last executing test programs: 36.789785591s ago: executing program 1 (id=590): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0202}}}, 0x14) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a010400000000000000000a0004010900010073797a310000000044000480400001800e000100627974656f726465720000002c000280080005400000000808000440000000550800034000000001080001400000000108000240a80000130900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) (async, rerun: 64) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x81000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80]}, 0x45c) (rerun: 64) 36.643436835s ago: executing program 1 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[], 0x314}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x20000010) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x3, 0xff7fffff, 0xb0ff, 0x23, "d74192f386e87fcb367800080900ffee00", 0x4, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000080)="91") 34.658628475s ago: executing program 1 (id=600): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x30, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') 34.523867471s ago: executing program 1 (id=601): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000000)=0x800, 0x4) 34.478134131s ago: executing program 1 (id=602): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fallocate(r0, 0xc0, 0x6, 0xf8f7) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x4, 0x7f, 0x3, 0x3ff, 0x2, 0x2, 0x5}, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1b6, 0x0, 0x9, 0x6, 0x2}, &(0x7f0000000100)={0x7, 0xffffffffffffffff, 0xe, 0x2, 0x101, 0x3, 0x8, 0xd}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80110, r0, 0x73cab000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x800, 0x6, 0x2) lseek(r0, 0x8, 0x3) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)=""/201, &(0x7f0000000340)=0xc9) r1 = dup3(r0, r0, 0x0) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/tcp6\x00') ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000003c0)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r3}) ioctl$SIOCRSACCEPT(r5, 0x89e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440), 0x2, 0x9}}, 0x20) r6 = dup2(r3, r3) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000004c0)={r1, 0x1, 0xfffffffffffff000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@local, 0x6, 0x0, 0x1, 0xc, 0x0, 0xfa7}, &(0x7f0000000540)=0x20) symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000600)="e76a46adb1c496ea8754f5e47e7286936cf732d60dbb75dd9c313542", 0x1c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000780)={r7, 0xe8, &(0x7f0000000680)=""/232}) quotactl_fd$Q_SYNC(r6, 0xffffffff80000102, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = getpgid(r2) get_robust_list(r9, &(0x7f0000000940)=&(0x7f0000000900)={&(0x7f0000000840)={&(0x7f0000000800)}, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)}}, &(0x7f0000000980)=0x18) fcntl$setown(r1, 0x8, r4) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) fsetxattr$security_capability(r8, &(0x7f00000009c0), &(0x7f0000000ac0)=@v3={0x3000000, [{0xfffffff9, 0x4}, {0x4, 0xdc}]}, 0x18, 0x1) 34.181759501s ago: executing program 1 (id=603): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40187014, &(0x7f0000000100)={0x216, 0x2f, 0x8, 0x1, 0xa, 0x1000, 0x3, 0x36, 0xffffffffffffffff}) close_range(r2, r1, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000080)={0xfffffffffffffe96}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r3, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x0, r6, 0x0, &(0x7f00006b2000/0x2000)=nil, 0x2000, 0x8}) mlockall(0x2) r7 = shmget$private(0x0, 0x3000, 0x8, &(0x7f00002b7000/0x3000)=nil) shmat(r7, &(0x7f00006b2000/0x1000)=nil, 0x5000) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r6, r6, 0x1000, 0x5, 0x9}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x2, r4, r6, 0x8, 0x100, 0x6}) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904360000e0010300052406000005240000000d04"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) 33.985908382s ago: executing program 32 (id=603): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x40187014, &(0x7f0000000100)={0x216, 0x2f, 0x8, 0x1, 0xa, 0x1000, 0x3, 0x36, 0xffffffffffffffff}) close_range(r2, r1, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000080)={0xfffffffffffffe96}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r3, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x0, r6, 0x0, &(0x7f00006b2000/0x2000)=nil, 0x2000, 0x8}) mlockall(0x2) r7 = shmget$private(0x0, 0x3000, 0x8, &(0x7f00002b7000/0x3000)=nil) shmat(r7, &(0x7f00006b2000/0x1000)=nil, 0x5000) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c084) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r6, r6, 0x1000, 0x5, 0x9}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x2, r4, r6, 0x8, 0x100, 0x6}) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904360000e0010300052406000005240000000d04"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) 11.290490473s ago: executing program 2 (id=704): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000140)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf133b00010008000300cb9786be800d08c01eb6ce7ad112c10e7a4ffd6334b4c122", @ANYRES32=r4, @ANYBLOB="38003300a00c4400ffffffffffff080211000000505050505050300b1d008c18ae051c35612cf8f1ab271fe2eef3b5df2b96dc754d83ed4d"], 0x54}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001580)={0x8, {"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", 0x1000}}, 0x1006) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f00000011c0)={0x3, 0x3, 0x0, 0x5, 0x0, 0x2}) 8.170932704s ago: executing program 2 (id=747): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009020000000009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r2, r3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000001c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x40, 0x8201, 0xf7, &(0x7f00000000c0)="9f34ddb5e49a092256b36bde5fee46fe68586785d4c4c9c7f680eced14f80f813fdc5c7f5e0f2be601d8aa78e92d31767e8f8d95bc188d8d7a3597c4ddf1332f89cf294546169e470c1686e371ba7b5ff014c61cdeee9854de2e5b919deed27c6490a40efb6ca398e0308063d236feb1ca9a6c2f24eb49245dcad2624ffd4904f49008b0ca96774b1bb1a85d58f0faf48caaaf7581f69b4455c10ee207c4a3c1dded54fe55afe76083505a8c12de28fca6da2290e2c8990290ee4973f8062bd8b001129547c185ad561f81319a2af68472e6b56b9e59862466c2c53b30811ad904466979fe9604a33827d113dc3238928231d4474de6b3"}], 0x2}) pipe2$watch_queue(&(0x7f0000000200), 0x80) 6.738278545s ago: executing program 2 (id=756): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$tmpfs(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001180), 0x1000009, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001140)={0xffffffffffffffff, 0x37c, 0x0, 0x1000}) mmap$usbfs(&(0x7f000076a000/0x1000)=nil, 0x1000, 0x1000008, 0x30, r0, 0xe) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r2, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="2000000000000000840000d661191cdfd5750cc9000200000002ae1b035406bdf8da19f00b", @ANYRES32=0x0], 0x20}], 0x1, 0x10) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10084, &(0x7f0000000040)) r4 = socket$rds(0x15, 0x5, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0xd8, 0x0, 0xfffffffffffffffa, [{{0x5, 0x2, 0x3, 0x2, 0x1, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, 0x0, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x5, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xffffffffffffffc6, {0x1, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff5, 0x2, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r7, r8, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fsmount(r0, 0x1, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001440)={0x0, 0x1, {r3}, {0xffffffffffffffff}, 0x8, 0x8001}) newfstatat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r12 = socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{0xfffffffffffffffe}, {&(0x7f00000012c0)="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", 0xfa}], 0x2, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r4, r4, r0, r0, r2, r9]}}, @cred={{0x1c, 0x1, 0x2, {r3, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r0, r4, r0, r0, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x130, 0x800}}], 0x1, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000001080)={@l2tp6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, {&(0x7f0000000080)=""/4096, 0x1000}, &(0x7f0000000000), 0x14}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5.853997551s ago: executing program 2 (id=761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {@in6=@loopback, 0x0, 0x3c}, @in=@remote, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000080)) 5.815142014s ago: executing program 0 (id=762): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="d6", 0x1}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) 4.518791258s ago: executing program 3 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43c1c1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f0000000180)=0x49) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008b04"]) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r7, 0xa, 0x21) fcntl$setlease(r7, 0x400, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r11, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r12}, 0x80) connect$rose(r8, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) readlinkat(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/78, 0x4e) r13 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x7, 0x8000000, 0x0, r13}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x1, 0xeeee0000, 0x0, r13}) 4.142966967s ago: executing program 2 (id=773): syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b2"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) 3.524207719s ago: executing program 3 (id=774): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="370426bd7000fcdbdf250400000005000a00010000000800010034"], 0x24}}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) 3.014649622s ago: executing program 4 (id=778): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x20, 0x8, 0xfffffff7, {{0x32, 0x4, 0x2, 0x0, 0xc8, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x10, 0xa9, 0x0, 0xe, [0x9, 0x7, 0x2]}, @timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0x6, [{@loopback, 0xffffc951}]}, @ra={0x94, 0x4}, @generic={0x7, 0x11, "d0610b284d1811de6a6f06505cdd59"}, @lsrr={0x83, 0x7, 0x81, [@broadcast]}, @rr={0x7, 0x13, 0x65, [@loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @empty]}, @ssrr={0x89, 0x1b, 0x53, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x49, 0x3, [{0x0, 0x7, "4b8b019b98"}, {0x6, 0x6, "8631788f"}, {0x0, 0x7, "04b538d527"}, {0x7, 0x11, "14e66703fde7aa222e58500864fd4a"}, {0x0, 0x9, "5e00bae1696601"}, {0x6, 0x7, "87f84fc050"}, {0x6, 0xe, "96dd28db8da28e5ebe103f12"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x80, 0x40, 0x85, 0x8, {{0x2f, 0x4, 0x0, 0x9, 0xbc, 0x67, 0x0, 0x20, 0x2d, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x1, [{@loopback, 0xad4}]}, @end, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x2, [{@remote}]}, @timestamp_addr={0x44, 0x54, 0x51, 0x1, 0x6, [{@local, 0xfffffffd}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@local}, {@loopback, 0x41a}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x8}, {@local, 0x10001}, {@multicast1, 0x1}, {@private=0xa010102, 0x9}, {@empty, 0x40}]}, @rr={0x7, 0x7, 0xc9, [@local]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x3ff}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x17, 0x8c, [@broadcast, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @remote]}, @noop]}}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000280)) fcntl$setstatus(r0, 0x4, 0x42400) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) process_mrelease(r2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/crypto\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1, 0x0, 0x1, 0x3ff, 'syz1\x00', 0x5}, 0x6, 0x4925994654254ca2, 0xac4, r4, 0x3, 0x4, 'syz1\x00', &(0x7f00000003c0)=['gre0\x00', '%}\x00', 'erspan0\x00'], 0x10}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000600)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000640)) quotactl_fd$Q_GETQUOTA(r3, 0x1, 0x0, &(0x7f0000000680)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000700)=0x10, 0x4) fchdir(r0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000740), &(0x7f0000000780)=0x8) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000007c0)) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) fsync(r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000b00)={0x0, 0x4, 0x2, [0x7f, 0xb5]}, &(0x7f0000000b40)=0xc) sendmsg$inet_sctp(r3, &(0x7f0000000c40)={&(0x7f0000000880)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="4e78167f1749848ac64680258697ba1f66601f12d6e81a5c760ea6e6a0f4a97b61559217d97f3851eb227c67e1c43c0ad5f1aefbf0b4d5efebb7ec5cc8a59fb8507c9233b342f7fa20673ff9076762364d07a8542aff7fb59bf494a6143013b1a35518d54c9cc547556c92392c34981e254d758db3b2d84cb8f9f64c29bd45236e4e3836c6dc2d55847185980b99da6efba629b574616a31318de52950debe616c259cd549fd58e1fba07f9439739be824da181f11dc5008aab568218080b6d073e14f9e31126acdab62405b7f6490c919372f064c2b0b4d4d11829c", 0xdc}, {&(0x7f00000009c0)="72389a3b8a149edabd0a42d4885cd98259e7d91021b8f270980cac09623569949ed3b348b1dad2205f9fb2af5274a0bc878ee2db12a0129c80f65493c6d63a0fccf99ff4c1b2a7f03279fa154fe1bc1f51a88903ee949c85ee4cd98a8cf946ca04c30a2713fb5a6f81f5d2b38361050093b3a8c4cb7edc48b69d1dfe06b7787728976c2c8743c4ce85f797129b7b92a3098109cd9eea71e712ac10adbb32adea29a5f4a33cf83402b48d31bb97500465208d18888bc7ec6ac1dc25fd7577343acf403b81e53083997a5712f76ffd0aa3ce6b", 0xd2}], 0x2, &(0x7f0000000b80)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x8200, 0x7, 0x784d, 0x3, 0xbc, 0x800, r6}}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3}}], 0xc0, 0x8000}, 0x4040) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000c80)={[0x1, 0x0, 0x2, 0x5, 0xb6, 0xf, 0x773, 0x8, 0x5, 0x3a3, 0xfff, 0xffffffc0, 0x6, 0x0, 0xf, 0x5, 0x8000, 0x8, 0x1, 0x1, 0x400, 0x8, 0x46, 0x7fff, 0xff, 0x6, 0xa, 0x1, 0xffffff01, 0xffffffff, 0x1, 0xfff, 0x3, 0xffffffff, 0xd220, 0x7, 0x6, 0xe, 0x7fffffff, 0x6, 0x0, 0xdc02, 0x5, 0x80000001, 0x1000, 0x8, 0x200, 0x2, 0xffffffff, 0x3, 0x6, 0x3ff, 0x6, 0x5c5, 0x0, 0xb, 0x7d76, 0x1, 0x4, 0x15d, 0x1, 0x0, 0xffffffff, 0xfffffff8, 0x5, 0xa, 0x3, 0xfffffff7, 0x5, 0x3, 0x4, 0x0, 0x1, 0x2615, 0xec7b, 0x214b, 0x8, 0x2, 0x4, 0xe, 0x0, 0x0, 0x1ff, 0x3973249b, 0x0, 0xc, 0x7fff, 0x80000000, 0x2, 0x182a, 0xd600, 0x8f, 0x26c, 0x8, 0x2, 0x8, 0x7, 0x3, 0x6, 0x1, 0xa2b, 0x7, 0x1, 0xcdd, 0x4, 0x8001, 0xa8dc, 0x5, 0x69ee, 0x8, 0x1, 0x873, 0xd, 0x40, 0xffffff11, 0x0, 0x2, 0x101, 0x4, 0x9, 0x8, 0x9, 0x9, 0x6, 0x8, 0xfffffff3, 0x800, 0x6, 0xffffffff, 0x5, 0x1, 0x8, 0xfffffff7, 0x9, 0x3ff, 0xc28, 0x3, 0x3, 0x4, 0x2, 0xe, 0x7, 0x10000, 0x4, 0x1, 0x9, 0x830, 0xfffffff9, 0x3, 0x7fff, 0x101, 0x1ff, 0x3, 0x9, 0x8, 0xfffffff7, 0x9, 0x5, 0x0, 0xfffffffe, 0x2, 0x9, 0x3e, 0x9, 0x7, 0xffff, 0xfffffff7, 0x1000, 0xf5, 0x5, 0x3, 0x7fff, 0x6, 0x0, 0x8, 0x40, 0x7, 0x4d5, 0xf, 0x3, 0xde, 0xe, 0x6, 0x4, 0xfffffc68, 0xdebc, 0x3, 0xbf5, 0x0, 0x10, 0x1, 0x1, 0x800, 0x2, 0xd0, 0xc, 0x4, 0x4, 0x8, 0x9, 0x8, 0x92, 0x6, 0xca7b, 0xfffffffc, 0x8, 0x4, 0xb9, 0x7, 0x514f, 0x101, 0x1, 0x10, 0x49, 0xfffffff8, 0x5, 0xc75e, 0x8, 0x1, 0x9, 0x7, 0xfd, 0xffff, 0xbc, 0x35e72cf4, 0x1, 0x2, 0xfff, 0x1, 0x90f, 0x1, 0x9, 0x2, 0x6800000, 0x1ff, 0x5, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0x6, 0x9, 0x5, 0x7134, 0x80000001, 0x3, 0x9, 0x4, 0x1, 0x1, 0x9, 0x9, 0x8, 0x1000, 0x7fff, 0x8, 0x8001, 0x0, 0x5, 0x0, 0x4, 0x2, 0xff, 0x46, 0x7, 0x401, 0xd85, 0x6, 0x6, 0x5, 0x4, 0xa, 0x1, 0x5, 0x7, 0x4, 0x4, 0x4, 0x2, 0x3, 0x4, 0x3, 0x0, 0x200, 0x7, 0x3, 0x0, 0x7ed3dcec, 0x9, 0xffff, 0x7, 0x1, 0x3, 0x100, 0x3, 0x600000, 0x0, 0x9, 0x9, 0x9, 0x2, 0x7, 0x7fff, 0x3ff, 0x81, 0x7, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x3, 0xffffffff, 0x1, 0x5, 0x7, 0x1, 0x4, 0x0, 0x3, 0x5, 0x2, 0x6, 0x9, 0x10, 0x9d70, 0x2ff, 0x1a, 0x1, 0x5, 0x1, 0x3, 0xe0000000, 0x4, 0xbf, 0x4, 0x0, 0x4, 0xad30, 0x6, 0x2, 0x8001, 0x1, 0x6, 0x6, 0x0, 0x6, 0x7, 0x4, 0x8, 0xe2, 0x9, 0xff, 0x2, 0x2, 0xffffff80, 0x6, 0x1, 0xffffffc0, 0x7fffffff, 0x6, 0xa02, 0x2, 0x800, 0xfffffbff, 0x2, 0x8, 0x5, 0x400, 0xff, 0xe, 0x80, 0x9, 0x7ff, 0x5, 0x5, 0x5, 0x8, 0x1, 0x9, 0xff, 0x1, 0x5, 0x2, 0x1, 0x2000000, 0x8, 0xc43, 0x7, 0x4e68, 0x3, 0x9, 0xffffff38, 0x7, 0xc4a8, 0x8, 0x1, 0x80000000, 0x7ff, 0x80, 0xfffffbff, 0xae6, 0x3, 0x800, 0x6, 0x6eff39bd, 0x1ff, 0x10001, 0x0, 0x4d2, 0x1000, 0xb96, 0x4, 0xd, 0x4, 0x7c8, 0x10001, 0x0, 0xc3e, 0x0, 0x1, 0x7, 0x2, 0x9, 0x8, 0x10000, 0xa8, 0x7fff, 0x299, 0x6, 0x1e2, 0x2, 0x9, 0x0, 0x9, 0x8, 0x3ff, 0x9, 0x3, 0x200, 0x80000000, 0x0, 0x9da, 0x4, 0x3, 0x8001, 0x1, 0x0, 0x6, 0x1, 0x1, 0x8000, 0xfffffffc, 0x4, 0x6, 0x1, 0x0, 0xad1, 0x8, 0x1000, 0x7, 0x8, 0x10001, 0x8000, 0x1000, 0x9, 0x6, 0xc813, 0x2, 0xfffff801, 0x0, 0x800, 0x7, 0x81, 0x200, 0x8, 0xb, 0x7, 0x6, 0x7, 0x4, 0x0, 0x8, 0x256, 0x5, 0xab97, 0x1, 0x1ff, 0x6, 0x0, 0x7fff, 0x800, 0x8001, 0x2, 0x2e3, 0x5, 0x4, 0xffff, 0x10000, 0x1, 0x7, 0x1, 0x2, 0xbd2b, 0x5, 0x2, 0x1, 0x3, 0x7, 0x7fff, 0x54b34e85, 0x9, 0x200, 0x4, 0x9, 0xbf3, 0x6, 0x3, 0x3, 0x4, 0x64171b44, 0x1908, 0x6, 0x1, 0x80, 0x7, 0x3, 0x1, 0x7fff, 0x5, 0x0, 0x3, 0x3, 0x5a0, 0xa6a, 0x1, 0x2, 0x7, 0x5, 0x1000, 0x3, 0x3, 0x8, 0x9, 0x9, 0x4, 0x9, 0xffffffff, 0x7ff, 0xa10, 0x5, 0x2, 0xba88, 0x4, 0xf, 0x8, 0x6, 0x7, 0xe, 0xeffb, 0xc0000000, 0x1, 0x3, 0xfff, 0x4, 0x4, 0x6, 0x1, 0x6, 0x57cb4867, 0x7f, 0x5, 0x9a, 0x1, 0x7, 0x10, 0x4a98d9d3, 0x9, 0x5, 0x3f7, 0xfffffff8, 0x4, 0x8, 0x7, 0x100, 0x6, 0x7000, 0x8, 0xd, 0x3, 0x9, 0x9, 0x8, 0x7, 0x4, 0x8d54, 0xffffffae, 0x7fffffff, 0xfffffffe, 0x8000, 0x3, 0x2a2, 0xfffffffc, 0x7, 0xb, 0x3, 0x8, 0x0, 0x4, 0x5, 0x5, 0xcf, 0x0, 0x80000000, 0x8, 0x0, 0x80, 0xbc90, 0x4, 0x0, 0x1, 0x4, 0x2, 0x0, 0x1, 0x2eec5b1f, 0xb928, 0x2, 0x7, 0x643, 0x7, 0xbd, 0xe, 0x6, 0x8, 0xfffffffb, 0x101, 0x52bebf88, 0x8, 0x4, 0x6, 0xae6f, 0xc, 0x4, 0x6, 0x179, 0x5, 0x8001, 0x3, 0x80000000, 0x40, 0xffffff80, 0xd, 0x9, 0xffff, 0x5, 0x8, 0x8001, 0xc, 0x6, 0x7, 0xc, 0x6, 0x7, 0xd5, 0x8001, 0x8, 0x1, 0x6, 0x7, 0x800, 0x1, 0xb, 0x4, 0x3, 0xb7e, 0x86e5, 0x0, 0x1, 0x78, 0x1, 0x80000000, 0x10000000, 0xb01, 0xfffffff9, 0x2, 0x7, 0x0, 0x1, 0x5, 0x2, 0x1c000, 0x3, 0x80000000, 0xfffffffb, 0x8, 0x400, 0x3ff, 0x9, 0x2, 0x101, 0xd, 0x0, 0x1, 0x5, 0x6, 0x6, 0x5, 0x8, 0x6, 0x0, 0x93d, 0x5, 0xb, 0x0, 0x7, 0x1, 0x9, 0x9, 0x9, 0x76, 0x80000001, 0x9, 0xbf32, 0xc614, 0x800, 0x3, 0x1, 0x2, 0xf4d, 0x2, 0xa2, 0xff, 0x0, 0xca, 0x7, 0x7, 0xaf, 0xb8e, 0xfffffffc, 0xffffffff, 0x0, 0x7f, 0x6, 0x6, 0x80000000, 0x1, 0x4c12, 0xe8, 0x12a, 0x2b3, 0x2, 0x2, 0x6, 0x0, 0x6, 0x10, 0x9, 0xa7cbf1cb, 0x3ff, 0x3ff, 0x400, 0x3, 0x81, 0x9, 0x4, 0x3, 0x6, 0x81, 0x9, 0x2, 0x800, 0x7ca49bb2, 0x6, 0x1, 0xb7a3, 0x1, 0xfffffff6, 0x7, 0xa, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x487, 0x5, 0x1, 0x8000, 0x7fb6, 0x0, 0x9, 0x0, 0xffff61ae, 0xe172, 0x7, 0x7f, 0x0, 0x5, 0x7, 0x9, 0x7fff, 0x8, 0x8000000, 0x80000001, 0xffff, 0x80000000, 0x2, 0x81, 0xb236, 0xd4484ba, 0x400000, 0x8001, 0x800, 0x4, 0xbb, 0xf836, 0x1cb2, 0x1, 0x8001, 0xc, 0x9, 0xca4, 0x4, 0x8, 0x1, 0x1ff, 0x8, 0x43fc, 0x8, 0x0, 0x7, 0x3ff, 0x982, 0xb, 0xd, 0x400, 0x10000, 0x6, 0x6, 0xfffffff8, 0x6, 0x2, 0x8, 0x1, 0xd, 0x1, 0x0, 0x5, 0x1, 0xfffffffe, 0x5, 0x57, 0x9, 0x6, 0x400, 0x400, 0x6, 0x0, 0xfffffff4, 0x8, 0x7, 0x9, 0x8d, 0x5, 0x0, 0x2, 0x2, 0xb, 0xfac, 0x6, 0x2, 0x7fff, 0xfffffff9, 0x5, 0x4, 0x200, 0x4, 0xffff1436, 0x7a, 0x7, 0x5, 0x1000, 0x1, 0xa, 0x7, 0x9, 0x81, 0x8, 0xfffffffe, 0x0, 0xff, 0x5, 0xd, 0x0, 0x9, 0x0, 0x40, 0xa, 0x0, 0xf, 0x7, 0xd6, 0x5a1, 0xff, 0x2, 0x7, 0x1, 0x7fff, 0x9, 0x9, 0x9, 0x4, 0x2, 0xffffffff, 0x10001, 0x5, 0x0, 0x2, 0x2, 0x4, 0x95db, 0x3, 0xeaa, 0x2, 0x5, 0x81, 0xeda0, 0x9, 0x6, 0xfffffff3, 0x7ff, 0x4, 0xfffffffa, 0x4, 0xfffffffe, 0x5, 0xc, 0x1, 0x8c, 0x0, 0x3, 0x401, 0x3, 0x401, 0x9, 0x7, 0x6000000, 0x3, 0x8000, 0x7, 0x6, 0x8, 0x31, 0xa, 0x7ff, 0x8, 0xffffffff, 0x200, 0x2, 0x8c7, 0x8, 0x1, 0x54, 0x300, 0xecb, 0xfffffffb, 0x8000, 0x5, 0x8, 0x4, 0x7fffffff, 0x0, 0x2, 0xa, 0x6, 0x1159, 0x0, 0xcc, 0x0, 0x5, 0x7, 0x5, 0x9, 0xffffff3e, 0x4, 0x7fffffff, 0x3, 0x80, 0x1ff, 0x8b0, 0x7ff, 0x5, 0x0, 0x81, 0x6, 0x3, 0x7, 0x8001, 0xa236, 0x80, 0xbb, 0x6, 0x3, 0x3, 0x7, 0xff, 0x6, 0x9, 0xe3, 0x44ff, 0x0, 0x401, 0x3ff, 0x9, 0xcf, 0x5, 0xffffff80, 0x2, 0x1, 0xfffffff8, 0xfffffffb]}) sendto$packet(r3, &(0x7f0000001c80)="9cdc4979195e96699e2abde7e3ad63d3bdf42c2309cfbaa046953726312722", 0x1f, 0x48000, &(0x7f0000001cc0)={0x11, 0x17, r1, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000001d00)) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000001d40)={0x1, 0x4}, 0x2) 2.774938624s ago: executing program 4 (id=779): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x3, 0x0, 0x3, 0x2b, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x933}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) 2.708646247s ago: executing program 0 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x900}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 2.652826706s ago: executing program 0 (id=781): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009020000000009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000001c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x40, 0x8201, 0xf7, &(0x7f00000000c0)="9f34ddb5e49a092256b36bde5fee46fe68586785d4c4c9c7f680eced14f80f813fdc5c7f5e0f2be601d8aa78e92d31767e8f8d95bc188d8d7a3597c4ddf1332f89cf294546169e470c1686e371ba7b5ff014c61cdeee9854de2e5b919deed27c6490a40efb6ca398e0308063d236feb1ca9a6c2f24eb49245dcad2624ffd4904f49008b0ca96774b1bb1a85d58f0faf48caaaf7581f69b4455c10ee207c4a3c1dded54fe55afe76083505a8c12de28fca6da2290e2c8990290ee4973f8062bd8b001129547c185ad561f81319a2af68472e6b56b9e59862466c2c53b30811ad904466979fe9604a33827d113dc3238928231d4474de6b3"}], 0x2}) 2.031069293s ago: executing program 3 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0x9, 0xfd, 0x0, @generic}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0x9, 0xfd, 0x0, @generic}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.794805144s ago: executing program 4 (id=783): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) syz_open_dev$vim2m(0x0, 0x80000000006, 0x2) (async) mount(&(0x7f0000000240)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000280)='hpfs\x00', 0x218483, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000000)={0x0, 0x0, 0x0}) 1.68978098s ago: executing program 4 (id=784): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 1.599143534s ago: executing program 4 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x105, 0xffffffff, 0x25dfdafc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xb}]]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40005080) 1.592240463s ago: executing program 4 (id=786): keyctl$set_reqkey_keyring(0xe, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000200000000000000fc020000000000000000000000000000000000000005000000000000000000000000000300000000020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000401050000000000000000000000000000000000000000003200000000000000ac1e0101000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000003000000000000000000000000000000000000000000000000000000000001000000003c000000020000000000000000000000000000000000000000000000010340000000000000000000000000007f000001000000000000000000000000000000002b00000002000000ac1414000000000000000000000000000035000000000000eb0300"/372], 0x1bc}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020a86f3401011249024db01020305090212000100e950090904"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000280)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r3) syz_usb_disconnect(r1) close(r0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000580)={0x3, 0x1c, 0xfa00, {{0xa, 0x4e23, 0xd0, @remote, 0x5}, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0xffffffffffffffff, 0x3}}, 0x48) pread64(r5, &(0x7f0000001100)=""/4080, 0xff0, 0x7f) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000ac0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x23, 0x4}, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040050) timer_create(0x3, &(0x7f0000000640)={0x0, 0x1, 0x1}, &(0x7f0000000680)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r1], 0x0) 1.233459434s ago: executing program 0 (id=787): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x930, 0x2) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x1, 0xfffffff8, 0x4e50, 0x8, 0xa, 0x5}) r4 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x28000) ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f0000000180)) ioctl$int_out(r2, 0x2, &(0x7f0000000200)) ioctl$CEC_ADAP_G_PHYS_ADDR(r4, 0x80026101, &(0x7f0000000240)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000002c0)) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000300)="f36d79cf79263ca44a879a8bd74bbe5f33755ef131d363d01cf9ac15fe98622eaad646b8bc8c896ce044beea24520be7fd36") r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x490040, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000380)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r7, 0x5, 0xff08, &(0x7f00000003c0)="eed5b59da6393cfee1e373253ac47582b685554f014797e8aafd07d7889bb76acfe643e3e8dcd0a782745a7a3c75b5d1537f47a260d7c1d19895984719d784be465388f0c1b01a4610e804db28a1cbcc17295cf6303c4659940ad3d244f108ae9e3b4a6b53b5f8dfab1a199941ae7d6d7ee68ed88c7bd78dca97e56348a71750336bc7669fb99f252986dc5aba1ca36d08cc9b207280f1f616a79139", 0x9c) r8 = openat(r6, &(0x7f0000000480)='./file0\x00', 0x80c0, 0x38) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x60000000, 0x8, 0x4}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000540)={r9, 0x2, 0x3, [0xfffc, 0x1e0a, 0x0]}, &(0x7f0000000580)=0xe) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x2, 0xc7, 0x81, 0x8001}, {0x4, 0x6, 0x8, 0x1}]}, 0x10) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000640)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x10, 0x0, 0x7ff, 0x1, {{0xc, 0x4, 0x3, 0x10, 0x30, 0x65, 0x0, 0xc, 0xe, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x76, 0x1, 0x0, [{@multicast1, 0x7}]}, @generic={0x44, 0xb, "9d915a9e733c66838d"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'pimreg\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000900)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x7870, 0x8, 0xfffff67a, 0xfea, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x64, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ssrr={0x89, 0x1b, 0x23, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0x43, [@local, @remote, @local, @private=0xa010102, @multicast2]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40101000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1a0, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x146b51abdd755a38}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.142974074s ago: executing program 0 (id=788): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x4000040) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0xffffffff, @loopback, 0x8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 1.142693233s ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x900}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1.101675573s ago: executing program 0 (id=790): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x3, 0x3, {0x3, 0x2e, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1, 0x5}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x3, 0x3, {0x3, 0x2e, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) (async) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) (async) 1.098762432s ago: executing program 3 (id=791): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x3, 0x0, 0x3, 0x2b, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x933}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) 986.966581ms ago: executing program 2 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x4, 0xfffd, {0x0, 0x11}, {0x48, 0x2}, @ramp={0x0, 0x6, {0x6, 0x3ff, 0x1, 0xffd0}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x410, 0x0, 0x3}, 0x18, 0x3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221c"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x224, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, [@NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "d936ce693bdd69a89af820cfc3fb99187a62dc6277651c0d9313eeb6e2ce046a09c654ceccb27c4c828ad187d1e0936c82fcfa6ad5e3acb615514a802354fd0c3a2ff37b19ba8df7b019c675d2d6690c4731ec31a367cc91bd75efdf7e09aa18ac4d994d378bd262d7a7980fa50979a590a3c83454528bc3cc7df59361da8cf180656cb961a83a0277a7a0491bb9dc4308a3df2691e378d7ff0d13a7f501f4148b518964ceb94072df01c049b8d4168177831a9cd251b5988e18ded7ed36cd5e4bc757b06a78d139f93773c0244e891ccaff"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4e0}, @NL80211_ATTR_FRAME_MATCH={0x3e, 0x5b, "61ad202cc8e1ce5e82a81778f4958bcc7c674c93b5cf17b5ebfc8cdac59588e8d8086c954c24d4b560114b7917e161b4cff6dd8780b4e0f6df76"}, @NL80211_ATTR_FRAME_MATCH={0xdb, 0x5b, "e145bcaa0ba3037e4a55fee22f54e7ba5eea6edb19c6e12d3f28e8071422e54760621d7b980d27d1be05a58899467caced013801fe486c3a0950dc03e53ddb6d28c3864feb092e2821f8f76096d26ecf7a9d53d2555d07a7500f17414f4f67f1f7ffab61262af6b784062cacc16e550acb5ba5673eb4dce2356c9474e806c489b642d1dd4e2554bc8f0cfa419d3441ce6babcdfe79dbdea74bb057cb792c451401a8cc5378c778eb2edc55578fc2d3e0a56bfc1c472c8a273ad1b770879d12c5b8b0814660044ce9b4f0cf0c6ef688163e0236801178d8"}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000100}, 0x1) (async) landlock_restrict_self(r3, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 0s ago: executing program 3 (id=793): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @loopback}, {0x300, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x77051ed49796c460}}, 0x2, {0x2, 0x4e21, @loopback}, 'ip_vti0\x00'}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ce number 58 using dummy_hcd [ 182.535030][ T24] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 182.543409][ T24] usb 4-1: config 0 has no interface number 0 [ 182.551858][ T24] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice=42.55 [ 182.561000][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.569132][ T24] usb 4-1: Product: syz [ 182.573358][ T24] usb 4-1: Manufacturer: syz [ 182.577980][ T24] usb 4-1: SerialNumber: syz [ 182.585946][ T24] usb 4-1: config 0 descriptor?? [ 182.593279][ T24] ftdi_sio 4-1:0.188: FTDI USB Serial Device converter detected [ 182.601970][ T24] ftdi_sio ttyUSB0: unknown device type: 0x4255 [ 182.608511][ T875] usb 3-1: device descriptor read/64, error -71 [ 182.722606][ T875] usb usb3-port1: attempt power cycle [ 182.762179][ T5954] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 182.783378][ T5954] usb 1-1: device descriptor read/8, error -71 [ 182.794469][ T5973] usb 4-1: USB disconnect, device number 59 [ 182.802827][ T5973] ftdi_sio 4-1:0.188: device disconnected [ 182.912244][ T5960] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 183.032159][ T5954] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 183.053969][ T5954] usb 1-1: device descriptor read/8, error -71 [ 183.072251][ T875] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 183.075909][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.090787][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.092996][ T875] usb 3-1: device descriptor read/8, error -71 [ 183.100627][ T5960] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 183.116054][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.127218][ T5960] usb 2-1: config 0 descriptor?? [ 183.163813][ T5954] usb usb1-port1: unable to enumerate USB device [ 183.359277][ T875] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 183.392840][ T875] usb 3-1: device descriptor read/8, error -71 [ 183.503507][ T875] usb usb3-port1: unable to enumerate USB device [ 183.622318][ T5954] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 183.782413][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 183.792637][ T7375] netlink: 'syz.3.439': attribute type 4 has an invalid length. [ 183.803604][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.813204][ T5954] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 183.820947][ T5954] usb 4-1: can't read configurations, error -71 [ 184.349626][ T7378] FAULT_INJECTION: forcing a failure. [ 184.349626][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.365677][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 184.365707][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.365728][ T7378] Call Trace: [ 184.365737][ T7378] [ 184.365746][ T7378] dump_stack_lvl+0x189/0x250 [ 184.365797][ T7378] ? __pfx____ratelimit+0x10/0x10 [ 184.365825][ T7378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.365858][ T7378] ? __pfx__printk+0x10/0x10 [ 184.365902][ T7378] should_fail_ex+0x414/0x560 [ 184.365934][ T7378] _copy_to_user+0x31/0xb0 [ 184.365957][ T7378] simple_read_from_buffer+0xe1/0x170 [ 184.365985][ T7378] proc_fail_nth_read+0x1b3/0x220 [ 184.366021][ T7378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.366056][ T7378] ? rw_verify_area+0x2a6/0x4d0 [ 184.366088][ T7378] ? __lock_acquire+0xab9/0xd20 [ 184.366111][ T7378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.366144][ T7378] vfs_read+0x200/0xa30 [ 184.366177][ T7378] ? fdget_pos+0x247/0x320 [ 184.366206][ T7378] ? __pfx___mutex_lock+0x10/0x10 [ 184.366237][ T7378] ? __pfx_vfs_read+0x10/0x10 [ 184.366272][ T7378] ? __fget_files+0x2a/0x420 [ 184.366309][ T7378] ? __fget_files+0x3a0/0x420 [ 184.366331][ T7378] ? __fget_files+0x2a/0x420 [ 184.366377][ T7378] ksys_read+0x145/0x250 [ 184.366400][ T7378] ? __pfx_ksys_read+0x10/0x10 [ 184.366424][ T7378] ? do_syscall_64+0xbe/0xfa0 [ 184.366457][ T7378] do_syscall_64+0xfa/0xfa0 [ 184.366483][ T7378] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.366511][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.366533][ T7378] ? clear_bhb_loop+0x60/0xb0 [ 184.366560][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.366581][ T7378] RIP: 0033:0x7f27fcb8d8dc [ 184.366611][ T7378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.366630][ T7378] RSP: 002b:00007f27fda68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.366656][ T7378] RAX: ffffffffffffffda RBX: 00007f27fcde5fa0 RCX: 00007f27fcb8d8dc [ 184.366672][ T7378] RDX: 000000000000000f RSI: 00007f27fda680a0 RDI: 0000000000000005 [ 184.366686][ T7378] RBP: 00007f27fda68090 R08: 0000000000000000 R09: 0000000000000000 [ 184.366699][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.366712][ T7378] R13: 00007f27fcde6038 R14: 00007f27fcde5fa0 R15: 00007ffcf67a3e78 [ 184.366749][ T7378] [ 184.952178][ T5954] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 185.032496][ T875] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 185.102158][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 185.109353][ T5954] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.117853][ T5954] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 185.125260][ T5954] usb 4-1: config 0 has no interface number 0 [ 185.131407][ T5954] usb 4-1: config 0 interface 12 has no altsetting 0 [ 185.141094][ T5954] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 185.150307][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.158561][ T5954] usb 4-1: Product: syz [ 185.162910][ T5954] usb 4-1: Manufacturer: syz [ 185.167589][ T5954] usb 4-1: SerialNumber: syz [ 185.172298][ T5973] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 185.182661][ T5954] usb 4-1: config 0 descriptor?? [ 185.194555][ T875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 185.204514][ T875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 185.216945][ T875] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 185.226809][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.234895][ T875] usb 1-1: Product: syz [ 185.239272][ T875] usb 1-1: Manufacturer: syz [ 185.244561][ T875] usb 1-1: SerialNumber: syz [ 185.253121][ T875] usb 1-1: config 0 descriptor?? [ 185.259058][ T7382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.267974][ T7382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.324280][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 185.334790][ T5973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 185.344623][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.354634][ T5973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.369464][ T5973] usb 3-1: New USB device found, idVendor=0451, idProduct=3418, bcdDevice=ef.1e [ 185.378860][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.387585][ T5973] usb 3-1: Product: syz [ 185.391815][ T5973] usb 3-1: Manufacturer: syz [ 185.399022][ T5973] usb 3-1: SerialNumber: syz [ 185.407669][ T5973] usb 3-1: config 0 descriptor?? [ 185.477628][ T7382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.485454][ T7382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.651846][ T5959] usb 3-1: USB disconnect, device number 61 [ 185.667614][ T5954] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 185.679370][ T5954] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 185.692625][ T5954] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 185.701054][ T5954] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 185.768596][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 185.780990][ T5954] usb 4-1: USB disconnect, device number 61 [ 185.799415][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.812865][ T30] audit: type=1326 audit(1758725015.138:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.2.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e8778eec9 code=0x0 [ 185.871390][ T5960] usb 2-1: USB disconnect, device number 57 [ 186.021491][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.034447][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.245473][ T7417] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 186.256407][ T7417] netlink: 55 bytes leftover after parsing attributes in process `syz.3.450'. [ 186.314188][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.336630][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.375199][ T875] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 186.412379][ T5960] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 186.441813][ T875] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:15:00:01:c0 [ 186.473239][ T875] usb 1-1: USB disconnect, device number 52 [ 186.481140][ T875] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 186.572270][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 186.585393][ T7411] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 186.602723][ T5960] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.614445][ T5960] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 186.632608][ T5960] usb 2-1: can't read configurations, error -71 [ 186.782186][ T5959] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 186.946376][ T5959] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 186.954820][ T5959] usb 3-1: config 1 has no interface number 0 [ 186.961184][ T5959] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 186.973319][ T5959] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 186.983555][ T5959] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.996881][ T5959] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 187.006134][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.014208][ T5959] usb 3-1: Product: syz [ 187.018438][ T5959] usb 3-1: Manufacturer: syz [ 187.023135][ T5959] usb 3-1: SerialNumber: syz [ 187.032515][ T7419] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.242733][ T7419] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.259619][ T5959] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 187.453923][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.463785][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.492478][ T5960] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 187.654813][ T7458] netlink: 'syz.2.462': attribute type 8 has an invalid length. [ 187.673647][ T7456] netlink: 'syz.3.461': attribute type 27 has an invalid length. [ 187.708833][ T7456] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 187.804895][ T5959] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 187.811705][ T5959] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 187.825299][ T5959] usb 3-1: USB disconnect, device number 62 [ 187.834741][ T5959] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 187.944363][ T5959] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 187.974255][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 188.003441][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 188.032678][ T5960] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 188.052406][ T5960] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 188.061025][ T5960] usb 2-1: Product: syz [ 188.078872][ T5960] usb 2-1: Manufacturer: syz [ 188.088999][ T5960] usb 2-1: SerialNumber: syz [ 188.116375][ T7467] tipc: Started in network mode [ 188.121738][ T7467] tipc: Node identity 100, cluster identity 4711 [ 188.129175][ T7467] tipc: Node number set to 256 [ 188.306226][ T5960] usb 2-1: Invalid connection information received from device [ 188.392184][ T10] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 188.442196][ T5954] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 188.520472][ T7473] IPVS: set_ctl: invalid protocol: 12 172.20.20.10:21 [ 188.524214][ T5937] usb 2-1: USB disconnect, device number 59 [ 188.550184][ T7473] use of bytesused == 0 is deprecated and will be removed in the future, [ 188.559754][ T7473] use the actual size instead. [ 188.566333][ T10] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 188.575571][ T10] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 188.584743][ T10] usb 4-1: config 0 has no interface number 1 [ 188.591061][ T10] usb 4-1: config 0 has no interface number 2 [ 188.597632][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 188.603545][ T10] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 188.618621][ T7469] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 188.627722][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.658380][ T5954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.669275][ T10] usb 4-1: config 0 descriptor?? [ 188.679036][ T5954] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 188.689219][ T5954] usb 1-1: can't read configurations, error -71 [ 188.904116][ T7467] netlink: 'syz.3.465': attribute type 3 has an invalid length. [ 188.911839][ T7467] netlink: 'syz.3.465': attribute type 4 has an invalid length. [ 188.919810][ T5973] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 188.920212][ T7467] netlink: 'syz.3.465': attribute type 5 has an invalid length. [ 188.935651][ T7467] netlink: 'syz.3.465': attribute type 6 has an invalid length. [ 188.943630][ T7467] netlink: 'syz.3.465': attribute type 7 has an invalid length. [ 188.951366][ T7467] netlink: 'syz.3.465': attribute type 7 has an invalid length. [ 188.959277][ T7467] netlink: 13014 bytes leftover after parsing attributes in process `syz.3.465'. [ 188.971580][ T10] usb 4-1: Could not set interface, error -71 [ 188.997585][ T10] usb 4-1: USB disconnect, device number 62 [ 189.074156][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.103043][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 189.115222][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 189.126274][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 189.136365][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.151145][ T5973] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 189.160267][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 189.168855][ T5973] usb 3-1: Product: syz [ 189.176313][ T5973] usb 3-1: Manufacturer: syz [ 189.180992][ T5973] usb 3-1: SerialNumber: syz [ 189.191105][ T5973] usb 3-1: config 0 descriptor?? [ 189.332561][ T5959] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 189.401056][ T5973] radio-si470x 3-1:0.0: DeviceID=0x87d8 ChipID=0x0700 [ 189.494477][ T5959] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 189.502750][ T5959] usb 2-1: config 0 has no interface number 0 [ 189.508903][ T5959] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=7e.6d [ 189.519242][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.529991][ T5959] usb 2-1: config 0 descriptor?? [ 189.742440][ T5954] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 189.753366][ T5959] usb 2-1: string descriptor 0 read error: -71 [ 189.764750][ T7495] ======================================================= [ 189.764750][ T7495] WARNING: The mand mount option has been deprecated and [ 189.764750][ T7495] and is ignored by this kernel. Remove the mand [ 189.764750][ T7495] option from the mount to silence this warning. [ 189.764750][ T7495] ======================================================= [ 189.771419][ T5959] usb 2-1: USB disconnect, device number 60 [ 189.799694][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.912859][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 189.919895][ T5954] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 189.922541][ T5973] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 189.930034][ T5954] usb 1-1: config 0 has no interface number 0 [ 189.944066][ T5954] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.955221][ T5973] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 189.957260][ T5954] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 189.964795][ T5973] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 189.974287][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.992366][ T5954] usb 1-1: Product: syz [ 189.996579][ T5954] usb 1-1: Manufacturer: syz [ 190.001308][ T5954] usb 1-1: SerialNumber: syz [ 190.014186][ T5954] usb 1-1: config 0 descriptor?? [ 190.026128][ T5954] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 190.132222][ T5960] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 190.145965][ T875] usb 3-1: USB disconnect, device number 63 [ 190.199512][ T7499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 190.206352][ T7499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.218794][ T7499] vhci_hcd vhci_hcd.0: Device attached [ 190.302291][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 190.318522][ T5960] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.341217][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 190.343343][ T5960] usb 4-1: config 0 has no interface number 0 [ 190.371126][ T5960] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 190.373949][ T7499] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 190.386845][ T7499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.394364][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.394383][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.403073][ T7499] vhci_hcd vhci_hcd.0: Device attached [ 190.418002][ T7506] vhci_hcd: connection closed [ 190.421806][ T1002] vhci_hcd: stop threads [ 190.433150][ T5960] usb 4-1: Product: syz [ 190.437419][ T5960] usb 4-1: Manufacturer: syz [ 190.453291][ T1002] vhci_hcd: release socket [ 190.464535][ T5960] usb 4-1: SerialNumber: syz [ 190.471364][ T1002] vhci_hcd: disconnect device [ 190.485616][ T5960] usb 4-1: config 0 descriptor?? [ 190.501134][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 190.514997][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.537331][ T7500] vhci_hcd: connection reset by peer [ 190.543843][ T13] vhci_hcd: stop threads [ 190.548303][ T13] vhci_hcd: release socket [ 190.554541][ T13] vhci_hcd: disconnect device [ 190.637831][ T5954] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 190.704792][ T7497] netlink: 124 bytes leftover after parsing attributes in process `syz.3.473'. [ 190.716512][ T5954] usb 4-1: USB disconnect, device number 63 [ 190.747555][ T875] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 190.903897][ T875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.914969][ T875] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 190.924171][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.935497][ T875] usb 2-1: config 0 descriptor?? [ 191.143757][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.152805][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.161739][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.172376][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.332207][ T5973] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 191.382352][ T875] usbhid 2-1:0.0: can't add hid device: -71 [ 191.389711][ T875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.400261][ T875] usb 2-1: USB disconnect, device number 61 [ 191.482165][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 191.492776][ T7514] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 191.504079][ T5973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.513090][ T5973] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 191.520714][ T5973] usb 3-1: can't read configurations, error -71 [ 191.522268][ T5954] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 191.683898][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.695269][ T5954] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.705208][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.714355][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.725888][ T7516] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 191.737173][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.104959][ T7516] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.284941][ T24] usb 4-1: USB disconnect, device number 64 [ 192.371831][ T5960] usb 1-1: USB disconnect, device number 54 [ 192.420745][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.722458][ T5954] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 192.826075][ T7543] kAFS: Can only specify source 'none' with -o dyn [ 192.852303][ T5954] usb 2-1: device descriptor read/64, error -71 [ 192.912203][ T5973] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 192.944617][ T7546] sd 0:0:1:0: PR command failed: 1026 [ 192.950098][ T7546] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 192.957144][ T7546] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 193.066435][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 193.075006][ T5973] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 193.085418][ T5973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 193.095412][ T5973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 193.104765][ T5973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 193.112200][ T5954] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 193.113424][ T5973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.129848][ T5973] usb 3-1: config 0 has no interface number 0 [ 193.137793][ T5973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 193.149498][ T5973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 193.159702][ T5973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.169937][ T5973] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.184218][ T5973] usb 3-1: config 0 interface 125 has no altsetting 0 [ 193.191014][ T5973] usb 3-1: config 0 interface 125 has no altsetting 2 [ 193.199808][ T5973] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 193.209667][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.217853][ T5973] usb 3-1: Product: syz [ 193.222141][ T5973] usb 3-1: Manufacturer: syz [ 193.226856][ T5973] usb 3-1: SerialNumber: syz [ 193.234732][ T5973] usb 3-1: config 0 descriptor?? [ 193.242925][ T5973] usb 3-1: selecting invalid altsetting 2 [ 193.252385][ T5954] usb 2-1: device descriptor read/64, error -71 [ 193.292520][ T5960] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 193.362770][ T5954] usb usb2-port1: attempt power cycle [ 193.442235][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 193.455558][ T7551] netlink: 'syz.3.489': attribute type 4 has an invalid length. [ 193.466422][ T5960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.475310][ T5960] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 193.483147][ T5960] usb 4-1: can't read configurations, error -71 [ 193.643295][ C1] usb 3-1: async_complete: urb error -71 [ 193.649114][ C1] usb 3-1: async_complete: urb error -71 [ 193.654855][ C1] usb 3-1: async_complete: urb error -71 [ 193.661418][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.667619][ T5973] get_1284_register: usb error -71 [ 193.673085][ T5973] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 193.686264][ T5973] usb 3-1: USB disconnect, device number 66 [ 193.702475][ T5954] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 193.732947][ T5954] usb 2-1: device descriptor read/8, error -71 [ 193.974486][ T7555] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 193.991191][ T5954] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 194.023218][ T5954] usb 2-1: device descriptor read/8, error -71 [ 194.044469][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.492'. [ 194.068068][ T7560] netlink: 'syz.0.493': attribute type 8 has an invalid length. [ 194.142493][ T5954] usb usb2-port1: unable to enumerate USB device [ 194.390252][ T30] audit: type=1800 audit(1758725023.718:11): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="bus" dev="overlay" ino=704 res=0 errno=0 [ 194.410703][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.430048][ T5873] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 194.522317][ T5960] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 194.675363][ T5960] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.686438][ T5960] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.696616][ T5960] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.705745][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.718142][ T7564] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.729937][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.737085][ T5954] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 194.897404][ T5954] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.907361][ T5954] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.921298][ T5954] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.935565][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.948690][ T5960] usb 4-1: USB disconnect, device number 66 [ 195.164984][ T5954] usb 3-1: usb_control_msg returned -32 [ 195.170648][ T5954] usbtmc 3-1:16.0: can't read capabilities [ 195.213558][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 195.232446][ T5937] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 195.382184][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 195.392700][ T7582] netlink: 'syz.0.500': attribute type 4 has an invalid length. [ 195.403673][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.412626][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 195.420242][ T5937] usb 1-1: can't read configurations, error -71 [ 195.602233][ T10] vhci_hcd: vhci_device speed not set [ 195.882275][ T5954] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 195.984030][ T7587] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 196.001315][ T7587] kvm: pic: level sensitive irq not supported [ 196.001639][ T7587] kvm: pic: non byte read [ 196.044380][ T5954] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 196.054421][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.066674][ T5954] usb 2-1: config 0 descriptor?? [ 196.481621][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 196.491166][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.503523][ T5954] usb 2-1: USB disconnect, device number 66 [ 197.192155][ T875] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 197.320499][ T7605] syz.3.508 uses old SIOCAX25GETINFO [ 197.353479][ T875] usb 1-1: Using ep0 maxpacket: 32 [ 197.366860][ T875] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 197.386947][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.416382][ T875] usb 1-1: config 0 descriptor?? [ 197.654611][ T875] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 197.687883][ T875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.722805][ T875] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 197.730076][ T875] usb 1-1: media controller created [ 197.796441][ T875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.856084][ T7595] dib0700: tx buffer length is larger than 4. Not supported. [ 197.907501][ T875] DVB: Unable to find symbol dib7000p_attach() [ 197.914833][ T875] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 197.992154][ T10] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 198.005710][ T875] rc_core: IR keymap rc-dib0700-rc5 not found [ 198.012564][ T875] Registered IR keymap rc-empty [ 198.017836][ T875] dvb-usb: could not initialize remote control. [ 198.026697][ T875] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 198.048190][ T875] usb 1-1: USB disconnect, device number 57 [ 198.124307][ T875] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 198.154757][ T10] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 198.170200][ T10] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 198.184176][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 198.194632][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.208787][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.233428][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.247125][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 198.256570][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.271372][ T10] usb 4-1: config 0 descriptor?? [ 198.493973][ T5873] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 198.503773][ T5873] Bluetooth: hci2: Injecting HCI hardware error event [ 198.513219][ T5873] Bluetooth: hci2: hardware error 0x00 [ 198.552163][ T5954] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 198.722185][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 198.730192][ T5954] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.739317][ T5954] usb 2-1: config 6 has an invalid interface number: 210 but max is 0 [ 198.747695][ T5954] usb 2-1: config 6 has no interface number 0 [ 198.755090][ T10] hid (null): report_id 2952473739 is invalid [ 198.761602][ T5954] usb 2-1: config 6 interface 210 has no altsetting 0 [ 198.762193][ T875] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 198.773180][ T10] lg-g15 0003:046D:C225.0010: report_id 2952473739 is invalid [ 198.784735][ T10] lg-g15 0003:046D:C225.0010: item 0 4 1 8 parsing failed [ 198.793013][ T10] lg-g15 0003:046D:C225.0010: probe with driver lg-g15 failed with error -22 [ 198.806874][ T5954] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=1d.40 [ 198.816724][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.824817][ T5954] usb 2-1: Product: syz [ 198.829028][ T5954] usb 2-1: Manufacturer: syz [ 198.833693][ T5954] usb 2-1: SerialNumber: syz [ 198.944554][ T875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.955651][ T875] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.965924][ T875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.975564][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.990930][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.991254][ T7628] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 199.000397][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.025614][ T10] usb 4-1: USB disconnect, device number 67 [ 199.041388][ T875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.057366][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.066749][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.097241][ T5954] ums-sddr55 2-1:6.210: USB Mass Storage device detected [ 199.180027][ T5954] usb 2-1: USB disconnect, device number 67 [ 199.268111][ T875] usb 1-1: USB disconnect, device number 58 [ 199.618933][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.632193][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.012284][ T10] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 200.164839][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.177512][ T10] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 200.186770][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.195449][ T10] usb 2-1: Product: syz [ 200.199674][ T10] usb 2-1: Manufacturer: syz [ 200.204583][ T10] usb 2-1: SerialNumber: syz [ 200.215986][ T10] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 200.334315][ T5954] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 200.492149][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 200.499686][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.512777][ T5954] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 200.521970][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.530147][ T5954] usb 1-1: Product: syz [ 200.534400][ T5954] usb 1-1: Manufacturer: syz [ 200.539042][ T5954] usb 1-1: SerialNumber: syz [ 200.547160][ T5954] usb 1-1: config 0 descriptor?? [ 200.572298][ T5873] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 200.662552][ T7580] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 200.693955][ T5954] usb 3-1: USB disconnect, device number 67 [ 200.760827][ T24] usb 1-1: USB disconnect, device number 59 [ 200.784631][ T7652] comedi: No check for data length of config insn id 1001 is implemented [ 200.793396][ T7652] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 200.806516][ T7652] comedi: Assuming n=15 is correct [ 201.092231][ T5954] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 201.226778][ T10] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 201.247665][ T10] usb 2-1: USB disconnect, device number 68 [ 201.276241][ T5954] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.290697][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.303701][ T5954] usb 3-1: Product: syz [ 201.309053][ T5954] usb 3-1: Manufacturer: syz [ 201.313773][ T5954] usb 3-1: SerialNumber: syz [ 201.702189][ T875] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 201.772348][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 201.865043][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.875420][ T875] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 201.893348][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.912226][ T10] usb 4-1: device descriptor read/64, error -71 [ 201.923367][ T875] usb 1-1: config 0 descriptor?? [ 201.957832][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 201.957898][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 201.958523][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 201.965403][ T5954] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 201.974509][ T5954] usb 3-1: USB disconnect, device number 68 [ 202.173183][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 202.312194][ T10] usb 4-1: device descriptor read/64, error -71 [ 202.423491][ T10] usb usb4-port1: attempt power cycle [ 202.436365][ T875] zydacron 0003:13EC:0006.0011: item fetching failed at offset 0/5 [ 202.445255][ T875] zydacron 0003:13EC:0006.0011: parse failed [ 202.451374][ T875] zydacron 0003:13EC:0006.0011: probe with driver zydacron failed with error -22 [ 202.639272][ T5960] usb 1-1: USB disconnect, device number 60 [ 202.773142][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 202.816268][ T10] usb 4-1: device descriptor read/8, error -71 [ 202.849889][ T7690] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 203.062396][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 203.092831][ T10] usb 4-1: device descriptor read/8, error -71 [ 203.202581][ T10] usb usb4-port1: unable to enumerate USB device [ 203.228569][ T7696] syzkaller1: entered promiscuous mode [ 203.234985][ T7696] syzkaller1: entered allmulticast mode [ 203.312208][ T5960] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 203.474062][ T5960] usb 2-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 203.485564][ T5960] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 203.498128][ T5960] usb 2-1: string descriptor 0 read error: -22 [ 203.505233][ T5960] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=97.ce [ 203.516363][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=255 [ 203.623917][ T875] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 203.697183][ T7708] netlink: 'syz.2.544': attribute type 46 has an invalid length. [ 203.705263][ T7708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.717609][ T7708] dlm: non-version read from control device 2 [ 203.740580][ T24] usb 2-1: USB disconnect, device number 69 [ 203.787208][ T875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.800212][ T875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 64 [ 203.813300][ T875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.822617][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.831548][ T875] usb 1-1: SerialNumber: syz [ 203.840974][ T7702] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.850131][ T875] cdc_acm 1-1:1.0: skipping garbage [ 203.856748][ T875] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 204.051532][ T10] usb 1-1: USB disconnect, device number 61 [ 204.222246][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 204.284067][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.298745][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.308628][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.318174][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.374056][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.384396][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.395148][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.404342][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.412471][ T24] usb 3-1: SerialNumber: syz [ 204.532232][ T875] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 204.686014][ T875] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 204.695513][ T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.704213][ T875] usb 2-1: Product: syz [ 204.708658][ T875] usb 2-1: Manufacturer: syz [ 204.713419][ T875] usb 2-1: SerialNumber: syz [ 204.721964][ T875] usb 2-1: config 0 descriptor?? [ 204.948647][ T875] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 204.960146][ T5937] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 204.968080][ T875] asix 2-1:0.0: probe with driver asix failed with error -71 [ 204.981099][ T875] usb 2-1: USB disconnect, device number 70 [ 205.123936][ T5937] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 205.132394][ T5937] usb 4-1: config 0 has no interface number 0 [ 205.138649][ T5937] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 205.149723][ T5937] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 205.159975][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.171394][ T5937] usb 4-1: config 0 descriptor?? [ 205.184072][ T5937] rndis_host 4-1:0.219: invalid descriptor buffer length [ 205.191358][ T5937] usb 4-1: bad CDC descriptors [ 205.197802][ T5937] cdc_acm 4-1:0.219: invalid descriptor buffer length [ 205.359634][ T5873] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 205.386217][ T10] usb 4-1: USB disconnect, device number 72 [ 205.496764][ T7732] Unknown options in mask b7f2 [ 205.689347][ T7741] tipc: Started in network mode [ 205.694752][ T7741] tipc: Node identity 100, cluster identity 4711 [ 205.701809][ T7741] tipc: Node number set to 256 [ 205.720672][ T7743] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 205.729537][ T7743] netlink: 'syz.1.554': attribute type 3 has an invalid length. [ 205.737515][ T7743] netlink: 224 bytes leftover after parsing attributes in process `syz.1.554'. [ 206.072264][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 206.223414][ T5937] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 206.244812][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.254153][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.265527][ T10] usb 2-1: config 0 descriptor?? [ 206.273950][ T10] cp210x 2-1:0.0: cp210x converter detected [ 206.374134][ T5937] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 206.382697][ T5937] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 206.392529][ T5973] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 206.400893][ T5937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 206.411090][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.422198][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.431987][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.445201][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 206.454378][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.466180][ T5937] usb 4-1: config 0 descriptor?? [ 206.476096][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 206.483897][ T10] cp210x 2-1:0.0: querying part number failed [ 206.495143][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 206.554889][ T5973] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.566079][ T5973] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.580651][ T5973] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.590126][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.604382][ T7760] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 206.617218][ T5973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.821669][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.833916][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.847539][ T24] usb 3-1: 0:2 : does not exist [ 206.853726][ T24] usb 3-1: unit 5: unexpected type 0x09 [ 206.883304][ T24] usb 3-1: USB disconnect, device number 69 [ 206.890404][ T5937] hid (null): report_id 2952473739 is invalid [ 206.914543][ T5937] lg-g15 0003:046D:C225.0012: report_id 2952473739 is invalid [ 206.926522][ T5937] lg-g15 0003:046D:C225.0012: item 0 4 1 8 parsing failed [ 206.944657][ T5937] lg-g15 0003:046D:C225.0012: probe with driver lg-g15 failed with error -22 [ 206.958556][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 207.052702][ T5937] usb 1-1: USB disconnect, device number 62 [ 207.109121][ T5973] usb 4-1: USB disconnect, device number 73 [ 207.272115][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 207.402193][ T24] usb 3-1: device descriptor read/64, error -71 [ 207.652256][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 207.802205][ T24] usb 3-1: device descriptor read/64, error -71 [ 207.912431][ T24] usb usb3-port1: attempt power cycle [ 207.922338][ T5973] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 208.074444][ T5973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.082878][ T5973] usb 1-1: not running at top speed; connect to a high speed hub [ 208.091854][ T5973] usb 1-1: config 13 has an invalid interface number: 104 but max is 0 [ 208.100580][ T5973] usb 1-1: config 13 has no interface number 0 [ 208.107066][ T5973] usb 1-1: config 13 interface 104 has no altsetting 0 [ 208.116285][ T5973] usb 1-1: New USB device found, idVendor=8545, idProduct=1368, bcdDevice=64.5f [ 208.125876][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.135124][ T5973] usb 1-1: Product: syz [ 208.139338][ T5973] usb 1-1: Manufacturer: syz [ 208.144034][ T5973] usb 1-1: SerialNumber: syz [ 208.252171][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 208.273482][ T24] usb 3-1: device descriptor read/8, error -71 [ 208.355034][ T7767] tmpfs: Unknown parameter 'ÿ' [ 208.383256][ T5973] usb 1-1: USB disconnect, device number 63 [ 208.522173][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 208.543042][ T24] usb 3-1: device descriptor read/8, error -71 [ 208.627751][ T30] audit: type=1400 audit(1758725037.958:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2ACA2660F7D9F5445CB3DFCC5109DA7D169150C0264B46D5063F74FF5CD8CE23FC3A503E8D48D5 pid=7773 comm="syz.3.567" [ 208.662469][ T24] usb usb3-port1: unable to enumerate USB device [ 208.855128][ T5973] usb 2-1: USB disconnect, device number 71 [ 208.893045][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.906954][ T5973] cp210x 2-1:0.0: device disconnected [ 209.222177][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 209.312343][ T5973] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 209.384046][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.395350][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.401993][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 209.411126][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.429545][ T10] usb 1-1: config 0 descriptor?? [ 209.467595][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.480135][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.490742][ T5973] usb 2-1: New USB device found, idVendor=d77d, idProduct=2c4e, bcdDevice= 0.00 [ 209.492432][ T5960] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 209.500909][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.519440][ T5973] usb 2-1: config 0 descriptor?? [ 209.530721][ T5973] usbhid 2-1:0.0: can't add hid device: -22 [ 209.537257][ T5973] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 209.662198][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 209.670455][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.683141][ T5960] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.692796][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.700856][ T5960] usb 4-1: Product: syz [ 209.705336][ T5960] usb 4-1: Manufacturer: syz [ 209.709998][ T5960] usb 4-1: SerialNumber: syz [ 209.717552][ T5960] usb 4-1: config 0 descriptor?? [ 209.726265][ T5960] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.735681][ T5960] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 209.805960][ T5921] usb 2-1: USB disconnect, device number 72 [ 209.889565][ T10] hid-corsair-void 0003:1B1C:0A1F.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1f] on usb-dummy_hcd.0-1/input0 [ 210.149866][ T5959] hid-corsair-void 0003:1B1C:0A1F.0013: failed to request battery (reason: -71) [ 210.161290][ T5954] hid-corsair-void 0003:1B1C:0A1F.0013: failed to request firmware (reason: -71) [ 210.202649][ T5954] usb 1-1: USB disconnect, device number 64 [ 210.330725][ T5960] em28xx 4-1:0.0: chip ID is em2874 [ 210.472342][ T5921] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 210.635533][ T5921] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 210.644163][ T5921] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 210.653144][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 210.662499][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.673585][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.683437][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.698839][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 210.708188][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.723256][ T5921] usb 3-1: config 0 descriptor?? [ 210.752194][ T5973] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 210.892308][ T5973] usb 2-1: device descriptor read/64, error -71 [ 210.948146][ T5960] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 210.956429][ T5960] em28xx 4-1:0.0: board has no eeprom [ 211.022179][ T5960] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 211.030226][ T5960] em28xx 4-1:0.0: dvb set to bulk mode. [ 211.035947][ T10] em28xx 4-1:0.0: Binding DVB extension [ 211.048263][ T5960] usb 4-1: USB disconnect, device number 74 [ 211.055806][ T5960] em28xx 4-1:0.0: Disconnecting em28xx [ 211.111311][ T10] em28xx 4-1:0.0: Registering input extension [ 211.133420][ T5973] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 211.151917][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 211.161646][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.173004][ T5921] usb 3-1: USB disconnect, device number 74 [ 211.195601][ T10] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 211.202682][ T10] Registered IR keymap rc-empty [ 211.210301][ T10] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 211.223180][ T10] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 211.238362][ T10] em28xx 4-1:0.0: Input extension successfully initialized [ 211.245874][ T5960] em28xx 4-1:0.0: Closing input extension [ 211.270951][ T5960] em28xx 4-1:0.0: Freeing device [ 211.282222][ T5973] usb 2-1: device descriptor read/64, error -71 [ 211.374744][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.384747][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.402534][ T5973] usb usb2-port1: attempt power cycle [ 211.612628][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 211.742261][ T5973] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 211.762217][ T10] usb 1-1: device descriptor read/64, error -71 [ 211.764365][ T5973] usb 2-1: device descriptor read/8, error -71 [ 211.802212][ T5960] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 211.975279][ T5960] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 211.983385][ T5960] usb 4-1: config 1 has no interface number 0 [ 211.989516][ T5960] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 1144, setting to 1024 [ 212.000531][ T5960] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 212.010641][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 212.012314][ T5973] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 212.018295][ T5960] usb 4-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 212.037580][ T5960] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 212.042908][ T5973] usb 2-1: device descriptor read/8, error -71 [ 212.053473][ T5960] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 212.064413][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.072635][ T5960] usb 4-1: Product: syz [ 212.076880][ T5960] usb 4-1: Manufacturer: syz [ 212.081584][ T5960] usb 4-1: SerialNumber: syz [ 212.090392][ T7805] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 212.098048][ T7805] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 212.110427][ T5960] usb 4-1: Expected 3 endpoints, found: 2 [ 212.162906][ T5973] usb usb2-port1: unable to enumerate USB device [ 212.172381][ T10] usb 1-1: device descriptor read/64, error -71 [ 212.282969][ T10] usb usb1-port1: attempt power cycle [ 212.314005][ T5960] usb 4-1: USB disconnect, device number 75 [ 212.622115][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 212.645585][ T10] usb 1-1: device descriptor read/8, error -71 [ 212.884736][ T5973] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 212.892824][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 212.912786][ T10] usb 1-1: device descriptor read/8, error -71 [ 213.032369][ T10] usb usb1-port1: unable to enumerate USB device [ 213.065263][ T5973] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.079067][ T5973] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.089896][ T5973] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.100242][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.123966][ T7813] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 213.143474][ T5973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.351952][ T10] usb 3-1: USB disconnect, device number 75 [ 213.620251][ T7824] trusted_key: encrypted_key: insufficient parameters specified [ 213.902274][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 213.942248][ T5973] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 214.052281][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 214.059194][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.073109][ T10] usb 2-1: string descriptor 0 read error: -22 [ 214.079780][ T10] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 214.089037][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.094649][ T5973] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.138456][ T5973] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.154676][ T5973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.161459][ T5973] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.175566][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.187106][ T5973] usb 4-1: config 0 descriptor?? [ 214.305827][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 214.402244][ T5960] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 214.555957][ T5960] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 214.565049][ T5960] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 214.575810][ T5960] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 214.585702][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.597271][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.612140][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.627198][ T5960] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 214.636844][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.648409][ T5960] usb 3-1: config 0 descriptor?? [ 214.728647][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.741336][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 214.752504][ T10] asix 2-1:7.0: probe with driver asix failed with error -71 [ 214.764059][ T10] usb 2-1: USB disconnect, device number 77 [ 214.782322][ T5921] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 214.797972][ T5973] usb 4-1: string descriptor 0 read error: -22 [ 214.952255][ T5921] usb 1-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 214.978422][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.001453][ T5921] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 215.016126][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.016158][ T5921] usb 1-1: Product: syz [ 215.016176][ T5921] usb 1-1: Manufacturer: syz [ 215.016193][ T5921] usb 1-1: SerialNumber: syz [ 215.019990][ T5973] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input18 [ 215.072715][ T5960] usbhid 3-1:0.0: can't add hid device: -71 [ 215.080874][ T5960] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.083184][ T5921] usb 1-1: config 0 descriptor?? [ 215.093981][ T5960] usb 3-1: USB disconnect, device number 76 [ 215.134057][ T5921] usb-storage 1-1:0.0: USB Mass Storage device detected [ 215.155915][ T5921] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 215.199795][ T5973] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input19 [ 215.204513][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.238501][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.253965][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.275662][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.290363][ T5973] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input20 [ 215.302216][ T5954] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 215.350087][ T5960] usb 1-1: USB disconnect, device number 69 [ 215.407844][ T5973] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input21 [ 215.482938][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 215.495797][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.510909][ T5954] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.520648][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.556203][ T5954] usb 2-1: config 0 descriptor?? [ 215.582966][ T5973] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 215.672610][ T5973] usb 4-1: USB disconnect, device number 76 [ 215.746302][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.594'. [ 215.795812][ T7860] fido_id[7860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 215.980411][ T5954] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 216.132230][ T5960] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 216.293866][ T5960] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.304972][ T5960] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.315192][ T5960] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.324802][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.337235][ T7866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.344902][ T5973] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 216.358430][ T5960] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.362275][ T5937] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 216.382207][ T5921] usb 2-1: USB disconnect, device number 78 [ 216.506624][ T5973] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 216.515782][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.524211][ T5973] usb 4-1: Product: syz [ 216.529753][ T5973] usb 4-1: Manufacturer: syz [ 216.534920][ T5973] usb 4-1: SerialNumber: syz [ 216.539708][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.551996][ T5937] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 216.561701][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.572985][ T5973] usb 4-1: config 0 descriptor?? [ 216.585828][ T5973] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 216.596441][ T5937] usb 1-1: config 0 descriptor?? [ 216.666872][ T5960] usb 3-1: USB disconnect, device number 77 [ 216.964459][ T7879] JFS: discard option not supported on device [ 216.973560][ T7879] Mount JFS Failure: -22 [ 216.977863][ T7879] jfs_mount failed w/return code = -22 [ 217.014870][ T5937] thrustmaster 0003:044F:B654.0016: item fetching failed at offset 6/7 [ 217.029316][ T5937] thrustmaster 0003:044F:B654.0016: parse failed [ 217.036483][ T5937] thrustmaster 0003:044F:B654.0016: probe with driver thrustmaster failed with error -22 [ 217.048410][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.061228][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.127124][ T7867] delete_channel: no stack [ 217.134775][ T5973] gspca_sunplus: reg_r err -71 [ 217.148093][ T5973] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 217.168649][ T5973] usb 4-1: USB disconnect, device number 77 [ 217.212281][ T5960] usb 1-1: USB disconnect, device number 70 [ 217.498479][ T1113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.605500][ T1113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.703449][ T1113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.722174][ T30] audit: type=1326 audit(1758725047.048:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.2.605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e8778eec9 code=0x0 [ 217.853945][ T1113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.090529][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.100618][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.110788][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.120264][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.123469][ T1113] bridge_slave_1: left allmulticast mode [ 218.128399][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.136852][ T1113] bridge_slave_1: left promiscuous mode [ 218.146390][ T5960] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 218.159796][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.174984][ T1113] bridge_slave_0: left allmulticast mode [ 218.180654][ T1113] bridge_slave_0: left promiscuous mode [ 218.186655][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.312189][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 218.323794][ T5960] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 218.335982][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.344858][ T5960] usb 4-1: Product: syz [ 218.349205][ T5960] usb 4-1: Manufacturer: syz [ 218.355008][ T5960] usb 4-1: SerialNumber: syz [ 218.369420][ T5960] usb 4-1: config 0 descriptor?? [ 218.389638][ T5960] as10x_usb: device has been detected [ 218.396330][ T5960] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 218.421817][ T5960] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 218.469395][ T5960] as10x_usb: error during firmware upload part1 [ 218.477387][ T5960] Registered device Sky IT Digital Key (green led) [ 218.588853][ T5960] usb 4-1: USB disconnect, device number 78 [ 218.659312][ T5960] Unregistered device Sky IT Digital Key (green led) [ 218.666845][ T5960] as10x_usb: device has been disconnected [ 219.020264][ T1113] hsr_slave_0: left promiscuous mode [ 219.053218][ T1113] hsr_slave_1: left promiscuous mode [ 219.069213][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.077158][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.099226][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.117649][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.186692][ T1113] veth1_macvtap: left promiscuous mode [ 219.194183][ T1113] veth0_macvtap: left promiscuous mode [ 219.199984][ T1113] veth1_vlan: left promiscuous mode [ 219.212986][ T1113] veth0_vlan: left promiscuous mode [ 219.214336][ T7917] syz.3.612 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 219.333698][ T5959] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 219.507135][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.518306][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.528625][ T5959] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 219.538953][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.543333][ T5973] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 219.563546][ T5959] usb 3-1: config 0 descriptor?? [ 219.782994][ T5959] hid_parser_main: 53 callbacks suppressed [ 219.783017][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.796854][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.804604][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.812214][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.819652][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.827261][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.835513][ T5959] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0 [ 219.850854][ T5959] steelseries 0003:1038:12B6.0017: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 219.874810][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 219.926070][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 219.975948][ T7924] netlink: 48 bytes leftover after parsing attributes in process `syz.2.611'. [ 220.175018][ T5868] Bluetooth: hci1: command tx timeout [ 220.436249][ T5960] usb 3-1: USB disconnect, device number 78 [ 220.545829][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 220.951288][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.993194][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.001004][ T7894] bridge_slave_0: entered allmulticast mode [ 221.010741][ T7894] bridge_slave_0: entered promiscuous mode [ 221.033013][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.048565][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.063609][ T7894] bridge_slave_1: entered allmulticast mode [ 221.084158][ T7894] bridge_slave_1: entered promiscuous mode [ 221.162697][ T5868] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 221.171884][ T5868] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 221.215798][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 221.295842][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.316536][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.388401][ T7894] team0: Port device team_slave_0 added [ 221.407693][ T7894] team0: Port device team_slave_1 added [ 221.477827][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.486175][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.512998][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.527577][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.536696][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.563895][ T5937] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 221.565067][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.627798][ T7894] hsr_slave_0: entered promiscuous mode [ 221.635100][ T7894] hsr_slave_1: entered promiscuous mode [ 221.641569][ T7894] debugfs: 'hsr0' already exists in 'hsr' [ 221.648533][ T7894] Cannot create hsr debugfs directory [ 221.702213][ T5973] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 221.724693][ T5937] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 221.746482][ T5937] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 221.774595][ T5937] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 221.796140][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.833215][ T7956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.872869][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 221.883768][ T5973] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 221.896285][ T5973] usb 1-1: config 0 has no interface number 0 [ 221.911290][ T5973] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 221.940766][ T5973] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 221.950241][ T5973] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 221.971933][ T5973] usb 1-1: Product: syz [ 221.982220][ T5973] usb 1-1: Manufacturer: syz [ 221.986920][ T5973] usb 1-1: SerialNumber: syz [ 222.015885][ T5973] usb 1-1: config 0 descriptor?? [ 222.035463][ T7970] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.090886][ T5960] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 222.123214][ T7894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.140312][ T7894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.149771][ T5937] usb 3-1: string descriptor 0 read error: -71 [ 222.170027][ T5937] hub 3-1:32.0: USB hub found [ 222.171927][ T7894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.195238][ T7894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.195886][ T5937] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 222.254774][ T5868] Bluetooth: hci1: command tx timeout [ 222.266968][ T5973] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 222.269767][ T5960] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.299161][ T5960] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.322183][ T5960] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.331498][ T5973] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 222.350888][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.366473][ T5937] usb 3-1: USB disconnect, device number 79 [ 222.393631][ T5973] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 222.425963][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.439985][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.441245][ T5973] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 222.455560][ T5960] usb 4-1: invalid MIDI out EP 0 [ 222.490749][ T5973] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 222.508619][ T5973] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 222.539186][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.551909][ T5973] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 222.582685][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.589945][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.627971][ T5973] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 222.628254][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.646837][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.659267][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.668449][ T5960] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 222.679751][ T5973] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 222.689653][ T5973] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 222.742468][ T5973] usb 1-1: USB disconnect, device number 71 [ 222.784112][ T7894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.795670][ T5973] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 222.849274][ T5973] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 222.894468][ T5973] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 222.924414][ T5973] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 222.954335][ T5973] keyspan 1-1:0.107: device disconnected [ 223.083132][ T5960] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 223.197927][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.246623][ T5960] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 223.267472][ T5960] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 223.292741][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.315149][ T5960] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 223.599969][ T7894] veth0_vlan: entered promiscuous mode [ 223.623018][ T7894] veth1_vlan: entered promiscuous mode [ 223.675481][ T7894] veth0_macvtap: entered promiscuous mode [ 223.689339][ T7894] veth1_macvtap: entered promiscuous mode [ 223.725287][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.747276][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.769291][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.778309][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.791336][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.810251][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.947434][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.962400][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.004512][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.027832][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.096172][ T8031] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 224.132211][ T8031] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.624'. [ 224.215222][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.233061][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.332563][ T5868] Bluetooth: hci1: command tx timeout [ 224.340715][ T5960] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 224.349561][ T5960] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 224.359087][ T5960] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 224.560205][ T5960] usb 3-1: USB disconnect, device number 80 [ 224.652571][ T5937] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 224.803856][ T5937] usb 1-1: config 4 has an invalid interface number: 88 but max is 1 [ 224.813877][ T5937] usb 1-1: config 4 has an invalid interface number: 29 but max is 1 [ 224.823612][ T5937] usb 1-1: config 4 has no interface number 0 [ 224.829757][ T5937] usb 1-1: config 4 has no interface number 1 [ 224.836479][ T5937] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 224.849018][ T5937] usb 1-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 2, skipping [ 224.861711][ T5937] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.875613][ T5960] usb 4-1: USB disconnect, device number 80 [ 224.881841][ T5937] usb 1-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 224.901667][ T5937] usb 1-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 224.914980][ T5937] usb 1-1: config 4 interface 88 has no altsetting 0 [ 224.931026][ T5937] usb 1-1: config 4 interface 29 has no altsetting 0 [ 224.947436][ T5937] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 224.966817][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.976545][ T5937] usb 1-1: Product: syz [ 224.980846][ T5937] usb 1-1: Manufacturer: syz [ 224.986735][ T5937] usb 1-1: SerialNumber: syz [ 225.067608][ T8045] sctp: [Deprecated]: syz.3.626 (pid 8045) Use of int in max_burst socket option. [ 225.067608][ T8045] Use struct sctp_assoc_value instead [ 225.171690][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 225.187087][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 225.210913][ T8041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.625'. [ 225.228031][ T5873] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 225.241263][ T5873] Bluetooth: hci3: Injecting HCI hardware error event [ 225.252552][ T5873] Bluetooth: hci3: hardware error 0x00 [ 225.269124][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.310606][ T8054] netlink: 'syz.2.629': attribute type 27 has an invalid length. [ 225.325930][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 225.346371][ T8041] bridge_slave_0 (unregistering): left allmulticast mode [ 225.353914][ T8041] bridge_slave_0 (unregistering): left promiscuous mode [ 225.360986][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.368413][ T5973] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 225.481096][ T5937] usb 1-1: USB disconnect, device number 72 [ 225.504491][ T5973] usb 4-1: device descriptor read/64, error -71 [ 225.568246][ T8059] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 225.580924][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'. [ 225.600423][ T8059] netdevsim netdevsim2: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 225.762256][ T5973] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 225.902231][ T5973] usb 4-1: device descriptor read/64, error -71 [ 225.992188][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.015994][ T5973] usb usb4-port1: attempt power cycle [ 226.142199][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 226.150161][ T5937] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.166598][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.173693][ T5937] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 226.192102][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.206509][ T5937] usb 5-1: config 0 descriptor?? [ 226.362443][ T5973] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 226.385812][ T5973] usb 4-1: device descriptor read/8, error -71 [ 226.414589][ T5868] Bluetooth: hci1: command tx timeout [ 226.642210][ T5973] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 226.672846][ T5973] usb 4-1: device descriptor read/8, error -71 [ 226.752248][ T5921] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 226.790753][ T5973] usb usb4-port1: unable to enumerate USB device [ 226.914347][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.942100][ T5921] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.961603][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.982105][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.995541][ T8082] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 227.012716][ T5937] usbhid 5-1:0.0: can't add hid device: -71 [ 227.018804][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 227.031552][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.044519][ T5937] usb 5-1: USB disconnect, device number 2 [ 227.235291][ T10] usb 3-1: USB disconnect, device number 81 [ 227.292844][ T5873] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 227.462322][ T5959] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 227.619144][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.625564][ T8093] mmap: syz.4.640 (8093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.635333][ T5959] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 227.655571][ T5959] usb 1-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=56.29 [ 227.665120][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.673667][ T5959] usb 1-1: Product: syz [ 227.678301][ T5959] usb 1-1: Manufacturer: syz [ 227.692273][ T5959] usb 1-1: SerialNumber: syz [ 227.919402][ T5959] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.939490][ T5959] snd-usb-audio 1-1:10.0: probe with driver snd-usb-audio failed with error -2 [ 227.952848][ T5959] usb 1-1: USB disconnect, device number 73 [ 227.972169][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.001959][ T7871] udevd[7871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.118793][ T8098] XFS (nbd3): SB validate failed with error -5. [ 228.152517][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 228.162616][ T5921] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 228.172238][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.188422][ T5921] usb 5-1: config 0 descriptor?? [ 228.209837][ T5921] as10x_usb: device has been detected [ 228.219057][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 228.266008][ T5921] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 228.288326][ T5921] as10x_usb: error during firmware upload part1 [ 228.295696][ T5921] Registered device nBox DVB-T Dongle [ 228.332376][ T5960] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 228.405284][ T5921] usb 5-1: USB disconnect, device number 3 [ 228.432330][ T5921] Unregistered device nBox DVB-T Dongle [ 228.434149][ T5921] as10x_usb: device has been disconnected [ 228.472776][ T5960] usb 3-1: device descriptor read/64, error -71 [ 228.532375][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 228.568365][ T8113] kvm: MWAIT instruction emulated as NOP! [ 228.692207][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 228.699790][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.713243][ T5960] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 228.721013][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.731549][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.745075][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.754324][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.764420][ T10] usb 4-1: config 0 descriptor?? [ 228.872206][ T5960] usb 3-1: device descriptor read/64, error -71 [ 228.902137][ T5921] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 228.983715][ T5960] usb usb3-port1: attempt power cycle [ 229.058257][ T5921] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 229.069585][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.080647][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 229.095238][ T5921] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 229.104846][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.115740][ T5921] usb 1-1: config 0 descriptor?? [ 229.122874][ T8116] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 229.182330][ T10] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 229.194217][ T10] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 229.204826][ T10] microsoft 0003:045E:07DA.0018: implement() called with n (152) > 32! (kworker/0:1) [ 229.222191][ T875] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 229.322214][ T5960] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 229.336590][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.345925][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.347651][ T5960] usb 3-1: device descriptor read/8, error -71 [ 229.388842][ T10] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 229.390539][ T875] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 229.400770][ T10] microsoft 0003:045E:07DA.0018: no inputs found [ 229.416894][ T10] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 229.426233][ T875] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 229.426270][ T875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 229.426344][ T875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.426373][ T875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.426397][ T875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.426460][ T875] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 229.470443][ T10] usb 4-1: USB disconnect, device number 85 [ 229.487631][ T875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.506717][ T875] usb 5-1: config 0 descriptor?? [ 229.549117][ T8120] fido_id[8120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 229.571320][ T5921] wacom 0003:056A:0039.0019: unknown main item tag 0x3 [ 229.589535][ T5921] wacom 0003:056A:0039.0019: unbalanced collection at end of report description [ 229.599933][ T5921] wacom 0003:056A:0039.0019: parse failed [ 229.605946][ T5921] wacom 0003:056A:0039.0019: probe with driver wacom failed with error -22 [ 229.622244][ T5960] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 229.642990][ T5960] usb 3-1: device descriptor read/8, error -71 [ 229.754215][ T5960] usb usb3-port1: unable to enumerate USB device [ 229.768121][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.778071][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.789157][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.798715][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.808415][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 229.817893][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 229.919573][ T875] hid (null): report_id 2952473739 is invalid [ 229.931306][ T875] lg-g15 0003:046D:C225.001A: report_id 2952473739 is invalid [ 229.945101][ T875] lg-g15 0003:046D:C225.001A: item 0 4 1 8 parsing failed [ 229.953897][ T875] lg-g15 0003:046D:C225.001A: probe with driver lg-g15 failed with error -22 [ 230.037955][ T8126] syzkaller1: entered promiscuous mode [ 230.044772][ T8126] syzkaller1: entered allmulticast mode [ 230.145088][ T5960] usb 5-1: USB disconnect, device number 4 [ 230.180542][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.191568][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.402255][ T875] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 230.555334][ T875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.566480][ T875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.577304][ T875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.586568][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.599032][ T8128] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 230.609803][ T875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.814614][ T5921] usb 4-1: USB disconnect, device number 86 [ 231.021698][ T8145] fuse: Unknown parameter 'gpoup [ 231.021698][ T8145] id' [ 231.382214][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.532292][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 231.532292][ T5921] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 231.564724][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 231.580148][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.595221][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.604611][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.614076][ T10] usb 5-1: Product: syz [ 231.618291][ T10] usb 5-1: Manufacturer: syz [ 231.624837][ T10] usb 5-1: SerialNumber: syz [ 231.637100][ T10] usb 5-1: config 0 descriptor?? [ 231.652872][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.663910][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 231.693858][ T5921] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 231.702296][ T5921] usb 3-1: config 0 has no interface number 0 [ 231.708541][ T5921] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 231.723381][ T5921] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 231.733357][ T875] usb 1-1: USB disconnect, device number 74 [ 231.743116][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.751240][ T5921] usb 3-1: Product: syz [ 231.764474][ T5921] usb 3-1: Manufacturer: syz [ 231.774611][ T5921] usb 3-1: SerialNumber: syz [ 231.787074][ T5921] usb 3-1: config 0 descriptor?? [ 231.799663][ T8151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.812121][ T5921] usb-storage 3-1:0.20: USB Mass Storage device detected [ 231.822992][ T5921] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 231.922146][ T9] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 232.016635][ T5921] scsi host1: usb-storage 3-1:0.20 [ 232.085004][ T9] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 232.095037][ T9] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 232.105181][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 232.112328][ T875] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 232.114870][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 232.128076][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.139152][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.149187][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.162216][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 232.171477][ T10] em28xx 5-1:0.0: Config register raw data: 0x8e [ 232.178818][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.193777][ T9] usb 4-1: config 0 descriptor?? [ 232.220167][ T10] usb 3-1: USB disconnect, device number 86 [ 232.272185][ T875] usb 1-1: Using ep0 maxpacket: 16 [ 232.279604][ T875] usb 1-1: config 1 has an invalid interface number: 223 but max is 0 [ 232.290480][ T875] usb 1-1: config 1 has no interface number 0 [ 232.298729][ T875] usb 1-1: config 1 interface 223 has no altsetting 0 [ 232.309122][ T875] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=2b.4a [ 232.319039][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.327133][ T875] usb 1-1: Product: syz [ 232.331334][ T875] usb 1-1: Manufacturer: syz [ 232.336097][ T875] usb 1-1: SerialNumber: syz [ 232.558339][ T875] usb 1-1: can't set first interface for hiFace device. [ 232.565647][ T875] snd-usb-hiface 1-1:1.223: probe with driver snd-usb-hiface failed with error -5 [ 232.582368][ T875] usb 1-1: USB disconnect, device number 75 [ 232.617329][ T9] hid (null): report_id 2952473739 is invalid [ 232.628237][ T9] lg-g15 0003:046D:C225.001B: report_id 2952473739 is invalid [ 232.637300][ T9] lg-g15 0003:046D:C225.001B: item 0 4 1 8 parsing failed [ 232.645772][ T9] lg-g15 0003:046D:C225.001B: probe with driver lg-g15 failed with error -22 [ 232.804332][ T8164] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 232.814918][ T8164] netlink: 'syz.2.662': attribute type 2 has an invalid length. [ 232.821397][ T875] usb 4-1: USB disconnect, device number 87 [ 232.858014][ T5960] usb 5-1: USB disconnect, device number 5 [ 232.880544][ T5960] em28xx 5-1:0.0: Disconnecting em28xx [ 232.918477][ T5960] em28xx 5-1:0.0: Freeing device [ 233.000305][ T8171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.011123][ T8171] cgroup: release_agent respecified [ 233.212260][ T5960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 233.322150][ T875] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 233.372205][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 233.380708][ T5960] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.393251][ T5960] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.403959][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.410670][ T5960] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 233.420626][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.430508][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 233.442641][ T5960] usb 5-1: config 0 descriptor?? [ 233.482202][ T875] usb 3-1: Using ep0 maxpacket: 8 [ 233.489720][ T875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.500784][ T875] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.510078][ T875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.525248][ T875] usb 3-1: config 0 descriptor?? [ 233.585884][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.597186][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.607535][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.617491][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.633958][ T8177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 233.646111][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.722191][ T5921] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 233.744074][ T875] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 233.847056][ T9] usb 1-1: USB disconnect, device number 76 [ 233.861508][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.873067][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.896204][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 233.908988][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.925023][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 233.944531][ T5960] usbhid 5-1:0.0: can't add hid device: -71 [ 233.951037][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 233.957239][ T5960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.990609][ T5960] usb 5-1: USB disconnect, device number 6 [ 234.000014][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 234.018547][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 234.035171][ T5921] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 234.046466][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 234.082107][ T5921] usb 4-1: Product: syz [ 234.086377][ T5921] usb 4-1: Manufacturer: syz [ 234.091036][ T5921] usb 4-1: SerialNumber: syz [ 234.100124][ T5921] usb 4-1: config 0 descriptor?? [ 234.303429][ T8192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.665'. [ 234.323232][ T5921] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 234.330296][ T5921] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 234.342198][ T5960] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 234.506471][ T5960] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 234.515244][ T5960] usb 5-1: config 0 has no interface number 0 [ 234.521688][ T5960] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 234.533366][ T5960] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 234.558192][ T5921] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 234.562119][ T5960] usb 5-1: config 0 interface 153 has no altsetting 0 [ 234.579989][ T5960] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 234.582486][ T5921] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 234.590142][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.610283][ T5960] usb 5-1: Product: syz [ 234.629213][ T5921] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 234.634554][ T5960] usb 5-1: Manufacturer: syz [ 234.655816][ T5960] usb 5-1: SerialNumber: syz [ 234.677881][ T5960] usb 5-1: config 0 descriptor?? [ 234.691874][ T5960] hub 5-1:0.153: bad descriptor, ignoring hub [ 234.701727][ T5960] hub 5-1:0.153: probe with driver hub failed with error -5 [ 234.714641][ T5960] sierra 5-1:0.153: Sierra USB modem converter detected [ 234.767292][ T5921] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 234.924403][ T5960] usb 5-1: USB disconnect, device number 7 [ 234.943414][ T5960] sierra 5-1:0.153: device disconnected [ 234.952214][ T5973] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 235.116791][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 235.126082][ T5973] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 235.139661][ T5973] usb 1-1: config 0 has no interface number 0 [ 235.150391][ T5973] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 235.160222][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.171067][ T5973] usb 1-1: Product: syz [ 235.176642][ T5973] usb 1-1: Manufacturer: syz [ 235.189889][ T5973] usb 1-1: SerialNumber: syz [ 235.206488][ T5973] usb 1-1: config 0 descriptor?? [ 235.251925][ T5921] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 235.266626][ T5921] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 235.283089][ T5921] usb 4-1: USB disconnect, device number 88 [ 235.420671][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.430739][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.464944][ T5973] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 235.487037][ T5973] uvcvideo 1-1:0.105: No valid video chain found. [ 235.510682][ T5973] usb 1-1: USB disconnect, device number 77 [ 235.736770][ T8231] input: syz1 as /devices/virtual/input/input22 [ 236.148511][ T5960] usb 3-1: USB disconnect, device number 87 [ 236.255518][ T8250] misc userio: Begin command sent, but we're already running [ 236.260640][ T8252] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 236.271166][ T8252] netlink: 55 bytes leftover after parsing attributes in process `syz.2.679'. [ 236.302188][ T10] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 236.485210][ T10] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 236.497373][ T10] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 236.506888][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 236.516024][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.527161][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.537058][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.561567][ T5921] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 236.579539][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 236.598969][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.639629][ T10] usb 1-1: config 0 descriptor?? [ 236.712163][ T5921] usb 5-1: device descriptor read/64, error -71 [ 236.952123][ T5921] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 237.065074][ T10] hid (null): report_id 2952473739 is invalid [ 237.076009][ T10] lg-g15 0003:046D:C225.001C: report_id 2952473739 is invalid [ 237.092202][ T5921] usb 5-1: device descriptor read/64, error -71 [ 237.135862][ T10] lg-g15 0003:046D:C225.001C: item 0 4 1 8 parsing failed [ 237.153245][ T10] lg-g15 0003:046D:C225.001C: probe with driver lg-g15 failed with error -22 [ 237.213606][ T5921] usb usb5-port1: attempt power cycle [ 237.275605][ T10] usb 1-1: USB disconnect, device number 78 [ 237.558064][ T8295] delete_channel: no stack [ 237.582676][ T5921] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 237.613038][ T5921] usb 5-1: device descriptor read/8, error -71 [ 237.863004][ T5973] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 237.870821][ T5921] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 237.892981][ T5921] usb 5-1: device descriptor read/8, error -71 [ 238.003054][ T5921] usb usb5-port1: unable to enumerate USB device [ 238.024243][ T5973] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 238.033563][ T5973] usb 4-1: config 0 has no interface number 0 [ 238.046120][ T5973] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 238.055745][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.064069][ T5973] usb 4-1: Product: syz [ 238.068358][ T5973] usb 4-1: Manufacturer: syz [ 238.073129][ T5973] usb 4-1: SerialNumber: syz [ 238.083937][ T5973] usb 4-1: config 0 descriptor?? [ 238.297437][ T5973] dvb-usb: found a 'DiBcom STK7700P reference design' in cold state, will try to load a firmware [ 238.349632][ T5973] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 238.358529][ T5973] dib0700: firmware download failed at 7 with -22 [ 238.412158][ T5921] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 238.555065][ T5921] usb 1-1: device descriptor read/64, error -71 [ 238.702267][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 238.792181][ T5921] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 238.852168][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 238.858909][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.867357][ T10] usb 3-1: config 179 has no interface number 0 [ 238.873727][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 238.884892][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 238.897356][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.910571][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 238.923396][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.936758][ T5921] usb 1-1: device descriptor read/64, error -71 [ 238.943602][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 238.953159][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.965163][ T8325] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 239.052795][ T5921] usb usb1-port1: attempt power cycle [ 239.087478][ T5973] usb 4-1: USB disconnect, device number 89 [ 239.204769][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input24 [ 239.400873][ T875] usb 3-1: USB disconnect, device number 88 [ 239.400910][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 239.415782][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 239.422245][ T5921] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 239.466700][ T5921] usb 1-1: device descriptor read/8, error -71 [ 239.732177][ T5921] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 239.762812][ T5921] usb 1-1: device descriptor read/8, error -71 [ 239.872808][ T10] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 239.882504][ T5921] usb usb1-port1: unable to enumerate USB device [ 239.998975][ T8339] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 240.010592][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.019165][ T8339] bridge_slave_1: left allmulticast mode [ 240.026932][ T8339] bridge_slave_1: left promiscuous mode [ 240.035103][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.042740][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.062279][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 240.071423][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 240.098833][ T8339] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 240.108262][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.131203][ T10] usb 4-1: config 0 descriptor?? [ 240.348429][ T875] usb 4-1: USB disconnect, device number 90 [ 240.552124][ T5921] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 240.693619][ T5921] usb 3-1: device descriptor read/64, error -71 [ 240.942351][ T5921] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 241.072152][ T5921] usb 3-1: device descriptor read/64, error -71 [ 241.183884][ T5921] usb usb3-port1: attempt power cycle [ 241.350274][ T8374] netlink: 'syz.4.715': attribute type 25 has an invalid length. [ 241.552323][ T5921] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 241.584185][ T5921] usb 3-1: device descriptor read/8, error -71 [ 241.824350][ T5921] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 241.864693][ T5921] usb 3-1: device descriptor read/8, error -71 [ 242.006555][ T5921] usb usb3-port1: unable to enumerate USB device [ 243.032220][ T5921] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 243.184216][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.194468][ T5921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 243.203518][ T5921] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 243.212857][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.223557][ T5921] usb 5-1: config 0 descriptor?? [ 243.455870][ T9] usb 5-1: USB disconnect, device number 12 [ 243.501741][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 243.562345][ T5959] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 243.668287][ T8463] syzkaller1: entered promiscuous mode [ 243.674162][ T8463] syzkaller1: entered allmulticast mode [ 243.725010][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.736118][ T5959] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 243.745372][ T5959] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 243.754577][ T5960] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 243.762321][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.774373][ T5959] usb 1-1: config 0 descriptor?? [ 243.879543][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 243.933606][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.951372][ T5960] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 243.964998][ T5960] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 243.995866][ T5959] usb 1-1: USB disconnect, device number 83 [ 244.003037][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.032900][ T5960] usb 3-1: config 0 descriptor?? [ 244.269825][ T9] usb 3-1: USB disconnect, device number 93 [ 244.463226][ T5921] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.622106][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 244.631088][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.644651][ T5921] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 244.656216][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.664701][ T5921] usb 5-1: Product: syz [ 244.669512][ T5921] usb 5-1: Manufacturer: syz [ 244.674726][ T5921] usb 5-1: SerialNumber: syz [ 244.684534][ T5921] usb 5-1: config 0 descriptor?? [ 244.699134][ T5921] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 244.900386][ T5921] usb 5-1: USB disconnect, device number 13 [ 245.064901][ T8494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 245.078844][ T8494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 245.559415][ T8504] netlink: 288 bytes leftover after parsing attributes in process `syz.4.759'. [ 245.613246][ T8506] netlink: 288 bytes leftover after parsing attributes in process `syz.4.759'. [ 246.062184][ T875] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 246.062738][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 246.222144][ T875] usb 1-1: Using ep0 maxpacket: 8 [ 246.228939][ T875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 246.238687][ T875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.250620][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.252090][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 246.263192][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.285861][ T875] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 246.296332][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.298211][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 246.305021][ T875] usb 1-1: Product: syz [ 246.314083][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.318321][ T875] usb 1-1: Manufacturer: syz [ 246.326798][ T9] usb 3-1: Product: syz [ 246.331590][ T5937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 246.337441][ T9] usb 3-1: Manufacturer: syz [ 246.348164][ T9] usb 3-1: SerialNumber: syz [ 246.352150][ T875] usb 1-1: SerialNumber: syz [ 246.361068][ T875] usb 1-1: config 0 descriptor?? [ 246.368155][ T8511] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 246.372586][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 246.391988][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 246.512108][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 246.529504][ T8515] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 246.549989][ T8515] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 246.568926][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.583835][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 246.593695][ T5937] usb 5-1: can't read configurations, error -71 [ 246.831700][ T9] r8152-cfgselector 3-1: USB disconnect, device number 94 [ 246.887414][ T8523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.689326][ T30] audit: type=1326 audit(1758725077.018:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46818eec9 code=0x0 [ 247.732185][ T9] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 247.894360][ T9] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 247.911800][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 247.936821][ T9] usb 3-1: config 8 has no interface number 0 [ 247.943395][ T9] usb 3-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 247.955490][ T9] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.967746][ T9] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 247.980699][ T9] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 247.994264][ T9] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 248.003697][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.056465][ T9] usb 3-1: NFC: intf ffff88807978a000 id ffffffff8ef72740 [ 248.107480][ T9] nfcmrvl 3-1:8.80: NFC: registered with nci successfully [ 248.314584][ T9] usb 3-1: USB disconnect, device number 95 [ 248.327009][ T9] usb 3-1: NFC: intf ffff88807978a000 [ 248.452917][ T5973] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 248.506512][ T8556] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 248.632291][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 248.696824][ T5973] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 248.714211][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.732790][ T5973] usb 4-1: Product: syz [ 248.737040][ T5973] usb 4-1: Manufacturer: syz [ 248.741707][ T5973] usb 4-1: SerialNumber: syz [ 248.773457][ T5973] usb 4-1: config 0 descriptor?? [ 248.783853][ T5973] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 248.969592][ T875] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 248.981762][ T875] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 248.993251][ T5973] gspca_topro: reg_w err -71 [ 249.001170][ C1] powermate: config urb returned -71 [ 249.006859][ C1] powermate: config urb returned -71 [ 249.012609][ C1] powermate: config urb returned -71 [ 249.018114][ C1] powermate: config urb returned -71 [ 249.023680][ T5973] gspca_topro: Sensor soi763a [ 249.037456][ T875] usb 1-1: USB disconnect, device number 84 [ 249.043498][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 249.060968][ T5973] usb 4-1: USB disconnect, device number 91 [ 249.072437][ T5954] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 249.222218][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 249.234486][ T8563] netlink: 'syz.4.779': attribute type 4 has an invalid length. [ 249.245997][ T8563] netlink: 'syz.4.779': attribute type 4 has an invalid length. [ 249.260917][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.271876][ T5954] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 249.279905][ T5954] usb 5-1: can't read configurations, error -71 [ 249.402938][ T875] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 249.555059][ T875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.565464][ T875] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 249.574669][ T875] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.583940][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.595139][ T875] usb 1-1: config 0 descriptor?? [ 249.811494][ T875] usb 1-1: USB disconnect, device number 85 [ 250.333142][ T5954] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 250.510312][ T5954] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 250.564482][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.576638][ T5954] usb 5-1: Product: syz [ 250.580861][ T5954] usb 5-1: Manufacturer: syz [ 250.599152][ T5954] usb 5-1: SerialNumber: syz [ 250.608098][ T5954] usb 5-1: config 0 descriptor?? [ 250.774119][ T5921] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 250.782155][ T875] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 250.823809][ T24] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 250.825720][ T5954] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 250.932182][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 250.939635][ T875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 250.943657][ T8593] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 250.958476][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.960414][ T8593] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 250.980162][ T875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 250.998120][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.006314][ T875] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 251.016233][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.024792][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 251.032965][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.044855][ T5921] usb 4-1: can't read configurations, error -71 [ 251.052913][ T875] usb 1-1: config 0 descriptor?? [ 251.058156][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.075551][ T24] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 251.086768][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.098396][ T24] usb 3-1: config 0 descriptor?? [ 251.479681][ T5954] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 251.483123][ T875] uclogic 0003:5543:0064.001D: item fetching failed at offset 0/3 [ 251.497659][ T875] uclogic 0003:5543:0064.001D: parse failed [ 251.504275][ T5954] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 251.505060][ T5959] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 251.515733][ T875] uclogic 0003:5543:0064.001D: probe with driver uclogic failed with error -22 [ 251.538062][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.545349][ T5954] usb 5-1: USB disconnect, device number 17 [ 251.553992][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.554168][ T5959] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 251.561184][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.593957][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.595674][ T5959] ------------[ cut here ]------------ [ 251.600968][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.601001][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.601027][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.606796][ T5959] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:6/5959 [ 251.636829][ T5959] Modules linked in: [ 251.641095][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 251.650630][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.661433][ T5959] Workqueue: events request_firmware_work_func [ 251.668005][ T5959] RIP: 0010:kernfs_get+0x72/0x90 [ 251.673348][ T5959] Code: e8 d3 33 5f ff 48 89 df be 04 00 00 00 e8 36 4c c4 ff f0 ff 03 eb 05 e8 bc 33 5f ff 5b 5d e9 15 07 28 09 cc e8 af 33 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 251.693481][ T5959] RSP: 0018:ffffc90004bbf5c0 EFLAGS: 00010293 [ 251.699608][ T5959] RAX: ffffffff82615d91 RBX: ffff888062ddbf00 RCX: ffff88802b790000 [ 251.708240][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.716619][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.716654][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.723676][ T5959] RBP: 0000000000000000 R08: ffff888062ddbf03 R09: 1ffff1100c5bb7e0 [ 251.723700][ T5959] R10: dffffc0000000000 R11: ffffed100c5bb7e1 R12: ffff88806d797aa8 [ 251.723718][ T5959] R13: 1ffff1100daf2f56 R14: ffff88806d797ab0 R15: 1ffff1100daf2f55 [ 251.723737][ T5959] FS: 0000000000000000(0000) GS:ffff8881257c5000(0000) knlGS:0000000000000000 [ 251.723757][ T5959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.723774][ T5959] CR2: 00007f7b31200020 CR3: 000000007e3b4000 CR4: 00000000003526f0 [ 251.732512][ T24] saitek 0003:06A3:0621.001E: unknown main item tag 0x0 [ 251.739218][ T5959] Call Trace: [ 251.789498][ T5959] [ 251.792532][ T5959] kobject_add_internal+0x632/0xb40 [ 251.797795][ T5959] kobject_add+0x155/0x220 [ 251.802350][ T5959] ? get_device_parent+0x255/0x3a0 [ 251.807518][ T5959] ? __pfx_kobject_add+0x10/0x10 [ 251.812573][ T5959] ? __kasan_kmalloc+0x93/0xb0 [ 251.817399][ T5959] ? kobject_init+0x83/0x1e0 [ 251.822104][ T5959] get_device_parent+0x316/0x3a0 [ 251.825323][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.827089][ T5959] device_add+0x2e1/0xb50 [ 251.827128][ T5959] firmware_fallback_sysfs+0x2e4/0x9b0 [ 251.845504][ T5959] ? kmem_cache_free+0x19b/0x690 [ 251.850506][ T5959] _request_firmware+0xf83/0x15b0 [ 251.855724][ T5959] ? __pfx__request_firmware+0x10/0x10 [ 251.861232][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 251.867225][ T5959] request_firmware_work_func+0xaf/0x1c0 [ 251.872975][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 251.878753][ T5959] process_scheduled_works+0xae1/0x17b0 [ 251.884458][ T5959] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.890508][ T5959] worker_thread+0x8a0/0xda0 [ 251.895190][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.901566][ T5959] ? __kthread_parkme+0x7b/0x200 [ 251.906599][ T5959] kthread+0x711/0x8a0 [ 251.910726][ T5959] ? __pfx_worker_thread+0x10/0x10 [ 251.916090][ T5959] ? __pfx_kthread+0x10/0x10 [ 251.919966][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.920727][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.933756][ T5959] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.938992][ T5959] ? __pfx_kthread+0x10/0x10 [ 251.943712][ T5959] ret_from_fork+0x4bc/0x870 [ 251.948348][ T5959] ? __pfx_ret_from_fork+0x10/0x10 [ 251.953564][ T5959] ? __switch_to_asm+0x39/0x70 [ 251.958376][ T5959] ? __switch_to_asm+0x33/0x70 [ 251.963376][ T5959] ? __pfx_kthread+0x10/0x10 [ 251.968109][ T5959] ret_from_fork_asm+0x1a/0x30 [ 251.973054][ T5959] [ 251.976118][ T5959] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.983428][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 251.992842][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.003187][ T5959] Workqueue: events request_firmware_work_func [ 252.009378][ T5959] Call Trace: [ 252.012663][ T5959] [ 252.015608][ T5959] dump_stack_lvl+0x99/0x250 [ 252.020836][ T5959] ? __asan_memcpy+0x40/0x70 [ 252.025509][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.030750][ T5959] ? __pfx__printk+0x10/0x10 [ 252.035387][ T5959] vpanic+0x237/0x6d0 [ 252.039388][ T5959] ? __pfx_vpanic+0x10/0x10 [ 252.043907][ T5959] ? is_bpf_text_address+0x292/0x2b0 [ 252.049207][ T5959] ? is_bpf_text_address+0x26/0x2b0 [ 252.054425][ T5959] panic+0xb9/0xc0 [ 252.058163][ T5959] ? __pfx_panic+0x10/0x10 [ 252.062618][ T5959] ? ret_from_fork_asm+0x1a/0x30 [ 252.067578][ T5959] __warn+0x334/0x4c0 [ 252.071581][ T5959] ? kernfs_get+0x72/0x90 [ 252.076832][ T5959] ? kernfs_get+0x72/0x90 [ 252.081178][ T5959] report_bug+0x2be/0x4f0 [ 252.085527][ T5959] ? kernfs_get+0x72/0x90 [ 252.089962][ T5959] ? kernfs_get+0x72/0x90 [ 252.094339][ T5959] ? kernfs_get+0x74/0x90 [ 252.098716][ T5959] handle_bug+0x84/0x160 [ 252.103105][ T5959] exc_invalid_op+0x1a/0x50 [ 252.107644][ T5959] asm_exc_invalid_op+0x1a/0x20 [ 252.112504][ T5959] RIP: 0010:kernfs_get+0x72/0x90 [ 252.117460][ T5959] Code: e8 d3 33 5f ff 48 89 df be 04 00 00 00 e8 36 4c c4 ff f0 ff 03 eb 05 e8 bc 33 5f ff 5b 5d e9 15 07 28 09 cc e8 af 33 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35 [ 252.137087][ T5959] RSP: 0018:ffffc90004bbf5c0 EFLAGS: 00010293 [ 252.143187][ T5959] RAX: ffffffff82615d91 RBX: ffff888062ddbf00 RCX: ffff88802b790000 [ 252.151171][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.159160][ T5959] RBP: 0000000000000000 R08: ffff888062ddbf03 R09: 1ffff1100c5bb7e0 [ 252.167243][ T5959] R10: dffffc0000000000 R11: ffffed100c5bb7e1 R12: ffff88806d797aa8 [ 252.175316][ T5959] R13: 1ffff1100daf2f56 R14: ffff88806d797ab0 R15: 1ffff1100daf2f55 [ 252.183310][ T5959] ? kernfs_get+0x71/0x90 [ 252.187676][ T5959] kobject_add_internal+0x632/0xb40 [ 252.192897][ T5959] kobject_add+0x155/0x220 [ 252.197330][ T5959] ? get_device_parent+0x255/0x3a0 [ 252.202464][ T5959] ? __pfx_kobject_add+0x10/0x10 [ 252.207416][ T5959] ? __kasan_kmalloc+0x93/0xb0 [ 252.212202][ T5959] ? kobject_init+0x83/0x1e0 [ 252.216811][ T5959] get_device_parent+0x316/0x3a0 [ 252.221767][ T5959] device_add+0x2e1/0xb50 [ 252.226132][ T5959] firmware_fallback_sysfs+0x2e4/0x9b0 [ 252.231603][ T5959] ? kmem_cache_free+0x19b/0x690 [ 252.236564][ T5959] _request_firmware+0xf83/0x15b0 [ 252.241618][ T5959] ? __pfx__request_firmware+0x10/0x10 [ 252.247116][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 252.252931][ T5959] request_firmware_work_func+0xaf/0x1c0 [ 252.258667][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 252.264492][ T5959] process_scheduled_works+0xae1/0x17b0 [ 252.270080][ T5959] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.276085][ T5959] worker_thread+0x8a0/0xda0 [ 252.280700][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.287049][ T5959] ? __kthread_parkme+0x7b/0x200 [ 252.292029][ T5959] kthread+0x711/0x8a0 [ 252.296125][ T5959] ? __pfx_worker_thread+0x10/0x10 [ 252.301248][ T5959] ? __pfx_kthread+0x10/0x10 [ 252.305855][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.311084][ T5959] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.316404][ T5959] ? __pfx_kthread+0x10/0x10 [ 252.321030][ T5959] ret_from_fork+0x4bc/0x870 [ 252.325637][ T5959] ? __pfx_ret_from_fork+0x10/0x10 [ 252.330766][ T5959] ? __switch_to_asm+0x39/0x70 [ 252.335535][ T5959] ? __switch_to_asm+0x33/0x70 [ 252.340305][ T5959] ? __pfx_kthread+0x10/0x10 [ 252.344919][ T5959] ret_from_fork_asm+0x1a/0x30 [ 252.349703][ T5959] [ 252.353053][ T5959] Kernel Offset: disabled [ 252.357391][ T5959] Rebooting in 86400 seconds..