10889] program syz.1.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.381905][ T912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 400.403117][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.411944][ T912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.421735][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.441873][T10891] netlink: 'syz.0.1204': attribute type 3 has an invalid length. [ 400.662072][ T912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 400.673550][ T912] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.688306][ T912] usb 4-1: USB disconnect, device number 79 [ 401.516460][ T912] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 401.706080][ T912] usb 4-1: Using ep0 maxpacket: 32 [ 401.715027][ T912] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 401.730625][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.743375][ T912] usb 4-1: config 0 descriptor?? [ 401.773160][ T912] gspca_main: sq930x-2.14.0 probing 041e:403c [ 401.826332][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 401.841646][T10915] dummy0: entered allmulticast mode [ 401.847936][T10915] dummy0: left allmulticast mode [ 401.986887][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 401.994638][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.011151][ T24] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.043478][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 402.067871][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 402.097909][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.120392][ T24] usb 5-1: config 0 descriptor?? [ 402.145652][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 402.174885][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.249898][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.771223][ T912] gspca_sq930x: ucbus_write failed -71 [ 402.776961][ T912] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 402.802323][ T912] usb 4-1: USB disconnect, device number 80 [ 403.258100][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 403.272191][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'. [ 403.287705][T10941] loop6: detected capacity change from 0 to 524288000 [ 403.434855][T10943] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1218'. [ 403.494019][T10943] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1218'. [ 404.373511][T10952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.386703][T10952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.478805][ T5998] usb 5-1: USB disconnect, device number 78 [ 404.530698][T10956] program syz.3.1222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.646550][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 405.098320][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.124948][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 405.140562][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.149996][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.158071][ T9] usb 3-1: Product: syz [ 405.162838][ T9] usb 3-1: Manufacturer: syz [ 405.170080][ T9] usb 3-1: SerialNumber: syz [ 405.541295][ T9] cdc_ncm 3-1:1.0: bind() failure [ 405.563513][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 405.641405][ T9] cdc_ncm 3-1:1.1: bind() failure [ 405.672270][ T9] usb 3-1: USB disconnect, device number 84 [ 406.188466][T10972] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 406.200829][T10972] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 406.482531][T10978] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 407.441614][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.450458][ T9] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 407.477547][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.568478][ T30] audit: type=1326 audit(1766306348.537:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.0.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a12f8f749 code=0x0 [ 407.618982][ T9] usb 4-1: config index 0 descriptor too short (expected 62498, got 34) [ 407.628700][ T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 407.664124][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 407.722788][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.746258][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 407.787895][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 407.804521][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 407.816055][ T30] audit: type=1326 audit(1766306348.777:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 407.816064][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.817035][ T9] usb 4-1: string descriptor 0 read error: -71 [ 407.883466][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 407.919774][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.933161][ T30] audit: type=1326 audit(1766306348.777:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 407.944563][ T9] usb 4-1: config 0 descriptor?? [ 407.972005][ T9] usb 4-1: can't set config #0, error -71 [ 408.014139][ T30] audit: type=1326 audit(1766306348.777:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.023959][ T9] usb 4-1: USB disconnect, device number 81 [ 408.079831][ T30] audit: type=1326 audit(1766306348.777:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.136248][ T912] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 408.144982][ T30] audit: type=1326 audit(1766306348.777:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.179475][ T30] audit: type=1326 audit(1766306348.777:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.212075][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.222768][ T30] audit: type=1326 audit(1766306348.777:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.247255][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.266783][ T30] audit: type=1326 audit(1766306348.777:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.290310][ T30] audit: type=1326 audit(1766306348.777:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4398f749 code=0x7ffc0000 [ 408.328348][ T912] usb 3-1: Using ep0 maxpacket: 32 [ 408.338718][ T912] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.354224][ T912] usb 3-1: config 0 has no interface number 0 [ 408.369166][ T912] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.384522][ T912] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.397679][ T912] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 408.408186][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.422432][ T912] usb 3-1: config 0 descriptor?? [ 408.443353][T11023] program syz.3.1238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.476631][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 408.638779][T11024] netlink: 'syz.1.1237': attribute type 3 has an invalid length. [ 408.677488][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 408.700934][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.715531][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.725693][ T9] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 408.735146][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.746243][ T9] usb 5-1: config 0 descriptor?? [ 408.962056][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 408.968340][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 408.995543][ T9] usb 5-1: USB disconnect, device number 79 [ 409.048758][ T912] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0015/input/input32 [ 409.105722][ T912] uclogic 0003:28BD:0094.0015: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 410.557047][T11072] hub 9-0:1.0: USB hub found [ 410.562207][T11072] hub 9-0:1.0: 1 port detected [ 410.704539][T11074] input: syz0 as /devices/virtual/input/input33 [ 411.034456][ T9] usb 3-1: USB disconnect, device number 85 [ 411.876407][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 412.063399][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 412.071619][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 412.080055][ T9] usb 4-1: config 0 has no interface number 0 [ 412.086382][ T5998] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 412.094472][ T9] usb 4-1: config 0 interface 132 has no altsetting 0 [ 412.112155][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 412.123032][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.136277][ T9] usb 4-1: Product: syz [ 412.140460][ T9] usb 4-1: Manufacturer: syz [ 412.154730][ T9] usb 4-1: SerialNumber: syz [ 412.167235][ T9] usb 4-1: config 0 descriptor?? [ 412.256028][ T5998] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.263922][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.306501][ T5998] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.336860][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.367279][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.400545][ T5998] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.428322][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.474658][ T5998] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.494977][ T9] cdc_subset 4-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.3-1, Belkin, eTEK, or compatible, c2:67:49:ee:c2:d9 [ 412.533770][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.570319][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.604500][ T5998] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 412.612272][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.624915][ T5998] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.645347][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.680529][ T9] usb 4-1: USB disconnect, device number 82 [ 412.693610][ T9] cdc_subset 4-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.3-1, Belkin, eTEK, or compatible [ 412.714801][ T5998] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.739456][ T5998] usb 2-1: string descriptor 0 read error: -22 [ 412.745781][ T5998] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 412.801840][T11095] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1249'. [ 412.809590][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.846672][T11095] net_ratelimit: 48 callbacks suppressed [ 412.846683][T11095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 412.950110][ T5998] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 413.146333][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.173155][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.266401][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 413.428101][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.446087][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.495506][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 413.520563][ T9] usb 3-1: can't read configurations, error -71 [ 414.463741][T11129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1254'. [ 414.646374][ T5998] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 414.662561][T11145] FAULT_INJECTION: forcing a failure. [ 414.662561][T11145] name failslab, interval 1, probability 0, space 0, times 0 [ 414.712735][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.2.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.712758][T11145] Tainted: [L]=SOFTLOCKUP [ 414.712762][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.712774][T11145] Call Trace: [ 414.712779][T11145] [ 414.712784][T11145] dump_stack_lvl+0x189/0x250 [ 414.712802][T11145] ? __pfx____ratelimit+0x10/0x10 [ 414.712813][T11145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.712828][T11145] ? __pfx__printk+0x10/0x10 [ 414.712850][T11145] ? __lock_acquire+0x6b6/0x2cf0 [ 414.712877][T11145] should_fail_ex+0x414/0x560 [ 414.712907][T11145] should_failslab+0xa8/0x100 [ 414.712925][T11145] kmem_cache_alloc_noprof+0x88/0x710 [ 414.712939][T11145] ? __netlink_lookup+0xbd/0x8a0 [ 414.712953][T11145] ? skb_clone+0x212/0x3a0 [ 414.712967][T11145] skb_clone+0x212/0x3a0 [ 414.712980][T11145] __netlink_deliver_tap+0x404/0x850 [ 414.712999][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.713011][T11145] netlink_deliver_tap+0x19c/0x1b0 [ 414.713023][T11145] netlink_unicast+0x7fa/0x9e0 [ 414.713039][T11145] ? __pfx_netlink_unicast+0x10/0x10 [ 414.713050][T11145] ? netlink_sendmsg+0x642/0xb30 [ 414.713061][T11145] ? skb_put+0x11b/0x210 [ 414.713073][T11145] netlink_sendmsg+0x805/0xb30 [ 414.713089][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.713103][T11145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.713117][T11145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.713126][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.713138][T11145] __sock_sendmsg+0x21c/0x270 [ 414.713154][T11145] ____sys_sendmsg+0x505/0x820 [ 414.713168][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.713184][T11145] ? import_iovec+0x74/0xa0 [ 414.713197][T11145] ___sys_sendmsg+0x21f/0x2a0 [ 414.713210][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.713227][T11145] ? rcu_read_lock_any_held+0xb3/0x120 [ 414.713253][T11145] ? __fget_files+0x2a/0x420 [ 414.713265][T11145] ? __fget_files+0x3a0/0x420 [ 414.713282][T11145] __x64_sys_sendmsg+0x19b/0x260 [ 414.713294][T11145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.713310][T11145] ? __pfx_ksys_write+0x10/0x10 [ 414.713322][T11145] ? do_syscall_64+0xbe/0xf80 [ 414.713335][T11145] do_syscall_64+0xfa/0xf80 [ 414.713345][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.713354][T11145] ? clear_bhb_loop+0x60/0xb0 [ 414.713366][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.713379][T11145] RIP: 0033:0x7f0700d8f749 [ 414.713390][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.713398][T11145] RSP: 002b:00007f0701ca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.713410][T11145] RAX: ffffffffffffffda RBX: 00007f0700fe5fa0 RCX: 00007f0700d8f749 [ 414.713417][T11145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 414.713423][T11145] RBP: 00007f0701ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 414.713429][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.713434][T11145] R13: 00007f0700fe6038 R14: 00007f0700fe5fa0 R15: 00007f070110fa28 [ 414.713450][T11145] [ 415.126287][ T5998] usb 5-1: Using ep0 maxpacket: 16 [ 415.355377][ T31] INFO: task kworker/1:1:39 blocked for more than 143 seconds. [ 415.364822][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.395353][ T31] Tainted: G L syzkaller #0 [ 415.410805][ T5998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.419891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.419909][ T31] task:kworker/1:1 state:D stack:21240 pid:39 tgid:39 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 415.419958][ T31] Workqueue: usb_hub_wq hub_event [ 415.419983][ T31] Call Trace: [ 415.419990][ T31] [ 415.420002][ T31] __schedule+0x14bc/0x5000 [ 415.420046][ T31] ? __pfx___schedule+0x10/0x10 [ 415.438739][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 415.470907][ T5998] usb 5-1: SerialNumber: syz [ 415.489842][ T31] ? schedule+0x91/0x360 [ 415.514820][ T31] schedule+0x165/0x360 [ 415.532648][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.555445][ T31] __mutex_lock+0x7e6/0x1350 [ 415.571484][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.592332][ T31] ? hub_event+0x2182/0x4ef0 [ 415.605860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.620184][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.643923][ T31] hub_event+0x2182/0x4ef0 [ 415.654538][ T31] ? __pfx_hub_event+0x10/0x10 [ 415.666233][ T5998] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 415.675513][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 415.699636][ T9] usb 5-1: USB disconnect, device number 80 [ 415.720524][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.737247][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 415.752456][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 415.768231][ T31] process_scheduled_works+0xad1/0x1770 [ 415.785857][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.800641][ T31] worker_thread+0x8a0/0xda0 [ 415.815003][ T31] kthread+0x711/0x8a0 [ 415.818144][ T5998] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 415.825106][ T31] ? __pfx_worker_thread+0x10/0x10 [ 415.835053][ T31] ? __pfx_kthread+0x10/0x10 [ 415.835199][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.840122][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.853993][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 415.860829][ T31] ? __pfx_kthread+0x10/0x10 [ 415.865584][ T31] ret_from_fork+0x599/0xb30 [ 415.869182][ T5998] usb 3-1: config 0 descriptor?? [ 415.871002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.881658][ T31] ? __switch_to_asm+0x39/0x70 [ 415.882835][ T5998] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 415.886904][ T31] ? __switch_to_asm+0x33/0x70 [ 415.902895][ T31] ? __pfx_kthread+0x10/0x10 [ 415.909696][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.914680][ T31] [ 415.918983][ T31] [ 415.918983][ T31] Showing all locks held in the system: [ 415.928649][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 415.933960][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: rcu_exp_sel_wait_wake+0x8c1/0xe20 [ 415.965971][ T31] 1 lock held by khungtaskd/31: [ 415.971248][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 415.982075][ T31] 5 locks held by kworker/1:1/39: [ 415.987191][ T31] #0: ffff88801facbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 415.998776][ T31] #1: ffffc90000af7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 416.010916][ T31] #2: ffff8880294c1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 416.019993][ T31] #3: ffff8880294c4518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 416.030222][ T31] #4: ffff888028978868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 416.040155][ T31] 5 locks held by kworker/0:2/979: [ 416.045304][ T31] #0: ffff88801facbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 416.056847][ T31] #1: ffffc90003d4fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 416.069709][ T31] #2: ffff88802945b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 416.078794][ T31] #3: ffff88802945e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 416.088923][ T31] #4: ffff888028978868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 416.098740][ T31] 2 locks held by getty/5585: [ 416.103421][ T31] #0: ffff88814d3bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 416.113254][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 416.123499][ T31] 6 locks held by kworker/0:10/5998: [ 416.128936][ T31] #0: ffff88801facbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 416.140334][ T31] #1: ffffc900051dfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 416.152240][ T31] #2: ffff8881437ca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 416.161292][ T31] #3: ffff88801daaa198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 416.171294][ T31] #4: ffff88801daac160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 416.180682][ T31] #5: ffff88806d2ecf98 (&d->usb_mutex){+.+.}-{4:4}, at: gp8psk_usb_out_op+0x88/0x1a0 [ 416.190349][ T31] 3 locks held by kworker/u8:18/6023: [ 416.195723][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 416.207768][ T31] #1: ffffc9000519fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 416.218811][ T31] #2: ffffffff8f311c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 416.227873][ T31] 1 lock held by syz.1.1248/11112: [ 416.232989][ T31] #0: ffffffff8df47440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 416.251550][ T31] 2 locks held by syz.3.1254/11122: [ 416.257230][ T31] #0: ffffffff8f311c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 416.266321][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 416.278536][ T31] [ 416.280925][ T31] ============================================= [ 416.280925][ T31] [ 416.290372][ T31] NMI backtrace for cpu 1 [ 416.290396][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 416.290419][ T31] Tainted: [L]=SOFTLOCKUP [ 416.290426][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.290436][ T31] Call Trace: [ 416.290443][ T31] [ 416.290450][ T31] dump_stack_lvl+0x189/0x250 [ 416.290478][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.290499][ T31] ? __pfx__printk+0x10/0x10 [ 416.290533][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 416.290558][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 416.290582][ T31] ? __pfx__printk+0x10/0x10 [ 416.290609][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.290637][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 416.290662][ T31] sys_info+0x135/0x170 [ 416.290680][ T31] watchdog+0xf95/0xfe0 [ 416.290706][ T31] ? watchdog+0x20a/0xfe0 [ 416.290734][ T31] kthread+0x711/0x8a0 [ 416.290758][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.290779][ T31] ? __pfx_kthread+0x10/0x10 [ 416.290801][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.290824][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 416.290840][ T31] ? __pfx_kthread+0x10/0x10 [ 416.290861][ T31] ret_from_fork+0x599/0xb30 [ 416.290879][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.290905][ T31] ? __switch_to_asm+0x39/0x70 [ 416.290925][ T31] ? __switch_to_asm+0x33/0x70 [ 416.290943][ T31] ? __pfx_kthread+0x10/0x10 [ 416.290964][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.291000][ T31] [ 416.291006][ T31] Sending NMI from CPU 1 to CPUs 0: [ 416.447487][ C0] NMI backtrace for cpu 0 [ 416.447506][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.447527][ C0] Tainted: [L]=SOFTLOCKUP [ 416.447532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.447541][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 416.447563][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 416.447576][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 416.447591][ C0] RAX: 3b93596721329d00 RBX: ffffffff81978fda RCX: 3b93596721329d00 [ 416.447602][ C0] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 416.447613][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 416.447624][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 416.447635][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 416.447646][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 416.447658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.447669][ C0] CR2: 00007f0701111000 CR3: 000000005af40000 CR4: 00000000003526f0 [ 416.447683][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.447691][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 416.447702][ C0] Call Trace: [ 416.447708][ C0] [ 416.447713][ C0] default_idle+0x13/0x20 [ 416.447730][ C0] default_idle_call+0x73/0xb0 [ 416.447747][ C0] do_idle+0x1ea/0x520 [ 416.447763][ C0] ? irqentry_exit+0x5ba/0x660 [ 416.447780][ C0] ? __pfx_do_idle+0x10/0x10 [ 416.447802][ C0] cpu_startup_entry+0x44/0x60 [ 416.447818][ C0] rest_init+0x2de/0x300 [ 416.447837][ C0] start_kernel+0x3a7/0x400 [ 416.447852][ C0] x86_64_start_reservations+0x24/0x30 [ 416.447870][ C0] x86_64_start_kernel+0x143/0x1c0 [ 416.447888][ C0] common_startup_64+0x13e/0x147 [ 416.447913][ C0] [ 416.482942][ T5998] gp8psk: usb out operation failed. [ 416.484486][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 416.484516][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 416.484540][ T31] Tainted: [L]=SOFTLOCKUP [ 416.484547][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.484558][ T31] Call Trace: [ 416.484566][ T31] [ 416.484574][ T31] dump_stack_lvl+0x99/0x250 [ 416.484599][ T31] ? __asan_memcpy+0x40/0x70 [ 416.484617][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.484637][ T31] ? __pfx__printk+0x10/0x10 [ 416.484671][ T31] vpanic+0x237/0x6d0 [ 416.484691][ T31] ? __pfx_vpanic+0x10/0x10 [ 416.484711][ T31] ? preempt_schedule_common+0x83/0xd0 [ 416.484735][ T31] panic+0xb9/0xc0 [ 416.484753][ T31] ? __pfx_panic+0x10/0x10 [ 416.484774][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 416.484795][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 416.484822][ T31] watchdog+0xfdf/0xfe0 [ 416.484849][ T31] ? watchdog+0x20a/0xfe0 [ 416.484877][ T31] kthread+0x711/0x8a0 [ 416.484901][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.484922][ T31] ? __pfx_kthread+0x10/0x10 [ 416.484945][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.484969][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 416.484985][ T31] ? __pfx_kthread+0x10/0x10 [ 416.485013][ T31] ret_from_fork+0x599/0xb30 [ 416.485033][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.485059][ T31] ? __switch_to_asm+0x39/0x70 [ 416.485079][ T31] ? __switch_to_asm+0x33/0x70 [ 416.485098][ T31] ? __pfx_kthread+0x10/0x10 [ 416.485119][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.485155][ T31] [ 416.503821][ T31] Kernel Offset: disabled