last executing test programs: 10.286523829s ago: executing program 2 (id=1562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x2b}, 0x600, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@mcast1, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0xf94a, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x40044) 10.212188262s ago: executing program 2 (id=1563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000f3ff00000000000000000003000000080000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x24040001) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 9.897909903s ago: executing program 4 (id=1564): ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{0x0, 0xffa1}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 9.886151341s ago: executing program 1 (id=1565): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) r5 = inotify_init1(0x80000) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001600)={0x7d0, 0xffffffffffffff80, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000140)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.572095194s ago: executing program 1 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x800) r4 = socket(0x10, 0x803, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000080)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x19, &(0x7f0000001fc0)={0x19, 0x546d0581, 0xc}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x10000002, 0x3010, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r12, &(0x7f0000000640)={0x2020}, 0xed6) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) 8.901862446s ago: executing program 1 (id=1570): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(r3, &(0x7f0000000200), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x0, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfcc4], 0x6}}) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000700000200000000000000000000000000000004000400000000000000000000000000000000000010000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) 8.54801175s ago: executing program 3 (id=1572): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0) listen(0xffffffffffffffff, 0x3) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) unshare(0x2a020400) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, 0x0, 0x0) 7.258025798s ago: executing program 3 (id=1573): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.182938737s ago: executing program 4 (id=1574): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r3, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0xfffffffd, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$rfkill(r9, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 7.09604742s ago: executing program 3 (id=1575): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={'blake2b-160\x00'}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x88000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000640)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x1, 0x4, {{0x6, 0x4, 0x2, 0x27, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7e, r8}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x80044944, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000eac3fb0000000000000000340000002f000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sync() r12 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') preadv(r12, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x47, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f000077b000/0x10000)=nil, 0x10000, 0x1000004, 0x40010, r9, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000540)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r3, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f0000000580)=@nfc_llcp={0x27, r15, 0xffffffffffffffff, 0x6, 0x0, 0x0, "3ed3d2805b996b8789b5a4f5142dd6a02c4cc96c0c7e86383c221962bbdaaa8f0a7ea41f72bd1edaa44d50d0e092e290897d43c2ab601cc242b89cd6a843d3", 0x2d}, 0x0, 0x0, 0x0, {0x0, r16}}) syz_io_uring_setup(0x7ca1, &(0x7f0000000480)={0x0, 0x3ffc, 0x0, 0x0, 0x2dd, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r17, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x46, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, 0x1, {0x0, r13}}) 6.874488358s ago: executing program 3 (id=1576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) socket(0x2d, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0xfe0e}], 0x1) ioctl(0xffffffffffffffff, 0x8b23, &(0x7f0000000040)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x4, 0x6}}], 0x58, 0x10}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) 6.792002014s ago: executing program 2 (id=1577): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000800) openat$dsp1(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = gettid() socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 6.643092012s ago: executing program 2 (id=1578): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x20, 0x8, 0x4, "04b14fff"}, 0x0, 0x0, 0x0, 0x0}) 6.300817273s ago: executing program 4 (id=1580): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xe, @private0, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="9b", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000100)=0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x260400, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100000099"], 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x2a21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x25e}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, 0x0, 0x1) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r6) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x81) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) fchdir(r0) r8 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.663814652s ago: executing program 2 (id=1589): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f00000000c0)=@x={0x94, 0x7, "de331b629ae6"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa2001, 0x0) 3.270238275s ago: executing program 4 (id=1590): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80400) ptrace(0x10, r1) ptrace$cont(0x18, r1, 0x10000000000005, 0x6) capget(&(0x7f0000000240)={0x19980330, r1}, &(0x7f00000002c0)={0xc, 0x4, 0x800, 0x7, 0x1, 0x7}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x1c8, 0x0, 0xf8, 0x0, 0x2f8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x9, 0x8, 0x3}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6, 0x3}, {0x0, 0x3}, 0x6, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private2, 0x23, 0xc, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x80}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffff9) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) 2.804244717s ago: executing program 3 (id=1591): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b27, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x2}}}}}]}}]}}, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000080), 0x7, 0x2000) ioctl$RTC_UIE_OFF(r2, 0x7004) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cb8e7e34"}]}}, 0x0}, 0x0) 2.045744963s ago: executing program 0 (id=1593): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) signalfd(r4, &(0x7f00000000c0)={[0x1]}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x7c, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3e1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') preadv(r5, &(0x7f0000001ac0)=[{&(0x7f00000001c0)=""/229, 0xe5}], 0x1, 0x5f, 0x5) connect$can_j1939(r5, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0x0, 0x1}}, 0x18) 1.940342605s ago: executing program 0 (id=1594): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x83b, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x20200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.662918501s ago: executing program 0 (id=1595): sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x944, 0x0, 0x8}, {0x357, 0x0, 0x83}]}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x28200, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82e}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcb4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe087}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x91c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5d2d}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000802) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x400) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmdt(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x82a}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008845}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x23) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000740)={0x5, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r2}, 0x8) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000007c0)=@req={0x1, 0x2, 0xc, 0x5}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a40)={0x4, 0x0, [{0x100000, 0x6e, &(0x7f0000000800)=""/110}, {0x5000, 0xee, &(0x7f0000000880)=""/238}, {0x3000, 0x43, &(0x7f0000000980)=""/67}, {0xeeee8000, 0x0, &(0x7f0000000a00)}]}) sendto$inet(r2, &(0x7f0000000b00)="8a2c157819874b2051f7390d731f5ee45f28fe82eb09d7d65d7c3f3b6eb6bc44109d2ea3655ac82e95cc2cb2bf5d8da08705460a6cb1b62314242276bace55263d2f879694005120570e078e7aa10b1e70615f0453ef1f93300f1ca74cff1d4fea86f83bbb99b10ef57cdbb1add52e4701812cef4ff5f655f9cdb7d0", 0x7c, 0xc000, &(0x7f0000000b80)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$RTC_AIE_ON(r6, 0x7001) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000bc0)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, 0xc) ioctl$VHOST_VDPA_GET_STATUS(r6, 0x8001af71, &(0x7f0000000c00)) syz_open_dev$vbi(&(0x7f0000000c40), 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x854) r9 = socket$inet6_sctp(0xa, 0x53bdecdfd5421b45, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x0, 0xa0, 0x36, r4, 0xee00}, {0x235, 0xffff, 0x7f, 0x200, 0x0, 0x1, 0x5798, 0x101}, {0x200, 0x2, 0x5, 0x7}, 0x8001, 0x6e6bb3, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf, 0x2}}, 0xe8) sendmsg$nl_route_sched(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@deltclass={0x5c, 0x29, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xecc2cd64996c9dba, 0x3}, {0x0, 0xfff3}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x56}}, @TCA_RATE={0x6, 0x5, {0xdc, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @TCA_RATE={0x6, 0x5, {0x0, 0x52}}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_RATE={0x6, 0x5, {0x2, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2090}, 0x24000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000010c0)={0x10201, 0x5, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.595422072s ago: executing program 0 (id=1596): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read$FUSE(r0, 0x0, 0x0) 1.511804866s ago: executing program 0 (id=1597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast1}, 0x8) ioctl$KDGKBMETA(r6, 0x4bfa, &(0x7f0000000180)) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000000, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.224618424s ago: executing program 1 (id=1598): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="52010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) close(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000020000000000000000000000050000000000000000000000000000000000000000000000000000000000000005"]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xa, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0}, 0x0) 1.039970097s ago: executing program 3 (id=1599): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket(0x2b, 0x3, 0x0) io_setup(0x7ff, &(0x7f0000000140)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x490003, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340)) getgid() 470.988323ms ago: executing program 1 (id=1600): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 310.543871ms ago: executing program 0 (id=1601): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x24, 0x2, {{0x7, 0xffff, 0x1, 0x2, 0x6}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1010}, 0x4) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x0, 0x4, 0x3, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000200)={0x2, 0xffff8000, 0x8, 0x7, 0x7, "ee7aff066f5d2d83a90165c07690db3fd0d04a", 0x3ff, 0x3}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x20040880}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c000280050001002f0000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 87.723685ms ago: executing program 4 (id=1602): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48010000309901000000000000000000e00000020000000000000000000000000a"], 0x148}, 0x1, 0x0, 0x0, 0x200c0881}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400011, 0x0) 0s ago: executing program 2 (id=1603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x1b, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) socket$packet(0x11, 0x2, 0x300) close(0x3) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="000000028a96df9fa717de9ef190d835e12caac0e89ea6a379f7bb6bf7a66acc6116f13f60f3430117ad2e079888db168f975c7729ea6af37703e578"]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) close(0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x2}, 0x4) kernel console output (not intermixed with test programs): -22 [ 355.121237][T10930] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 355.155336][T10930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.573803][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 355.712487][T10938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.719773][ T5952] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 355.746278][T10939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.760912][T10939] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.772997][T10939] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 355.866608][T10938] macvlan2: entered promiscuous mode [ 355.879649][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 355.881861][T10938] macvlan2: entered allmulticast mode [ 355.909502][T10938] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 355.910405][ T5952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.977556][ T5952] usb 5-1: config 0 has no interface number 0 [ 355.984488][ T8564] usb 1-1: USB disconnect, device number 52 [ 356.013024][ T5952] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 356.034463][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.043859][ T5952] usb 5-1: Product: syz [ 356.048131][ T5952] usb 5-1: Manufacturer: syz [ 356.057160][ T5952] usb 5-1: SerialNumber: syz [ 356.063443][ T5952] usb 5-1: config 0 descriptor?? [ 356.073636][ T5952] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 356.142840][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 356.379777][ T8564] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 356.529721][ T8564] usb 1-1: device descriptor read/64, error -71 [ 356.779797][ T8564] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 356.970062][ T8564] usb 1-1: device descriptor read/64, error -71 [ 357.079934][ T8564] usb usb1-port1: attempt power cycle [ 357.331144][ T5952] gspca_spca1528: reg_w err -71 [ 357.338398][ T5952] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 357.380382][ T5952] usb 5-1: USB disconnect, device number 58 [ 357.423558][ T8564] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 357.450724][ T8564] usb 1-1: device descriptor read/8, error -71 [ 357.691667][ T8564] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 357.721451][ T8564] usb 1-1: device descriptor read/8, error -71 [ 357.830468][ T8564] usb usb1-port1: unable to enumerate USB device [ 359.209719][ T5866] Bluetooth: hci3: command 0x0419 tx timeout [ 359.216059][T10964] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 359.469821][ T8553] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 359.489782][ T8564] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 359.631062][ T8553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.648829][ T8553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.670203][ T8553] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.702398][ T8564] usb 5-1: Using ep0 maxpacket: 32 [ 359.702400][ T8553] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 359.702426][ T8553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.711128][ T8564] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.733930][ T8564] usb 5-1: config 0 has no interface number 0 [ 359.743931][ T8564] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 359.756342][ T8564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.767841][ T8553] usb 1-1: config 0 descriptor?? [ 359.778706][ T8553] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 359.798791][ T8564] usb 5-1: Product: syz [ 359.818473][ T8564] usb 5-1: Manufacturer: syz [ 359.843790][ T8564] usb 5-1: SerialNumber: syz [ 359.924754][ T8564] usb 5-1: config 0 descriptor?? [ 359.946463][ T8564] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 359.963334][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 359.981321][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.993537][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.017314][ T5216] bcm5974 1-1:0.0: could not read from device [ 360.049802][ T5216] bcm5974 1-1:0.0: could not read from device [ 360.061628][ T8553] usb 1-1: USB disconnect, device number 57 [ 360.075641][ T5216] bcm5974 1-1:0.0: could not read from device [ 360.129107][ T6310] bcm5974 1-1:0.0: could not read from device [ 360.180957][ T8564] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 360.212607][ T8564] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 360.236342][ T6310] udevd[6310]: Error opening device "/dev/input/event4": No such file or directory [ 360.340716][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 360.361736][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 360.389795][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 360.409750][ T6310] udevd[6310]: Unable to EVIOCGABS device "/dev/input/event4" [ 360.772460][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 360.788195][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 360.847686][T11006] vxcan1: entered promiscuous mode [ 360.872372][T11006] vxcan1: entered allmulticast mode [ 361.024646][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.060290][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.293634][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1382'. [ 361.349812][ T30] audit: type=1326 audit(1755385874.993:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 361.372190][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.397563][ T30] audit: type=1326 audit(1755385875.043:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 361.462484][ T30] audit: type=1326 audit(1755385875.083:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 361.543543][ T30] audit: type=1326 audit(1755385875.083:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 361.741647][ T30] audit: type=1326 audit(1755385875.083:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 361.890519][ T30] audit: type=1326 audit(1755385875.093:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 362.059667][ T30] audit: type=1326 audit(1755385875.093:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 362.083633][ T30] audit: type=1326 audit(1755385875.093:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 362.105980][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.203895][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 362.213512][ T8564] usb 5-1: USB disconnect, device number 59 [ 362.221194][ T8564] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 362.296181][ T30] audit: type=1326 audit(1755385875.093:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8a8b58ebe9 code=0x7ffc0000 [ 362.405805][ T8564] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 362.521293][ T8564] quatech2 5-1:0.51: device disconnected [ 363.499827][ T30] audit: type=1326 audit(1755385877.133:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.0.1385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a8b58ebe9 code=0x0 [ 363.521587][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.780932][T11061] loop6: detected capacity change from 0 to 7 [ 363.791796][T11061] Dev loop6: unable to read RDB block 7 [ 363.798724][T11061] loop6: AHDI p3 p4 [ 363.803499][T11061] loop6: partition table partially beyond EOD, truncated [ 363.814160][T11061] loop6: p3 start 1886353253 is beyond EOD, truncated [ 364.018255][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 364.504136][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.656840][ T8564] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 364.757302][T11069] cgroup: fork rejected by pids controller in /syz2 [ 364.939854][ T8564] usb 5-1: device descriptor read/64, error -71 [ 364.968969][T11117] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 364.975521][T11117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.045693][T11121] netlink: 'syz.3.1399': attribute type 21 has an invalid length. [ 365.056674][T11117] vhci_hcd vhci_hcd.0: Device attached [ 365.211439][T11121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1399'. [ 365.307671][ T8564] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 365.323477][ T8553] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 365.436074][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1400'. [ 365.554022][ T8564] usb 5-1: device descriptor read/64, error -71 [ 365.576080][T11128] vivid-004: disconnect [ 365.583117][T11118] vhci_hcd: connection reset by peer [ 365.593451][ T1027] vhci_hcd: stop threads [ 365.597732][ T1027] vhci_hcd: release socket [ 365.608386][ T1027] vhci_hcd: disconnect device [ 365.689881][ T8564] usb usb5-port1: attempt power cycle [ 365.808466][T11116] vivid-004: reconnect [ 366.165076][T11130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1402'. [ 366.259675][ T8564] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 366.278235][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.286959][ T8564] usb 5-1: device descriptor read/8, error -71 [ 366.302463][T11134] loop6: detected capacity change from 0 to 7 [ 366.310295][T11134] Dev loop6: unable to read RDB block 7 [ 366.315906][T11134] loop6: AHDI p3 p4 [ 366.320974][T11134] loop6: partition table partially beyond EOD, truncated [ 366.328454][T11134] loop6: p3 start 1886353253 is beyond EOD, truncated [ 366.509958][ T5859] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 366.539969][ T8564] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 366.571779][ T8564] usb 5-1: device descriptor read/8, error -71 [ 366.658017][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 366.680247][ T8564] usb usb5-port1: unable to enumerate USB device [ 366.681295][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.701216][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 366.713046][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 366.752080][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 224, setting to 64 [ 366.766135][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.784002][ T5859] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 366.793319][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 366.831068][ T5859] usb 1-1: Product: syz [ 366.835398][ T5859] usb 1-1: Manufacturer: syz [ 366.845534][ T5859] usb 1-1: SerialNumber: syz [ 366.862906][ T5859] usb 1-1: config 0 descriptor?? [ 366.877820][T11124] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 367.017110][ T5913] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 367.028163][ T5913] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 367.038624][ T5913] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 367.048965][ T5913] hid-generic 0000:0004:0000.000B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 367.104931][ T5859] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 367.130409][ T5859] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 367.193518][T11152] fido_id[11152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.258104][T11156] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 367.305354][ T5859] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 367.316098][T11156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.368219][ T5859] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 367.397084][T11158] bond4: (slave geneve2): making interface the new active one [ 367.409806][ T5859] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 367.427666][T11158] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 367.437544][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.448381][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.466349][T11156] bond4: entered promiscuous mode [ 367.478142][T11156] geneve2: entered promiscuous mode [ 367.486237][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.495916][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.939897][ T5859] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 367.981936][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 367.988584][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 367.995233][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.009710][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.016307][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.022988][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.029655][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.036235][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.042808][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.049685][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.056321][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.063026][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.069641][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.076239][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.082865][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.089798][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.096373][ T5859] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 368.104836][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.111422][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.117975][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.124650][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.131169][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.137650][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.144243][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.150796][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.157291][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.163809][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.170422][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.176950][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.183471][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.190003][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.196505][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.203011][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.209525][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.216070][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.222580][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.229244][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.235798][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.242321][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.248802][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.255446][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.261984][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.268493][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.275441][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.282089][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.288601][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.295115][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.301668][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.308148][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.314743][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.321239][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.327719][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.334255][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.340805][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.347305][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.353810][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.360334][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.366837][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.373348][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.379917][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.386394][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.392916][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.399397][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.406017][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.412593][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.419084][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.425590][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.432107][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.438586][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.445132][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.451679][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.458222][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.464876][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.471553][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.478068][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.484578][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.491105][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.497600][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.504119][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.510637][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.517101][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.523589][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.530096][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.536558][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.543062][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.549524][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.556095][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.562628][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.569121][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.575801][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.582458][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.588967][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.595527][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.602073][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.608565][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.615121][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.621674][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.628157][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.634694][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.641216][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.647713][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.654473][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.661130][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.667651][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.674307][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.681064][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.687600][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.694179][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.700693][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.707168][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.713702][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.720253][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.726731][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.733246][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.739742][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.746234][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.752803][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.759379][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.765935][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.772463][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.778939][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.785449][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.791949][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.798435][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.804957][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.811492][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.817988][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.824543][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.831081][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.837576][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.844420][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.851069][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.857596][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.864160][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.870729][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.877310][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.883815][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.890417][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.896940][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.903438][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.910000][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.916506][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.923011][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.929504][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.936041][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.942576][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.949486][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.956058][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.962566][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.969058][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.975776][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.982287][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.988768][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 368.995285][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.001798][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.008275][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.014780][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.021283][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.027755][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.034378][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.040932][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.047427][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.054020][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.060582][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.067061][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.073584][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.080108][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.086605][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.093142][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.099758][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.106257][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.112785][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.119296][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.125839][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.132387][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.138886][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.145406][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.152017][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.158505][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.165012][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.171516][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.177989][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.184501][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.191017][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.197495][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.203994][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.210569][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.217076][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.223592][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.230133][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.236899][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.243413][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.249936][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.256445][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.263051][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.269552][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.276124][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.282635][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.289132][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.295676][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.302196][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.308725][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.315274][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.321820][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.328304][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.334993][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.341508][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.347993][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.354653][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.361208][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.367722][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.374303][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.380831][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.387318][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.393934][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.400467][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.406951][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.413474][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.420014][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.426502][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.433052][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.439552][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.446103][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.452677][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.459166][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.465703][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.472220][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.478789][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.485303][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.492125][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.498635][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.505180][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.511751][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.518237][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.524777][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.531299][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.537797][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.544354][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.550890][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.557635][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.564151][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.570777][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.577378][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.583892][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.590472][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.597022][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.603886][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.610449][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.616930][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.623459][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.630011][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.636502][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.643051][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.649543][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.656091][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.662634][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.669403][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.676292][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.683139][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.689999][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.696684][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.703231][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.709791][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.716316][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.722853][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.729341][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.735877][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.742412][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.748986][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.755503][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.762019][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.768497][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.775023][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.781586][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.788117][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.794649][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.801180][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.807700][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.814253][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.820774][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.827258][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.833802][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.840386][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.846890][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.853578][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.860175][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.866695][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.873227][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.879751][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.886400][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.892899][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.899367][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.905953][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.912469][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.918940][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.925447][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.931953][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.938423][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.944937][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.951435][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.957903][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.964399][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.970933][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.977411][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.983960][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.990504][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 369.997016][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.003529][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.010103][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.016569][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.023066][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.029538][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.036080][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.042569][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.049040][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.055544][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.062148][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.068650][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.075180][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.081720][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.088207][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.094839][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.101382][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.107888][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.114532][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.121031][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.127507][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.134020][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.140534][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.147032][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.153540][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.160034][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.166501][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.173018][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.179483][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.185984][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.192491][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.198959][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.205472][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.211993][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.218465][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.224962][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.231474][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.237943][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.244468][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.251044][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.257564][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.264106][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.270645][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.277210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.283735][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.290266][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.296742][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.303254][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.309792][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.316270][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.322767][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.329260][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.335782][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.342286][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.348757][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.355269][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.361772][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.368249][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.374783][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.381322][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.387831][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.394449][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.401360][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.407841][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.414370][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.420880][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.427366][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.433923][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.440461][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.446933][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.453495][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.460023][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.466545][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.473062][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.479539][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.486081][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.492647][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.499128][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.505662][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.512215][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.518744][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.525304][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.531826][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.538371][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.544977][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.551592][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.558082][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.564620][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.571210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.577782][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.584378][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.590955][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.597472][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.604021][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.610667][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.617177][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.623695][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.630225][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.636706][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.643269][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.649787][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.656264][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.662773][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.669283][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.675871][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.682436][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.688937][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.695467][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.702024][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.708662][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.715272][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.721807][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.728280][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.735014][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.741594][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.748069][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.754568][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.761080][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.767595][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.774104][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.780617][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.787106][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.793628][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.800128][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.806592][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.813113][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.819671][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.826277][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.832822][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.839335][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.845902][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.852445][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.858944][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.865507][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.872023][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.878502][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.885020][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.891529][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.898046][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.904598][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.911124][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.917628][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.924199][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.930746][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.937271][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.943807][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.950348][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.956825][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.963340][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.969858][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.976337][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.982857][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.989510][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 370.996073][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.002575][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.009052][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.015565][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.022134][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.028614][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.035111][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.041632][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.048106][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.054618][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.061112][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.067612][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.074149][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.080675][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.087146][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.093664][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.100151][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.106616][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.113121][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.119637][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.126125][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.132646][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.139103][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.145642][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.152175][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.158652][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.165174][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.171678][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.178145][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.184643][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.191145][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.197620][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.204108][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.210618][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.217171][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.223662][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.230193][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.236684][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.243223][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.249776][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.256262][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.262816][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.269285][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.275798][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.282300][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.288790][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.295293][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.301876][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.308345][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.314851][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.321382][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.327872][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.334923][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.341426][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.347892][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.354391][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.360894][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.367353][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.373845][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.380346][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.386808][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.393308][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.400416][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.406952][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.413492][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.420106][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.426666][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.433214][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.439797][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.446287][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.452894][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.459358][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.465860][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.472358][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.478822][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.485312][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.491895][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.498365][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.504886][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.511370][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.517831][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.524358][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.530873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.537432][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.543926][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.550428][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.556884][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.563382][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.569873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.576337][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.582817][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.589271][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.595849][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.602369][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.608878][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.615417][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.621933][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.628440][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.634975][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.641486][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.647977][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.654873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.661386][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.667851][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.674394][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.681023][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.687516][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.694369][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.700893][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.707364][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.713884][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.720368][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.726836][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.733357][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.739873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.746338][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.752830][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.759300][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.765803][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.772528][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.779079][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.785591][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.792116][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.798613][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.805162][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.812252][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.818738][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.825292][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.831818][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.838318][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.844832][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.851348][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.857868][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.864453][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.870968][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.877473][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.884024][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.890561][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.897032][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.903612][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.910119][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.916583][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.923076][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.929659][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.936181][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.942699][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.949176][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.955687][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.962208][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.968680][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.975340][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.981828][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.988314][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 371.994817][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.001322][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.007782][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.014310][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.020788][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.027255][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.033768][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.040274][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.046762][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.053377][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.059901][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.066496][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.073050][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.079530][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.086101][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.092741][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.099223][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.105718][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.112305][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.118780][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.125351][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.131879][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.138347][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.144931][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.151442][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.157907][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.164403][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.170983][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.177447][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.184027][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.190553][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.197024][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.203541][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.210169][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.216652][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.223179][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.229695][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.236170][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.242670][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.249137][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.255668][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.262164][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.268628][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.275145][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.281643][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.288105][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.294599][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.301091][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.307586][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.314118][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.320630][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.327184][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.333691][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.340184][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.346646][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.353181][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.359707][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.366188][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.372696][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.379184][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.385685][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.392183][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.398645][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.405152][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.411860][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.418332][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.424922][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.431411][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.437873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.444364][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.450877][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.458008][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.464542][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.471074][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.478351][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.485032][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.491667][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.499005][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.505642][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.512306][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.518915][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.525611][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.532269][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.539172][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.545813][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.552551][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.559223][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.566006][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.572645][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.579310][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.585971][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.592791][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.599443][ T8553] vhci_hcd: vhci_device speed not set [ 372.604979][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.611682][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.618277][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.624956][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.631598][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.638214][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 372.645018][ T5859] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 372.669158][ T5859] usb 1-1: USB disconnect, device number 58 [ 373.121450][T11194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1416'. [ 373.184901][T11194] vivid-003: disconnect [ 373.614465][T11189] vivid-003: reconnect [ 373.729896][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.809910][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.049660][ T8553] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 374.129653][ T979] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 374.222817][ T8553] usb 4-1: config 0 has no interfaces? [ 374.237252][ T8553] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.286020][ T979] usb 1-1: config 0 has no interfaces? [ 374.297370][ T8553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.308208][ T979] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 374.333987][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.346228][ T8553] usb 4-1: Product: syz [ 374.363484][ T8553] usb 4-1: Manufacturer: syz [ 374.369928][ T979] usb 1-1: Product: syz [ 374.379077][ T8553] usb 4-1: SerialNumber: syz [ 374.389160][ T979] usb 1-1: Manufacturer: syz [ 374.408974][ T8553] usb 4-1: config 0 descriptor?? [ 374.414663][ T979] usb 1-1: SerialNumber: syz [ 374.451407][ T979] usb 1-1: config 0 descriptor?? [ 374.699661][T11220] input: syz1 as /devices/virtual/input/input28 [ 374.820117][T11213] support for the xor transformation has been removed. [ 374.925550][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.942012][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.962273][T11225] QAT: Device 127 not found [ 375.778280][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.799442][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.077821][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.151001][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.299716][ T8553] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 376.389815][ T979] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 376.461163][ T8553] usb 3-1: too many configurations: 152, using maximum allowed: 8 [ 376.495027][ T8553] usb 3-1: config index 0 descriptor too short (expected 143, got 72) [ 376.519658][ T979] usb 5-1: device descriptor read/64, error -71 [ 376.578983][ T8553] usb 3-1: config index 1 descriptor too short (expected 143, got 72) [ 376.595564][ T8553] usb 3-1: config index 2 descriptor too short (expected 143, got 72) [ 376.609081][ T8553] usb 3-1: config index 3 descriptor too short (expected 143, got 72) [ 376.624573][ T8553] usb 3-1: config index 4 descriptor too short (expected 143, got 72) [ 376.635229][ T8553] usb 3-1: config index 5 descriptor too short (expected 143, got 72) [ 376.652278][ T8553] usb 3-1: config index 6 descriptor too short (expected 143, got 72) [ 376.662144][ T8553] usb 3-1: config index 7 descriptor too short (expected 143, got 72) [ 376.673353][ T8553] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.683263][ T8553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.692847][ T8553] usb 3-1: Product: syz [ 376.697095][ T8553] usb 3-1: Manufacturer: syz [ 376.702719][ T8553] usb 3-1: SerialNumber: syz [ 376.715392][ T8553] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 376.731547][ T5859] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.774353][T11246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.796703][ T8564] usb 4-1: USB disconnect, device number 61 [ 376.829714][ T979] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 377.029741][ T979] usb 5-1: device descriptor read/64, error -71 [ 377.140831][ T979] usb usb5-port1: attempt power cycle [ 377.164505][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.177159][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.193183][ T8556] usb 3-1: USB disconnect, device number 43 [ 377.400241][ T8564] usb 1-1: USB disconnect, device number 59 [ 377.506060][ T979] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 377.565127][ T979] usb 5-1: device descriptor read/8, error -71 [ 377.629958][ T8553] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 377.769828][ T5859] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 377.791375][ T8553] usb 4-1: Using ep0 maxpacket: 32 [ 377.806539][T11263] fuse: Bad value for 'fd' [ 377.811283][ T5859] ath9k_htc: Failed to initialize the device [ 377.817308][ T979] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 377.826178][ T8553] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.848416][ T8556] usb 3-1: ath9k_htc: USB layer deinitialized [ 377.859410][T11263] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 377.859717][ T8564] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 377.869743][ T8553] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.883071][ T979] usb 5-1: device descriptor read/8, error -71 [ 377.921617][ T8553] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 377.944761][ T8553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.956893][ T8553] usb 4-1: config 0 descriptor?? [ 378.000413][T11267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.010396][ T979] usb usb5-port1: unable to enumerate USB device [ 378.183312][ T8564] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.337542][ T8564] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.377255][ T8564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.444022][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'. [ 378.459981][ T8564] usb 1-1: config 0 descriptor?? [ 378.494852][ T8564] pwc: Askey VC010 type 2 USB webcam detected. [ 378.812326][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.818926][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.987930][ T8564] pwc: recv_control_msg error -32 req 02 val 2b00 [ 378.996771][ T8564] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.005660][ T8564] pwc: recv_control_msg error -32 req 02 val 2c00 [ 379.025554][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.034704][ T8564] pwc: recv_control_msg error -32 req 04 val 1000 [ 379.042096][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.289068][ T8564] pwc: recv_control_msg error -32 req 04 val 1300 [ 379.298013][ T8564] pwc: recv_control_msg error -32 req 04 val 1400 [ 379.305308][ T8564] pwc: recv_control_msg error -32 req 02 val 2000 [ 379.514264][ T8564] pwc: recv_control_msg error -71 req 04 val 1500 [ 379.523896][ T8564] pwc: recv_control_msg error -71 req 02 val 2500 [ 379.600676][ T8564] pwc: recv_control_msg error -71 req 02 val 2400 [ 379.618589][ T8564] pwc: recv_control_msg error -71 req 02 val 2600 [ 379.635424][ T8564] pwc: recv_control_msg error -71 req 02 val 2900 [ 379.656985][ T8564] pwc: recv_control_msg error -71 req 02 val 2800 [ 379.677420][ T8564] pwc: recv_control_msg error -71 req 04 val 1100 [ 379.708144][ T8564] pwc: recv_control_msg error -71 req 04 val 1200 [ 379.755372][ T8564] pwc: Registered as video103. [ 379.777915][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 379.788218][ T8564] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 379.844314][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.865985][ T8564] usb 1-1: USB disconnect, device number 60 [ 379.881647][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.252829][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 380.792856][ T8556] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 380.805153][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.828620][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.013218][ T8556] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 381.025822][T11305] support for the xor transformation has been removed. [ 381.034482][ T8556] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.046023][ T8556] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.102789][ T8556] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.139812][ T8556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.215652][ T8556] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.282379][ T8556] usb 3-1: invalid MIDI out EP 0 [ 381.487500][ T8556] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 381.597887][ T5920] usb 3-1: USB disconnect, device number 44 [ 381.606153][T11325] delete_channel: no stack [ 381.916896][ T8553] usbhid 4-1:0.0: can't add hid device: -71 [ 382.059696][ T8553] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 382.149855][ T8553] usb 4-1: USB disconnect, device number 62 [ 382.459706][ T8553] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 382.724938][ T8553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.735372][ T8553] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 382.747034][ T8553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.836715][ T8553] usb 4-1: config 0 descriptor?? [ 382.851441][ T8553] pwc: Askey VC010 type 2 USB webcam detected. [ 383.291447][ T8553] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.305909][ T8553] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.342040][ T8553] pwc: recv_control_msg error -32 req 02 val 2c00 [ 383.384703][ T8553] pwc: recv_control_msg error -32 req 04 val 1000 [ 383.402793][ T8553] pwc: recv_control_msg error -32 req 04 val 1300 [ 383.416340][ T8553] pwc: recv_control_msg error -32 req 04 val 1400 [ 383.449825][ T8553] pwc: recv_control_msg error -32 req 02 val 2000 [ 383.458867][ T8553] pwc: recv_control_msg error -32 req 02 val 2100 [ 383.469209][ T8553] pwc: recv_control_msg error -32 req 04 val 1500 [ 383.477261][ T8553] pwc: recv_control_msg error -32 req 02 val 2500 [ 383.487308][ T8553] pwc: recv_control_msg error -32 req 02 val 2400 [ 383.639722][ T8556] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 383.712922][T11332] pim6reg: entered allmulticast mode [ 383.740998][ T8553] pwc: recv_control_msg error -71 req 02 val 2900 [ 383.781641][ T8553] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.829403][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'. [ 383.893541][ T8556] usb 3-1: Using ep0 maxpacket: 16 [ 383.903913][ T8553] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.925376][ T8556] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.945281][ T8553] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.963969][ T5920] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 384.053824][ T8556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.065182][ T8553] pwc: Registered as video103. [ 384.082565][ T8553] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 384.108011][ T8556] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 384.153141][ T8553] usb 4-1: USB disconnect, device number 63 [ 384.159292][ T8556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.187689][ T8556] usb 3-1: Product: syz [ 384.222577][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 384.364916][ T8556] usb 3-1: Manufacturer: syz [ 384.439739][ T8556] usb 3-1: SerialNumber: syz [ 384.503125][ T8556] usb 3-1: config 0 descriptor?? [ 384.521536][ T8556] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 384.533463][ T8556] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 385.145121][ T8556] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 385.152730][ T8556] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 385.705252][ T8564] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 385.776338][ T8556] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 385.872808][ T8556] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 385.972450][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.027317][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.049929][ T8553] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 386.188217][ T8564] usb 5-1: config 128 has an invalid interface number: 203 but max is 2 [ 386.197162][ T8564] usb 5-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 386.208050][ T8564] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 386.219042][ T8564] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 3 [ 386.241881][ T8564] usb 5-1: config 128 has no interface number 0 [ 386.251007][ T8564] usb 5-1: config 128 interface 203 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 386.267868][ T8564] usb 5-1: config 128 interface 203 has no altsetting 0 [ 386.278489][ T8564] usb 5-1: New USB device found, idVendor=11f5, idProduct=0001, bcdDevice=c8.b2 [ 386.280465][ T8553] usb 4-1: Using ep0 maxpacket: 16 [ 386.293038][ T8564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.311112][ T8564] usb 5-1: Product: ь [ 386.315482][ T8564] usb 5-1: Manufacturer:   [ 386.321908][ T8564] usb 5-1: SerialNumber: 岪잰䰺ꉳ䌻휢ﶙ剪摂팿ᯌ️莐ᆞ眠齒赢ꘖ䷏⇻玕䁠ﾜ౐ [ 386.360779][ T8556] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 386.385362][ T8556] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 386.393275][ T8556] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 386.402104][ T8553] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.410438][ T8553] usb 4-1: config 0 has no interface number 0 [ 386.416734][ T8556] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 386.426674][ T8553] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 386.446123][ T8556] usb 3-1: USB disconnect, device number 45 [ 386.456118][ T8553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.512177][ T8553] usb 4-1: Product: syz [ 386.525972][ T8553] usb 4-1: Manufacturer: syz [ 386.535977][ T8553] usb 4-1: SerialNumber: syz [ 386.557319][ T8564] pl2303 5-1:128.203: required endpoints missing [ 386.567726][ T8553] usb 4-1: config 0 descriptor?? [ 386.568034][ T8564] usb 5-1: USB disconnect, device number 68 [ 386.609355][ T8553] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 386.855439][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.913726][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 386.947798][ T5920] usb 1-1: can't read configurations, error -71 [ 387.144432][ T8553] gspca_spca1528: reg_w err -110 [ 387.170831][ T8553] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 387.252237][T11393] macsec1: entered promiscuous mode [ 387.265479][T11393] macvlan1: entered promiscuous mode [ 387.579967][ T8564] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 387.729677][ T8564] usb 3-1: Using ep0 maxpacket: 16 [ 387.736331][ T8564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.747694][ T8564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.757561][ T8564] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.770986][ T8564] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 387.780120][ T8564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.792945][ T8564] usb 3-1: config 0 descriptor?? [ 388.211326][ T8564] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 388.384211][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.402663][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.449756][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.457414][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.469270][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.479443][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.487791][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.502578][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.519188][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.537749][ T8553] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 388.555585][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 388.562080][ T8553] hid-generic 0001:0000:0000.000D: hidraw1: HID v0.00 Device [] on [ 388.582862][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 388.654177][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.682446][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.999702][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.011769][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.798957][ T8553] usb 4-1: USB disconnect, device number 64 [ 389.868854][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1481'. [ 389.981448][ T5920] usb 3-1: USB disconnect, device number 46 [ 390.019782][ T8556] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 390.130141][ T5920] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 390.169715][ T8556] usb 5-1: Using ep0 maxpacket: 8 [ 390.177698][ T8556] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.199240][ T8556] usb 5-1: config 5 has an invalid interface number: 184 but max is 3 [ 390.216685][ T8556] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 390.238810][ T8556] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 390.265984][ T8556] usb 5-1: config 5 has no interface number 0 [ 390.279389][ T8556] usb 5-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 390.299975][ T5920] usb 3-1: Invalid ep0 maxpacket: 16 [ 390.317342][ T8556] usb 5-1: config 5 interface 184 has no altsetting 0 [ 390.503295][ T8556] usb 5-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 390.512851][ T8556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.521218][ T8556] usb 5-1: Product: syz [ 390.533963][ T8556] usb 5-1: Manufacturer: syz [ 390.553944][ T8556] usb 5-1: SerialNumber: syz [ 390.559687][ T5920] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 390.667454][ T8553] hid-generic 0002:0004:0009.000E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 390.758110][ T5920] usb 3-1: Invalid ep0 maxpacket: 16 [ 390.770520][ T5920] usb usb3-port1: attempt power cycle [ 390.806341][T11420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.886517][T11433] fido_id[11433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.947326][T11420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.980417][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.005123][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.115894][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 391.139817][ T5920] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 391.162970][ T8556] ftdi_sio 5-1:5.184: FTDI USB Serial Device converter detected [ 391.171757][ T8556] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 391.180248][ T5920] usb 3-1: Invalid ep0 maxpacket: 16 [ 391.201247][ T8556] usb 5-1: USB disconnect, device number 69 [ 391.218207][ T8556] ftdi_sio 5-1:5.184: device disconnected [ 391.235720][T11445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.248353][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1485'. [ 391.259612][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1485'. [ 391.331919][ T5920] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 391.362473][ T5920] usb 3-1: Invalid ep0 maxpacket: 16 [ 391.368226][ T5920] usb usb3-port1: unable to enumerate USB device [ 391.727593][T11451] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 391.742153][T11451] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 392.661205][T11469] loop6: detected capacity change from 0 to 7 [ 392.675505][T11469] Dev loop6: unable to read RDB block 7 [ 392.681186][T11469] loop6: AHDI p1 p2 p3 [ 392.685499][T11469] loop6: partition table partially beyond EOD, truncated [ 392.759800][T11469] loop6: p1 start 1405162169 is beyond EOD, truncated [ 392.770717][T11469] loop6: p2 start 1203593728 is beyond EOD, truncated [ 393.233217][T11484] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 393.509648][ T5920] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 393.664122][ T5920] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 393.683617][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.706086][ T5920] usb 5-1: Product: syz [ 393.712533][ T5920] usb 5-1: Manufacturer: syz [ 393.721797][ T5920] usb 5-1: SerialNumber: syz [ 393.753621][ T5920] usb 5-1: config 0 descriptor?? [ 393.772702][ T5920] ch341 5-1:0.0: ch341-uart converter detected [ 393.919612][ T5859] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 394.084986][ T5859] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 394.093235][ T5859] usb 3-1: config 0 has no interface number 0 [ 394.099633][ T5859] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 394.111155][ T5859] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.135756][ T5859] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 394.166882][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.203082][ T5859] usb 3-1: Product: syz [ 394.253998][ T5859] usb 3-1: Manufacturer: syz [ 394.263113][ T5859] usb 3-1: SerialNumber: syz [ 394.286251][ T5859] usb 3-1: config 0 descriptor?? [ 394.305676][ T5859] ums-karma 3-1:0.46: USB Mass Storage device detected [ 394.373914][ T5859] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 394.534891][T11495] batadv1: entered promiscuous mode [ 394.581472][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.605753][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.688316][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.702345][ T5952] usb 3-1: USB disconnect, device number 51 [ 394.719257][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.740236][ T5920] usb 5-1: failed to send control message: -71 [ 394.814633][ T5920] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 394.824967][T11511] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 394.837761][ T5920] usb 5-1: USB disconnect, device number 70 [ 394.865678][ T5920] ch341 5-1:0.0: device disconnected [ 394.867582][T11511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.043612][T11516] loop6: detected capacity change from 0 to 7 [ 395.053579][ T6310] Dev loop6: unable to read RDB block 7 [ 395.060748][ T6310] loop6: AHDI p1 p2 p3 [ 395.065128][ T6310] loop6: partition table partially beyond EOD, truncated [ 395.074096][ T6310] loop6: p1 start 1405162169 is beyond EOD, truncated [ 395.082260][ T6310] loop6: p2 start 1203593728 is beyond EOD, truncated [ 395.090656][T11516] Dev loop6: unable to read RDB block 7 [ 395.096755][T11516] loop6: AHDI p1 p2 p3 [ 395.103057][T11516] loop6: partition table partially beyond EOD, truncated [ 395.117005][T11516] loop6: p1 start 1405162169 is beyond EOD, truncated [ 395.201995][T11516] loop6: p2 start 1203593728 is beyond EOD, truncated [ 395.331543][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.413072][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.443568][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.463159][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.809790][ T5920] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 395.999903][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 396.216909][T11541] syzkaller1: entered promiscuous mode [ 396.228772][T11541] syzkaller1: entered allmulticast mode [ 396.295552][T11537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.103863][T11552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.876289][T11559] loop6: detected capacity change from 0 to 7 [ 397.892198][ T6310] Dev loop6: unable to read RDB block 7 [ 397.904579][ T6310] loop6: AHDI p3 p4 [ 397.918952][ T6310] loop6: partition table partially beyond EOD, truncated [ 397.933189][T11560] netdevsim netdevsim3: Direct firmware load for nel/config failed with error -2 [ 397.947218][ T6310] loop6: p3 start 1886353253 is beyond EOD, truncated [ 397.959767][T11560] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/config [ 398.000192][T11561] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 398.018045][T11561] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1515'. [ 398.062493][T11559] Dev loop6: unable to read RDB block 7 [ 398.076073][T11559] loop6: AHDI p3 p4 [ 398.085175][T11559] loop6: partition table partially beyond EOD, truncated [ 398.102534][T11559] loop6: p3 start 1886353253 is beyond EOD, truncated [ 398.331690][T11555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 398.338278][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.346260][T11555] vhci_hcd vhci_hcd.0: Device attached [ 398.460133][T11567] syz.1.1518: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 398.534349][T11562] vhci_hcd: connection closed [ 398.536668][ T1027] vhci_hcd: stop threads [ 398.558560][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.1.1518 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 398.558592][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.558613][T11567] Call Trace: [ 398.558621][T11567] [ 398.558630][T11567] dump_stack_lvl+0x189/0x250 [ 398.558657][T11567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.558673][T11567] ? __pfx__printk+0x10/0x10 [ 398.558692][T11567] ? lock_release+0x4b/0x3e0 [ 398.558726][T11567] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 398.558750][T11567] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 398.558773][T11567] warn_alloc+0x214/0x310 [ 398.558802][T11567] ? __pfx_warn_alloc+0x10/0x10 [ 398.558826][T11567] ? __get_vm_area_node+0x28f/0x300 [ 398.558847][T11567] ? hash_netport_create+0x358/0xfe0 [ 398.558871][T11567] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 398.558899][T11567] ? do_syscall_64+0xfa/0x3b0 [ 398.558940][T11567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.558963][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.558977][T11567] ? hash_netport_create+0x358/0xfe0 [ 398.558989][T11567] ? hash_netport_create+0x358/0xfe0 [ 398.559006][T11567] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 398.559035][T11567] ? hash_netport_create+0x358/0xfe0 [ 398.559053][T11567] ? hash_netport_create+0x2fe/0xfe0 [ 398.559072][T11567] hash_netport_create+0x358/0xfe0 [ 398.559093][T11567] ? __nla_parse+0x40/0x60 [ 398.559115][T11567] ? __pfx_hash_netport_create+0x10/0x10 [ 398.559128][T11567] ip_set_create+0xa97/0x1940 [ 398.559145][T11567] ? ip_set_create+0x4a2/0x1940 [ 398.559175][T11567] ? __pfx_ip_set_create+0x10/0x10 [ 398.559195][T11567] ? __kasan_kmalloc+0x93/0xb0 [ 398.559230][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.559247][T11567] ? lock_release+0x4b/0x3e0 [ 398.559266][T11567] ? __nla_parse+0x40/0x60 [ 398.559288][T11567] nfnetlink_rcv_msg+0xb4d/0x1130 [ 398.559322][T11567] ? save_fpregs_to_fpstate+0xa3/0x210 [ 398.559348][T11567] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 398.559380][T11567] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 398.559411][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.559424][T11567] ? trace_sched_exit_tp+0x36/0x110 [ 398.559452][T11567] netlink_rcv_skb+0x208/0x470 [ 398.559482][T11567] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 398.559506][T11567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.559543][T11567] ? bpf_lsm_capable+0x9/0x20 [ 398.559569][T11567] ? security_capable+0x7e/0x2e0 [ 398.559600][T11567] nfnetlink_rcv+0x26a/0x2520 [ 398.559623][T11567] ? is_bpf_text_address+0x26/0x2b0 [ 398.559654][T11567] ? kernel_text_address+0xa5/0xe0 [ 398.559682][T11567] ? __kernel_text_address+0xd/0x40 [ 398.559708][T11567] ? unwind_get_return_address+0x4d/0x90 [ 398.559731][T11567] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.559755][T11567] ? arch_stack_walk+0xfc/0x150 [ 398.559785][T11567] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 398.559811][T11567] ? stack_depot_save_flags+0x40/0x860 [ 398.559838][T11567] ? __pfx_stack_trace_save+0x10/0x10 [ 398.559864][T11567] ? kasan_save_track+0x4f/0x80 [ 398.559887][T11567] ? kasan_save_track+0x3e/0x80 [ 398.559910][T11567] ? __kasan_slab_alloc+0x6c/0x80 [ 398.559936][T11567] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 398.559963][T11567] ? kmalloc_reserve+0xbd/0x290 [ 398.559994][T11567] ? __netlink_lookup+0xbd/0x810 [ 398.560010][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560030][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560049][T11567] ? lock_release+0x4b/0x3e0 [ 398.560082][T11567] ? net_generic+0x1e/0x240 [ 398.560104][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560124][T11567] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.560151][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560169][T11567] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.560198][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560216][T11567] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.560244][T11567] ? lock_release+0x4b/0x3e0 [ 398.560271][T11567] ? net_generic+0x1e/0x240 [ 398.560292][T11567] ? net_generic+0x1e/0x240 [ 398.560326][T11567] netlink_unicast+0x82c/0x9e0 [ 398.560357][T11567] ? __pfx_netlink_unicast+0x10/0x10 [ 398.560383][T11567] ? netlink_sendmsg+0x642/0xb30 [ 398.560411][T11567] ? skb_put+0x11b/0x210 [ 398.560430][T11567] netlink_sendmsg+0x805/0xb30 [ 398.560464][T11567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.560494][T11567] ? futex_unqueue+0x22/0x240 [ 398.560516][T11567] ? aa_sock_msg_perm+0xf1/0x1d0 [ 398.560535][T11567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.560558][T11567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.560587][T11567] __sock_sendmsg+0x219/0x270 [ 398.560614][T11567] ____sys_sendmsg+0x505/0x830 [ 398.560638][T11567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.560662][T11567] ? import_iovec+0x74/0xa0 [ 398.560686][T11567] ___sys_sendmsg+0x21f/0x2a0 [ 398.560707][T11567] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.560729][T11567] ? futex_wait+0x285/0x360 [ 398.560770][T11567] ? __fget_files+0x2a/0x420 [ 398.560787][T11567] ? __fget_files+0x3a0/0x420 [ 398.560809][T11567] __x64_sys_sendmsg+0x19b/0x260 [ 398.560829][T11567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.560855][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560877][T11567] ? rcu_is_watching+0x15/0xb0 [ 398.560898][T11567] do_syscall_64+0xfa/0x3b0 [ 398.560928][T11567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.560948][T11567] ? clear_bhb_loop+0x60/0xb0 [ 398.560969][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.560997][T11567] RIP: 0033:0x7efc6a98ebe9 [ 398.561015][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.561033][T11567] RSP: 002b:00007efc6b86b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.561056][T11567] RAX: ffffffffffffffda RBX: 00007efc6abb5fa0 RCX: 00007efc6a98ebe9 [ 398.561071][T11567] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 398.561084][T11567] RBP: 00007efc6aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 398.561096][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.561108][T11567] R13: 00007efc6abb6038 R14: 00007efc6abb5fa0 R15: 00007efc6acdfa28 [ 398.561131][T11567] [ 398.563556][ T1027] vhci_hcd: release socket [ 398.584666][T11567] Mem-Info: [ 399.004525][ T1027] vhci_hcd: disconnect device [ 399.349823][ T5952] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 399.349860][T11567] active_anon:12498 inactive_anon:0 isolated_anon:0 [ 399.349860][T11567] active_file:18780 inactive_file:40004 isolated_file:0 [ 399.349860][T11567] unevictable:768 dirty:227 writeback:0 [ 399.349860][T11567] slab_reclaimable:11358 slab_unreclaimable:100591 [ 399.349860][T11567] mapped:39566 shmem:7083 pagetables:1423 [ 399.349860][T11567] sec_pagetables:0 bounce:0 [ 399.349860][T11567] kernel_misc_reclaimable:0 [ 399.349860][T11567] free:1294562 free_pcp:15604 free_cma:0 [ 399.410210][T11567] Node 0 active_anon:50292kB inactive_anon:0kB active_file:74984kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158168kB dirty:904kB writeback:0kB shmem:26796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13008kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.454163][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 399.457794][T11567] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.506235][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 399.519080][ T5920] usb 5-1: can't read configurations, error -71 [ 399.561887][T11567] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.809644][T11567] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 399.841419][T11567] Node 0 DMA32 free:1280192kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44844kB inactive_anon:0kB active_file:74984kB inactive_file:158236kB unevictable:1536kB writepending:904kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:39360kB local_pcp:21108kB free_cma:0kB [ 399.962736][T11567] lowmem_reserve[]: 0 0 1 1 1 [ 400.026978][T11567] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 400.062443][ T8565] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 400.088694][T11567] lowmem_reserve[]: 0 0 0 0 0 [ 400.099192][T11567] Node 1 Normal free:3888688kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23104kB local_pcp:12128kB free_cma:0kB [ 400.181979][T11567] lowmem_reserve[]: 0 0 0 0 0 [ 400.207232][T11567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.223588][ T8565] usb 3-1: device descriptor read/64, error -71 [ 400.263656][T11567] Node 0 DMA32: 401*4kB (UME) 839*8kB (UME) 305*16kB (UME) 359*32kB (UME) 225*64kB (UME) 206*128kB (UM) 70*256kB (UME) 37*512kB (UME) 16*1024kB (UME) 3*2048kB (U) 282*4096kB (UME) = 1279916kB [ 400.365296][T11567] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 400.429036][T11590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1525'. [ 400.438144][T11567] Node 1 Normal: 200*4kB (UE) 60*8kB (UME) 47*16kB (UE) 158*32kB (UME) 46*64kB (UME) 14*128kB (UME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (M) 2*2048kB (ME) 944*4096kB (M) = 3888688kB [ 400.469707][ T8565] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 400.502426][T11567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.535012][T11567] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 400.544833][T11567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.555068][T11567] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 400.567166][T11567] 60180 total pagecache pages [ 400.572865][T11567] 1 pages in swap cache [ 400.577184][T11567] Free swap = 118852kB [ 400.581919][T11567] Total swap = 124996kB [ 400.586481][T11567] 2097051 pages RAM [ 400.590533][T11567] 0 pages HighMem/MovableOnly [ 400.595635][T11567] 425656 pages reserved [ 400.599947][T11567] 0 pages cma reserved [ 400.634559][ T8565] usb 3-1: device descriptor read/64, error -71 [ 400.739092][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1522'. [ 400.769143][ T8565] usb usb3-port1: attempt power cycle [ 401.209775][ T8565] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 401.231301][ T8565] usb 3-1: device descriptor read/8, error -71 [ 401.499973][ T8565] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 401.580387][ T8565] usb 3-1: device descriptor read/8, error -71 [ 401.720834][ T8565] usb usb3-port1: unable to enumerate USB device [ 401.963024][T11618] loop6: detected capacity change from 0 to 7 [ 402.002031][T11618] Dev loop6: unable to read RDB block 7 [ 402.027471][T11618] loop6: AHDI p1 p2 p3 [ 402.036202][T11618] loop6: partition table partially beyond EOD, truncated [ 402.069707][T11618] loop6: p1 start 1405162169 is beyond EOD, truncated [ 402.086312][T11618] loop6: p2 start 1203593728 is beyond EOD, truncated [ 402.519608][ T5859] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 402.709645][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 402.716243][ T5859] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 402.744079][ T5859] usb 1-1: config 0 has no interface number 0 [ 402.774567][ T5859] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.799130][ T5859] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 402.812606][T11627] loop6: detected capacity change from 0 to 7 [ 402.818750][ T5859] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.831538][T11627] Dev loop6: unable to read RDB block 7 [ 402.838082][T11627] loop6: AHDI p3 p4 [ 402.844390][T11627] loop6: partition table partially beyond EOD, truncated [ 402.851707][ T5859] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.874602][T11627] loop6: p3 start 1886353253 is beyond EOD, truncated [ 402.898760][ T5859] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 403.038613][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.153043][ T5859] usb 1-1: config 0 descriptor?? [ 403.203936][ T5859] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 403.616474][T11645] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 403.660186][T11651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.759810][T11651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.827958][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 403.866782][ T5920] usb 1-1: USB disconnect, device number 63 [ 403.866930][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 403.883601][ T5920] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 403.910550][T11652] input: syz0 as /devices/virtual/input/input31 [ 404.479725][ T5952] vhci_hcd: vhci_device speed not set [ 404.523581][ T8553] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 404.710859][ T8553] usb 5-1: config 0 has no interfaces? [ 404.729714][ T5920] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 404.741948][ T8553] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 404.783974][ T8553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.811113][ T8553] usb 5-1: Product: syz [ 404.815578][ T8553] usb 5-1: Manufacturer: syz [ 404.822509][ T8553] usb 5-1: SerialNumber: syz [ 404.850073][ T8553] usb 5-1: config 0 descriptor?? [ 404.963992][T11679] geneve3: entered promiscuous mode [ 404.975260][T11679] geneve3: entered allmulticast mode [ 405.050544][T11686] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1552'. [ 405.100752][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.109702][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.152794][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.161944][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.208896][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 405.216560][T11664] support for the xor transformation has been removed. [ 405.273424][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.315479][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.358284][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 405.441698][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.580883][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 405.606712][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 405.644397][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 405.663143][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 405.689019][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.732483][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 405.825145][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 405.874714][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 405.904880][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 405.927357][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.966457][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.051661][ T30] audit: type=1326 audit(1755385919.693:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc6a98ebe9 code=0x7ff00000 [ 406.090671][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 406.142913][ T5920] usb 4-1: string descriptor 0 read error: -22 [ 406.202069][ T5920] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 406.231007][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.269805][ T30] audit: type=1326 audit(1755385919.693:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc6a98ebe9 code=0x7ff00000 [ 406.293919][ T5920] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 406.360525][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.381461][ T30] audit: type=1326 audit(1755385919.693:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc6a98ebe9 code=0x7ff00000 [ 406.404995][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.931867][T11712] kvm: emulating exchange as write [ 407.226953][ T5920] usb 5-1: USB disconnect, device number 73 [ 407.389854][ T8553] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 407.541376][ T8553] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 407.548942][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.561119][ T8553] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.573464][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.585152][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.606396][ T8553] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 407.614468][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.626687][ T8553] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.639902][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.651758][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.665541][ T8553] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 407.675529][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.686986][ T8553] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.701356][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.713428][ T8553] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.736126][ T8553] usb 1-1: string descriptor 0 read error: -22 [ 407.742634][ T8553] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 407.752178][ T8553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.778253][ T8553] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 408.406733][T11724] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 408.415351][T11724] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1561'. [ 409.468139][T11732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.719793][ T5920] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 409.774028][ T8553] usb 4-1: USB disconnect, device number 65 [ 409.784724][T11715] adutux: adu_open - error, can't find device for minor 0 [ 409.823164][ T5859] usb 1-1: USB disconnect, device number 64 [ 409.900856][ T5920] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.925969][ T5920] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.993760][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.044631][ T5920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 410.081831][T11744] batadv0: entered promiscuous mode [ 410.150677][ T5920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 410.261155][ T5920] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.307014][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1569'. [ 410.316847][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.327190][T11748] bridge0: entered promiscuous mode [ 410.335029][T11748] bridge0: port 3(macvlan2) entered blocking state [ 410.343696][T11748] bridge0: port 3(macvlan2) entered disabled state [ 410.352214][T11748] macvlan2: entered allmulticast mode [ 410.361734][T11748] bridge0: entered allmulticast mode [ 410.373667][T11748] macvlan2: left allmulticast mode [ 410.377392][ T5920] usb 5-1: Product: syz [ 410.380955][T11748] bridge0: left allmulticast mode [ 410.389508][T11748] bridge0: left promiscuous mode [ 410.404172][ T5920] usb 5-1: Manufacturer: syz [ 410.459056][ T5920] cdc_wdm 5-1:1.0: skipping garbage [ 410.483139][ T5920] cdc_wdm 5-1:1.0: skipping garbage [ 410.550364][ T5920] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 410.610602][ T5920] cdc_wdm 5-1:1.0: Unknown control protocol [ 410.667972][T11760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.703654][T11760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.784811][T11760] support for the xor transformation has been removed. [ 410.869649][ T5952] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 411.039701][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 411.047119][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.116438][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.131298][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 411.141309][ T5952] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 411.152798][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.167692][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.177352][ T5952] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.186208][ T5952] usb 1-1: Manufacturer: syz [ 411.205278][ T5952] usb 1-1: config 0 descriptor?? [ 411.369722][ T5866] Bluetooth: hci3: command 0x0419 tx timeout [ 411.407209][ T5920] usb 5-1: USB disconnect, device number 74 [ 411.417099][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.492172][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.523174][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.623028][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.700804][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.839925][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.848562][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.861039][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.938407][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.021527][ T30] audit: type=1326 audit(1755385925.673:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.4.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74b38ebe9 code=0x0 [ 412.052141][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.225061][T11773] could not allocate digest TFM handle [ 412.269600][ T5952] rc_core: IR keymap rc-hauppauge not found [ 412.337530][ T5952] Registered IR keymap rc-empty [ 412.349730][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.375917][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.450312][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 412.526466][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 412.609835][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.649653][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.699905][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.729836][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.819722][ T8550] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 412.849640][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.923220][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 412.970426][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.021596][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.029808][ T8550] usb 3-1: Using ep0 maxpacket: 32 [ 413.038684][ T8550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.050117][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.057365][ T8550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.077926][ T8550] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.087120][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 413.114177][ T8550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.128926][ T5952] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 413.131823][ T5859] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 413.178354][ T8550] usb 3-1: config 0 descriptor?? [ 413.186890][ T5952] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.254394][ T8550] hub 3-1:0.0: USB hub found [ 413.277341][ T5952] usb 1-1: USB disconnect, device number 65 [ 413.309662][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 413.343152][ T5859] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 413.387503][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.407980][ T5859] usb 5-1: Product: syz [ 413.421694][ T5859] usb 5-1: Manufacturer: syz [ 413.433690][ T5859] usb 5-1: SerialNumber: syz [ 413.451071][ T5859] usb 5-1: config 0 descriptor?? [ 413.461967][ T5859] gspca_main: sq930x-2.14.0 probing 2770:930c [ 413.471096][ T8550] hub 3-1:0.0: 1 port detected [ 413.735854][T11806] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1582'. [ 413.874845][T11796] sctp: [Deprecated]: syz.4.1580 (pid 11796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.874845][T11796] Use struct sctp_sack_info instead [ 414.170176][ T5859] gspca_sq930x: ucbus_write failed -110 [ 414.246423][ T8550] hub 3-1:0.0: activate --> -90 [ 414.410342][ T5859] gspca_sq930x: Sensor ov9630 not yet treated [ 414.422377][ T5859] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 414.729689][T11792] Bluetooth: hci3: command 0x0419 tx timeout [ 414.914052][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.924071][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.975865][ T5952] usb 3-1: USB disconnect, device number 56 [ 415.133991][ T8553] usb 5-1: USB disconnect, device number 75 [ 415.233070][T11825] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 415.258704][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.280500][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 415.328309][T11822] syz.0.1586: attempt to access beyond end of device [ 415.328309][T11822] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 415.779921][T11836] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 415.786504][T11836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.804559][T11836] vhci_hcd vhci_hcd.0: Device attached [ 415.827732][T11836] netlink: 'syz.0.1588': attribute type 21 has an invalid length. [ 415.865850][T11836] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1588'. [ 416.049666][ T8553] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 416.099714][ T5952] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 416.249753][ T5859] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 416.314774][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 416.339101][ T5952] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 416.347489][ T5952] usb 3-1: config 0 has no interface number 0 [ 416.369271][ T5952] usb 3-1: config 0 interface 89 has no altsetting 0 [ 416.381869][T11845] warning: `syz.3.1591' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 416.395688][ T5952] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 416.405474][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.420787][ T5952] usb 3-1: Product: syz [ 416.425167][ T5952] usb 3-1: Manufacturer: syz [ 416.430249][ T5952] usb 3-1: SerialNumber: syz [ 416.449286][ T5952] usb 3-1: config 0 descriptor?? [ 416.449685][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 416.465981][ T5952] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 416.475966][ T5952] em28xx 3-1:0.89: Video interface 89 found: bulk [ 416.482925][T11837] vhci_hcd: connection reset by peer [ 416.493468][ T13] vhci_hcd: stop threads [ 416.536749][ T13] vhci_hcd: release socket [ 416.538435][ T5859] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 416.542096][ T13] vhci_hcd: disconnect device [ 416.637374][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.649781][ T5920] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 416.812849][ T5920] usb 4-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 416.826355][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 416.833943][ T5859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.843142][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.856841][ T5859] usb 5-1: Product: syz [ 416.865701][ T5859] usb 5-1: Manufacturer: syz [ 416.870518][ T5920] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 416.880176][ T5859] usb 5-1: SerialNumber: syz [ 416.919684][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.950028][ T5920] usb 4-1: config 0 descriptor?? [ 417.108981][ T5952] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 417.580114][ T5920] usb 4-1: string descriptor 0 read error: -71 [ 417.594485][ T5920] uclogic 0003:256C:006E.000F: failed retrieving string descriptor #200: -71 [ 417.610102][ T5920] uclogic 0003:256C:006E.000F: failed retrieving pen parameters: -71 [ 417.618288][ T5920] uclogic 0003:256C:006E.000F: failed probing pen v2 parameters: -71 [ 417.627403][ T5920] uclogic 0003:256C:006E.000F: failed probing parameters: -71 [ 417.645086][ T5920] uclogic 0003:256C:006E.000F: probe with driver uclogic failed with error -71 [ 417.676506][ T5920] usb 4-1: USB disconnect, device number 66 [ 417.995884][T11869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.005105][T11869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.044597][T11869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.053863][T11869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.608649][ T5952] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 418.631110][ T5952] em28xx 3-1:0.89: board has no eeprom [ 418.696438][ T5952] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 418.704568][ T5952] em28xx 3-1:0.89: analog set to bulk mode. [ 418.741679][ T5920] em28xx 3-1:0.89: Registering V4L2 extension [ 418.791198][T11879] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 418.842954][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 418.876867][ T5920] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 418.891851][ T5920] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 418.907314][ T5920] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 418.972877][ T5952] usb 3-1: USB disconnect, device number 57 [ 418.987161][ T5920] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 419.001401][ T5952] em28xx 3-1:0.89: Disconnecting em28xx [ 419.007175][ T5920] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 419.014663][ T5920] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 419.022664][ T5920] em28xx 3-1:0.89: No AC97 audio processor [ 419.032061][ T5920] usb 3-1: Decoder not found [ 419.044690][T11879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.059106][ T5920] em28xx 3-1:0.89: failed to create media graph [ 419.119116][ T5859] usb 5-1: 0:2 : does not exist [ 419.147328][ T5859] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 419.156187][ T5920] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 419.189794][ T5859] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 419.206481][ T5874] syz_tun (unregistering): left allmulticast mode [ 419.236138][ T5859] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 419.260213][ T5920] em28xx 3-1:0.89: Registering snapshot button... [ 419.266315][T11884] ================================================================== [ 419.274765][T11884] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 419.282210][T11884] Read of size 8 at addr ffff8880577a0740 by task v4l_id/11884 [ 419.289762][T11884] [ 419.292094][T11884] CPU: 1 UID: 0 PID: 11884 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 419.292113][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.292123][T11884] Call Trace: [ 419.292129][T11884] [ 419.292136][T11884] dump_stack_lvl+0x189/0x250 [ 419.292157][T11884] ? rcu_is_watching+0x15/0xb0 [ 419.292172][T11884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.292188][T11884] ? rcu_is_watching+0x15/0xb0 [ 419.292202][T11884] ? lock_release+0x4b/0x3e0 [ 419.292224][T11884] ? __virt_addr_valid+0x1c8/0x5c0 [ 419.292243][T11884] ? __virt_addr_valid+0x4a5/0x5c0 [ 419.292262][T11884] print_report+0xca/0x240 [ 419.292276][T11884] ? v4l2_fh_open+0xc7/0x430 [ 419.292296][T11884] kasan_report+0x118/0x150 [ 419.292318][T11884] ? v4l2_fh_open+0xc7/0x430 [ 419.292340][T11884] v4l2_fh_open+0xc7/0x430 [ 419.292363][T11884] em28xx_v4l2_open+0x157/0x9a0 [ 419.292386][T11884] v4l2_open+0x20c/0x360 [ 419.292409][T11884] chrdev_open+0x4cc/0x5e0 [ 419.292432][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 419.292463][T11884] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 419.292488][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 419.292508][T11884] do_dentry_open+0x953/0x13f0 [ 419.292528][T11884] vfs_open+0x3b/0x340 [ 419.292541][T11884] ? path_openat+0x2ecd/0x3830 [ 419.292559][T11884] path_openat+0x2ee5/0x3830 [ 419.292575][T11884] ? arch_stack_walk+0xfc/0x150 [ 419.292598][T11884] ? stack_depot_save_flags+0x40/0x860 [ 419.292623][T11884] ? __pfx_path_openat+0x10/0x10 [ 419.292640][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.292662][T11884] do_filp_open+0x1fa/0x410 [ 419.292680][T11884] ? __pfx_do_filp_open+0x10/0x10 [ 419.292705][T11884] ? _raw_spin_unlock+0x28/0x50 [ 419.292723][T11884] ? alloc_fd+0x64c/0x6c0 [ 419.292747][T11884] do_sys_openat2+0x121/0x1c0 [ 419.292764][T11884] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.292779][T11884] ? lock_release+0x4b/0x3e0 [ 419.292802][T11884] ? do_user_addr_fault+0xc8a/0x1390 [ 419.292826][T11884] __x64_sys_openat+0x138/0x170 [ 419.292844][T11884] do_syscall_64+0xfa/0x3b0 [ 419.292866][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.292881][T11884] ? clear_bhb_loop+0x60/0xb0 [ 419.292897][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.292912][T11884] RIP: 0033:0x7f4a66aa7407 [ 419.292926][T11884] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 419.292940][T11884] RSP: 002b:00007fff99e3c5b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 419.292955][T11884] RAX: ffffffffffffffda RBX: 00007f4a671b7880 RCX: 00007f4a66aa7407 [ 419.292967][T11884] RDX: 0000000000000000 RSI: 00007fff99e3df1c RDI: ffffffffffffff9c [ 419.292977][T11884] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 419.292986][T11884] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 419.292995][T11884] R13: 00007fff99e3c800 R14: 00007f4a6731e000 R15: 000055c4b56634d8 [ 419.293012][T11884] [ 419.293018][T11884] [ 419.589788][T11884] Allocated by task 5920: [ 419.594123][T11884] kasan_save_track+0x3e/0x80 [ 419.598816][T11884] __kasan_kmalloc+0x93/0xb0 [ 419.603419][T11884] __kmalloc_cache_noprof+0x230/0x3d0 [ 419.608809][T11884] em28xx_v4l2_init+0x10b/0x2e70 [ 419.613847][T11884] em28xx_init_extension+0x11d/0x1c0 [ 419.619141][T11884] process_scheduled_works+0xade/0x17b0 [ 419.625571][T11884] worker_thread+0x8a0/0xda0 [ 419.630178][T11884] kthread+0x70e/0x8a0 [ 419.634258][T11884] ret_from_fork+0x3f9/0x770 [ 419.638853][T11884] ret_from_fork_asm+0x1a/0x30 [ 419.643639][T11884] [ 419.645969][T11884] Freed by task 5920: [ 419.650042][T11884] kasan_save_track+0x3e/0x80 [ 419.654736][T11884] kasan_save_free_info+0x46/0x50 [ 419.659777][T11884] __kasan_slab_free+0x5b/0x80 [ 419.664569][T11884] kfree+0x18e/0x440 [ 419.668491][T11884] em28xx_v4l2_init+0x1683/0x2e70 [ 419.673621][T11884] em28xx_init_extension+0x11d/0x1c0 [ 419.678933][T11884] process_scheduled_works+0xade/0x17b0 [ 419.684507][T11884] worker_thread+0x8a0/0xda0 [ 419.689127][T11884] kthread+0x70e/0x8a0 [ 419.693209][T11884] ret_from_fork+0x3f9/0x770 [ 419.697810][T11884] ret_from_fork_asm+0x1a/0x30 [ 419.702602][T11884] [ 419.704943][T11884] The buggy address belongs to the object at ffff8880577a0000 [ 419.704943][T11884] which belongs to the cache kmalloc-8k of size 8192 [ 419.719019][T11884] The buggy address is located 1856 bytes inside of [ 419.719019][T11884] freed 8192-byte region [ffff8880577a0000, ffff8880577a2000) [ 419.733281][T11884] [ 419.735639][T11884] The buggy address belongs to the physical page: [ 419.742066][T11884] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x577a0 [ 419.750912][T11884] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 419.759422][T11884] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 419.767321][T11884] page_type: f5(slab) [ 419.771333][T11884] raw: 00fff00000000040 ffff88801a442280 ffffea0001e03600 dead000000000003 [ 419.780109][T11884] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 419.788706][T11884] head: 00fff00000000040 ffff88801a442280 ffffea0001e03600 dead000000000003 [ 419.797385][T11884] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 419.806064][T11884] head: 00fff00000000003 ffffea00015de801 00000000ffffffff 00000000ffffffff [ 419.814830][T11884] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 419.823517][T11884] page dumped because: kasan: bad access detected [ 419.829958][T11884] page_owner tracks the page as allocated [ 419.835691][T11884] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5876, tgid 5876 (syz-executor), ts 71826540804, free_ts 26765595826 [ 419.855432][T11884] post_alloc_hook+0x240/0x2a0 [ 419.860229][T11884] get_page_from_freelist+0x21e4/0x22c0 [ 419.865790][T11884] __alloc_frozen_pages_noprof+0x181/0x370 [ 419.871609][T11884] alloc_pages_mpol+0x232/0x4a0 [ 419.876476][T11884] allocate_slab+0x8a/0x370 [ 419.881009][T11884] ___slab_alloc+0xbeb/0x1410 [ 419.885704][T11884] __kvmalloc_node_noprof+0x429/0x5f0 [ 419.891095][T11884] pfifo_fast_init+0x363/0x6b0 [ 419.895882][T11884] qdisc_create_dflt+0x13b/0x4e0 [ 419.900840][T11884] dev_activate+0x378/0x1150 [ 419.905710][T11884] __dev_open+0x69c/0x880 [ 419.910143][T11884] __dev_change_flags+0x1ea/0x6d0 [ 419.915177][T11884] netif_change_flags+0x88/0x1a0 [ 419.920125][T11884] do_setlink+0xc55/0x41c0 [ 419.924555][T11884] rtnl_newlink+0x160b/0x1c70 [ 419.929253][T11884] rtnetlink_rcv_msg+0x7cc/0xb70 [ 419.934212][T11884] page last free pid 1 tgid 1 stack trace: [ 419.940021][T11884] __free_frozen_pages+0xbc4/0xd30 [ 419.945160][T11884] free_contig_range+0x1bd/0x4a0 [ 419.950111][T11884] destroy_args+0x64/0x4a0 [ 419.954559][T11884] debug_vm_pgtable+0x39f/0x3b0 [ 419.959446][T11884] do_one_initcall+0x233/0x820 [ 419.964222][T11884] do_initcall_level+0x104/0x190 [ 419.969173][T11884] do_initcalls+0x59/0xa0 [ 419.973528][T11884] kernel_init_freeable+0x334/0x4b0 [ 419.978744][T11884] kernel_init+0x1d/0x1d0 [ 419.983089][T11884] ret_from_fork+0x3f9/0x770 [ 419.987711][T11884] ret_from_fork_asm+0x1a/0x30 [ 419.992497][T11884] [ 419.994830][T11884] Memory state around the buggy address: [ 420.000489][T11884] ffff8880577a0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.008559][T11884] ffff8880577a0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.016653][T11884] >ffff8880577a0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.024804][T11884] ^ [ 420.030994][T11884] ffff8880577a0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.039090][T11884] ffff8880577a0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.047191][T11884] ================================================================== [ 420.066299][ T5920] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input33 [ 420.421217][T11884] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 420.428479][T11884] CPU: 1 UID: 0 PID: 11884 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 420.440238][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.450411][T11884] Call Trace: [ 420.453722][T11884] [ 420.456678][T11884] dump_stack_lvl+0x99/0x250 [ 420.461308][T11884] ? __asan_memcpy+0x40/0x70 [ 420.465935][T11884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.471171][T11884] ? __pfx__printk+0x10/0x10 [ 420.475822][T11884] vpanic+0x281/0x750 [ 420.479836][T11884] ? preempt_schedule+0xae/0xc0 [ 420.484726][T11884] ? __pfx_vpanic+0x10/0x10 [ 420.489269][T11884] ? preempt_schedule_common+0x83/0xd0 [ 420.494778][T11884] ? preempt_schedule+0xae/0xc0 [ 420.499692][T11884] ? __pfx_preempt_schedule+0x10/0x10 [ 420.505105][T11884] panic+0xb9/0xc0 [ 420.508841][T11884] ? __pfx_panic+0x10/0x10 [ 420.513276][T11884] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 420.519188][T11884] ? v4l2_fh_open+0xc7/0x430 [ 420.523792][T11884] check_panic_on_warn+0x89/0xb0 [ 420.528744][T11884] ? v4l2_fh_open+0xc7/0x430 [ 420.533352][T11884] end_report+0x78/0x160 [ 420.537608][T11884] kasan_report+0x129/0x150 [ 420.542164][T11884] ? v4l2_fh_open+0xc7/0x430 [ 420.546773][T11884] v4l2_fh_open+0xc7/0x430 [ 420.551203][T11884] em28xx_v4l2_open+0x157/0x9a0 [ 420.556176][T11884] v4l2_open+0x20c/0x360 [ 420.560458][T11884] chrdev_open+0x4cc/0x5e0 [ 420.564905][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 420.570412][T11884] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 420.576915][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 420.581968][T11884] do_dentry_open+0x953/0x13f0 [ 420.586768][T11884] vfs_open+0x3b/0x340 [ 420.590861][T11884] ? path_openat+0x2ecd/0x3830 [ 420.595727][T11884] path_openat+0x2ee5/0x3830 [ 420.600333][T11884] ? arch_stack_walk+0xfc/0x150 [ 420.605199][T11884] ? stack_depot_save_flags+0x40/0x860 [ 420.610674][T11884] ? __pfx_path_openat+0x10/0x10 [ 420.615621][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.621696][T11884] do_filp_open+0x1fa/0x410 [ 420.626225][T11884] ? __pfx_do_filp_open+0x10/0x10 [ 420.631281][T11884] ? _raw_spin_unlock+0x28/0x50 [ 420.636332][T11884] ? alloc_fd+0x64c/0x6c0 [ 420.640690][T11884] do_sys_openat2+0x121/0x1c0 [ 420.645382][T11884] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.650594][T11884] ? lock_release+0x4b/0x3e0 [ 420.655220][T11884] ? do_user_addr_fault+0xc8a/0x1390 [ 420.660533][T11884] __x64_sys_openat+0x138/0x170 [ 420.665401][T11884] do_syscall_64+0xfa/0x3b0 [ 420.669918][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.676101][T11884] ? clear_bhb_loop+0x60/0xb0 [ 420.680803][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.686739][T11884] RIP: 0033:0x7f4a66aa7407 [ 420.691213][T11884] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 420.710835][T11884] RSP: 002b:00007fff99e3c5b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 420.719268][T11884] RAX: ffffffffffffffda RBX: 00007f4a671b7880 RCX: 00007f4a66aa7407 [ 420.727286][T11884] RDX: 0000000000000000 RSI: 00007fff99e3df1c RDI: ffffffffffffff9c [ 420.735268][T11884] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 420.743242][T11884] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 420.751221][T11884] R13: 00007fff99e3c800 R14: 00007f4a6731e000 R15: 000055c4b56634d8 [ 420.759206][T11884] [ 420.762593][T11884] Kernel Offset: disabled [ 420.766925][T11884] Rebooting in 86400 seconds..