last executing test programs: 3.827966109s ago: executing program 2 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 3.706248944s ago: executing program 2 (id=203): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206201f0000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 3.511422797s ago: executing program 2 (id=206): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x83, &(0x7f00000011c0)={r2}, &(0x7f0000000180)=0x8) sendmsg$key(r1, &(0x7f0000019180)={0x0, 0x0, &(0x7f0000019140)={&(0x7f00000190c0)={0x2, 0x10, 0x7, 0x8, 0xe, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0xd000, @mcast1, 0x4}, @in={0x2, 0x4e23, @remote}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast2}}]}, 0x70}}, 0x2080) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000019080)=@assoc_id=r2, 0x4) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000019080)=@assoc_id=r2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) setreuid(0x0, 0x0) (async) setreuid(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setresgid(0x0, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000020300)={{{@in=@initdev, @in6=@initdev}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000020400)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000020300)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000020400)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000020540)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000020540)=0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r8, &(0x7f0000002f80)={0xa0, 0x0, r9, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r10, r11, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000019200)="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", 0x2000, &(0x7f00000206c0)={&(0x7f000001b200)={0x50, 0x0, 0x5, {0x7, 0x2b, 0x1, 0x240000, 0x3ff, 0xf, 0x8, 0x1, 0x0, 0x0, 0x100}}, &(0x7f000001b280)={0x18, 0x0, 0x2, {0x6}}, &(0x7f000001b2c0)={0x18, 0x0, 0x4, {0x2}}, &(0x7f000001b300)={0x18, 0xfffffffffffffff5, 0x46, {0x7ff}}, &(0x7f000001b340)={0x18, 0x0, 0x4000000000000000, {0x6}}, &(0x7f000001b380)={0x28, 0xa8fb5645808b0287, 0x9, {{0x5, 0x4, 0x1}}}, &(0x7f000001b3c0)={0x60, 0xffffffffffffffda, 0x8d, {{0x6, 0x3b, 0x7, 0x4, 0x2, 0x2, 0xffffffff, 0x9}}}, &(0x7f000001b440)={0x18, 0xfffffffffffffffe, 0x5, {0x4}}, &(0x7f000001b480)={0x16, 0x0, 0xff, {'+\'}.,\x00'}}, &(0x7f000001b4c0)={0x20, 0x0, 0x3, {0x0, 0x10}}, &(0x7f000001b500)={0x78, 0xfffffffffffffff5, 0x8, {0x1, 0x3, 0x0, {0x0, 0xb0, 0x4, 0x5, 0x74d, 0xfffffffffffffffe, 0xd, 0xc000, 0x0, 0x1000, 0x1, 0xee00, 0x0, 0x9, 0x3ff}}}, &(0x7f000001b6c0)={0x90, 0x0, 0x3, {0x4, 0x2, 0x9, 0x5, 0x4, 0x9, {0x6, 0x5, 0x7, 0x2, 0x11e, 0x4, 0x10001, 0xe2, 0x8, 0x4000, 0x1, 0x0, 0x0, 0x7, 0x3}}}, &(0x7f000001b780)={0xc8, 0xfffffffffffffff5, 0x4, [{0x1, 0x81, 0x6, 0x3, ').#:/]'}, {0x5, 0x101, 0x2, 0x100, '\x89%'}, {0x2, 0x6, 0x0, 0x7}, {0x1, 0x800, 0x7, 0x7, '-(%\\\')*'}, {0x6, 0x8000000000000000, 0x0, 0x25a}, {0x3, 0x401, 0xf, 0x6, '/dev/dri/card#\x00'}]}, &(0x7f000001fdc0)={0x528, 0x0, 0xef, [{{0x2, 0x2, 0x5, 0x9, 0xe, 0x5, {0x1, 0x5, 0x8000, 0x5, 0xfffffffffffffffd, 0xfc, 0x1000, 0x4, 0xf, 0xa000, 0x0, 0x0, 0x0, 0xffff, 0x5}}, {0x0, 0x4, 0xf, 0x8, '/dev/dri/card#\x00'}}, {{0x6, 0x3, 0x1, 0x1, 0x1429, 0x3, {0x1, 0x7f, 0x6, 0x7, 0x3, 0x7fffffff, 0x200000, 0x4, 0x9, 0x2000, 0x80000000, 0x0, 0x0, 0xb8, 0x6605}}, {0x5, 0x10000, 0x1, 0x3, '@'}}, {{0x6, 0x1, 0x79d7, 0x3, 0x2, 0x3, {0x5, 0x5, 0x2b579e7, 0x96, 0x6, 0x5, 0xe01a, 0x6, 0x1, 0xa000, 0x6, 0x0, 0x0, 0x2, 0x6}}, {0x5, 0xe3, 0xc, 0x8, '\xf2-@[:&@^.:\\\t'}}, {{0x4, 0x0, 0x0, 0x4, 0x7, 0xc, {0x5, 0x3ac5c0000000000, 0xd1, 0xa2, 0x2, 0xfffffffffffffb3b, 0x9, 0x7f, 0x4, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xffff}}, {0x2, 0x800, 0xa, 0xff, 'net/route\x00'}}, {{0x1, 0x0, 0x73c, 0x5, 0x8, 0x7, {0x3, 0xfffffffffffffffd, 0x9, 0x6d, 0xe, 0x54fb043, 0xe3, 0x7, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x7, 0x9}}, {0x0, 0x2, 0x0, 0x8}}, {{0x4, 0x3, 0xadf, 0x8000000000000001, 0x9d8, 0x8, {0x4, 0x3, 0x8, 0x78, 0xc72, 0x6, 0x3, 0x10001, 0x3, 0x8000, 0x7, 0x0, 0x0, 0xfffffff6, 0x5}}, {0x1, 0x4, 0xa, 0xb, 'net/route\x00'}}, {{0x4, 0x3, 0x7, 0xffffffff, 0x6, 0x8bf7, {0x6, 0xffffffffffffffff, 0xfffffffffffffff6, 0x0, 0x3, 0x9, 0x0, 0x118df879, 0x928, 0xa000, 0x7, 0x0, 0x0, 0x200, 0x8}}, {0x5, 0x3, 0x1, 0x9, '\xa2'}}, {{0x3, 0x2, 0x6, 0x9, 0x4020, 0x4, {0x0, 0x359, 0x9, 0x6, 0x0, 0xb76, 0x8, 0xb0, 0x4, 0x8000, 0x4, 0x0, r5, 0xfffff10c}}, {0x5, 0xb7e, 0x1, 0x2, '-'}}]}, &(0x7f0000020440)={0xa0, 0x0, 0x9, {{0x5, 0x3, 0x0, 0x7d, 0x4, 0x9, {0x2, 0xfffffffffffffffe, 0x37810ef4, 0xce00000000000, 0x2, 0x6, 0x7f, 0xffffffff, 0x80, 0x0, 0x6, r6, 0x0, 0xa1, 0xd231}}}}, &(0x7f0000020500)={0x20, 0x0, 0x5, {0xf8, 0x4, 0x7, 0x8067}}, &(0x7f0000020580)={0x130, 0xffffffffffffffda, 0x401, {0x3, 0x704, 0x0, '\x00', {0x100, 0x80, 0x3, 0x1, r7, r11, 0x4000, '\x00', 0xf50, 0xff, 0xfffffffffffffff8, 0xf9de, {0x5, 0x2}, {0x2, 0x80}, {0x0, 0x5}, {0x66c28334, 0xfffffffc}, 0x9, 0x6, 0x1, 0x7}}}}) syz_usb_connect(0x2, 0xfffffffffffffe3d, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000440)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r12, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x821, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xac, 0xb6, 0x4d, 0x40, 0x19d2, 0x199, 0xad32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80f, 0x2, 0x0, 0x2, 0x40, 0x8, [{{0x9, 0x4, 0xf2, 0x2, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "bc794b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x8151, 0x4}, [@mdlm_detail={0x62, 0x24, 0x13, 0x8, "10c4bc8a1254c828d81768b2c1a276ba77bc7239e77bcb3d9b659869af050696c3099e6bdaf6d0a49e4c5479f9adb1e33d6f09b64fda9c905117dfb591cd41b3ad9dabb8e754419ce5ebbd0d72cdbbff7bc0d374fe366afa0d860af661ae"}, @ncm={0x6, 0x24, 0x1a, 0x7296, 0xc}, @mdlm_detail={0xb5, 0x24, 0x13, 0x48, "2471d7667de6a9804e9a1e9b53228fe23ec982ebffc87f6963bef1375364b90a38757980c69933906e50c4143debe66f07e5586c151c6bb9c04cca1062f561a981374a9e69749f6d1eef9829de939bd0bdfdb35b670fcf148d693c28963699cfe24ecdca6d61b42ff53d481d366f5e7396be1bca19ec88dfabb8873c3f0a49f2f04d7f68377cad01f6a82f1383daa30648614be3cb85a75fefa9da459eb8a4b31bd5d06cb940876e0083cd28cd9c44deb7"}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x81, 0xff, 0x10, 0x5, 0x4, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x8}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x3, "", "6e56c1"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x6c}]}], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0x3a, 0x8, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x0, 0xa, 0x7f}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x22c0}]}}, {{0x9, 0x5, 0xe, 0x10, 0xeb75be7d2e216bc0, 0x4b, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x54, 0xef69}]}}, {{0x9, 0x5, 0x8, 0x75d055f0ea65abba, 0x200, 0x7f, 0x7, 0x1}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x6, 0x52, 0x5, [@generic={0xaa, 0xb, "d1f4467cd1031a9de209575f2549dd461d789d92e0a5126e7f98080c5f8ff7b60f7b79161ed7e789fa7018dd421b67a5ef6e4974f9883935e436b4b010c8400d4df7f1262d7d7fe08b55fe1591dcfd58cd1bd1b0dc086d3fd6650d84cedfea61813ce31cdc148f4aee1da0fdf056c09219766e0f642f02bb953adb5bfc2960aa7264de8d27c1911948f9c57a57aa97bb12bec822589d381bb282dfaff9319ccdfec132934847b288"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x5, 0x4, 0x6, [@generic={0x8, 0xc, "261d20a0bab3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x9, 0x2}}]}}, {{0x9, 0x4, 0xe6, 0x2, 0xe, 0x28, 0x3c, 0x7d, 0x4, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x0, 0x2, 0x8, [@generic={0x67, 0x24, "6db17d7434e275bdc5b7b2e2fff0948f7d43feb90c6ef41864d91a692c4e4f5b8f21478283826eeab8cabac4e4643e15dd5b51df35d909f4804294f68e2a6570529129127aa9470fdc1b6dc0ea4646535a29582cf00dd6ba46516cd65011b646ee2ad775ff"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x4, 0xc, 0xc1, [@generic={0x50, 0x8, "d73ed3c17f4842c9d933e5a7505f20419228cf0b79e1e70e97d5f6e68e276c7dda6b07d4e6dc1760d92b400b56f98fc227d756c9634bf56c21b033429f85a6bd9894b6f83ecb7f3b9f175e48d6e7"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4a10b1623caca7a0, 0x64, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x26, 0x81}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x4, 0x45, 0x5, [@generic={0x74, 0x23, "845d31d89882c4969c6f6f2ff246d9ef822ddb3f834f52b3e9200e3b6c86edd81e38f5d0c02a948809927d646ebf46956bce5298dcff8583065f311ace3e24a03d39c5495ad9aa99937641c565fab586a2a9718ff9fd45a61dbd22008525e5b64874f23e7cc13e827f909e9258551efb04f9"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xf9, 0x9, 0x1, [@generic={0xca, 0x30, "53c53c8db2cfe85f11d0ffe08298fe16c13f0fb397db9036d8c9497e0f2f4bed989ca3fca41815e668e958dc1eee287baea9c61536f9778b4820251730ee817726f4c0440f2307acb95289dddba4b0dc0349336ac64ef69f272c4e26346925f12768c165fc594083bb5ed47a49b13eb87b28e148ee600bd5764de51291f0761310a351a5b00c91a2652dccd413cc96b1a22d7c3085ebc6f3876544201cbab5d08c16ffd2587711502fb3b7d7f2dde1d5e5950a24c2bf673433c7f0aeca2b3cc2a6f0ea0c75d7d1f3"}, @generic={0xaa, 0x10, "d73f6c36221ec504f5c3af695af48f1464f438b218b99fedf8d585f8f9623ecb57b3b5a7e6abd70033fb0cb5677938ad7ab456cbac07004e13dfc44053459b080667e5b58faf71f14072ab670a8fa3261e4a6dd276c40036c7587a361fd375b303d5cf59203c61791a04f545f1def99f3337e72dba2bcec6e3b0c4a479b6f274fbe427824f82a095fc452641b7a0b82ab8d9a48fad8f7d5c6dd30f1c6bd2da784df539f2a29714f4"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0x2c, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x9}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x4, 0x5, 0xb, [@generic={0xe1, 0x23, "290041900c851ab6c4188a6f18ef862e894cb9fbd759fed3aa8aa3816a527cec7d588b582a7d0c0a7c53f2e0acf531d9de949f2ca83e9da72f3af9751d97fa4c5986e1fe7545202dec1e2d2982eeeeb27ff52af7a822fb7c3c4672cb18e8627da12f109e9e2cb5a9f1d6bc2b46db54ce578477337554045cc2b03599187dd64c51428af73ef27f26cbcc87942082811894433d03f7af6bc2946ada6877d9fc6b9c1ffdb50775d61c650a1f5a8ceff1138aad1f6dd6929f5944da7e1ea2c3387f3a878a041daefad5b684fd1d9aa8339b817cca3c5430a1fa2f6fe419e03347"}, @generic={0x63, 0x31, "65669dec1378f5ed29e29b5d6d8218dfae8bb65eb9134b1ef062e973d850837b933d7807be2c9b772ad3bfb2e4be89b59fa18b0c12d45d0fa2e93f1c4611d72c564bbbdad23421296ec95f2d71ee35a2cfc9e38725a89ca3fb051a57451c934b13"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x6, 0x35, 0xf}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xd, 0x7, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x89, 0xfffd}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x10, 0x7, 0xc}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xc}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x0, 0x34, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xd8, 0x8, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x3}, @generic={0xf6, 0x9, "1b00c43278d800fdff21dc9648e55891b0c65be27824925a3b75b56dfe1be42778858f307b5770c97de7f15f908ef353f1ea75ffbc507a685d341fede47a39952e09cafef3ac047ad595b3ea3bf28f0b16b474e50538aade25f4c541e9edf4f6efa39a0afca132f988cb2b4384f771ddfde0646b83a9eb713710d4627a800314526ad28887770cac27c2b6f82acfd73f3376b874ac84cdf5023f473abdffc62b1a5f407de57928944d92a83d3aa9e4757a4ea95f1dbeb3cc7319801c1fed0f9fbc97ffa81c1f80dbbf12e2d2ac8f44301088ebcc7ce2bf5acf4887fac0e3491fdfbdec9b9dc8ad1f2579d91aed15fdfeb41de14a"}]}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x3, 0x8, 0x2, 0xff, 0x5}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x9, 0x400}, @generic={0x27, 0x10, 0x1, "93b93fe343762205013024083bc056287a1c49ff21090e4f42dc57b2c01d3bb033140e08"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x3, 0x8640}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0x22, &(0x7f0000000240)=@string={0x22, 0x3, "b7465faf6f66706f3720238617e4b4a613b878c789c09f6a872c5dc3f408bbd3"}}, {0x82, &(0x7f0000000280)=@string={0x82, 0x3, "0bcc6d49e7156fe4c6199141efe78f10797a0f31f4fb951e481a6fd17e0f89ecbdec7515826e411ab0c96c4466fa27b2add03bc2b968e90550627e8a74c249bdf44e3d9dc8398b5bbb3c435cc69486495b1a758bad3080a36730deba84a40dd7e99920e2e128ff4c3db2a11fd075fcb31332332c238f78a36aa6ab1912ba65bd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0x28, &(0x7f0000000380)=@string={0x28, 0x3, "a3be35fafe96226071e22e9c7ec0526fba3e2c687678230791e8e1124c8d30a92a14188cf1cf"}}]}) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r14, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$TIOCVHANGUP(r13, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r13, 0x5437, 0x0) 2.84422836s ago: executing program 0 (id=217): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4004030000009164bb015ef4de243a6032a0694c9d14293933e4b6ae278173de35f231e451864b2c8bc449e6632bab330d6a26ab75090e9f14b1c544282046a3463365c3fa3dca473555efc8279aa6115a7c83150361f14b8a8e7ebfe382a8055c43260c593ea459065e216605f1c096b1ff12fde5b864c5d2c1b0ea36068eaf32cfcdef10fdb7befbf410b33dc0939777afe9fc68eec9636688226a61e16abecdf704306d6a6ac07c4229b7149e275b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x1) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) (async) sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4004030000009164bb015ef4de243a6032a0694c9d14293933e4b6ae278173de35f231e451864b2c8bc449e6632bab330d6a26ab75090e9f14b1c544282046a3463365c3fa3dca473555efc8279aa6115a7c83150361f14b8a8e7ebfe382a8055c43260c593ea459065e216605f1c096b1ff12fde5b864c5d2c1b0ea36068eaf32cfcdef10fdb7befbf410b33dc0939777afe9fc68eec9636688226a61e16abecdf704306d6a6ac07c4229b7149e275b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1.70799285s ago: executing program 3 (id=227): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000003000/0x1000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) shmdt(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x60500, 0x0) mkdirat(r2, 0x0, 0x122) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.473322068s ago: executing program 1 (id=230): openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) 1.392281141s ago: executing program 1 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x94}}, 0x0) 1.391844341s ago: executing program 1 (id=232): syz_init_net_socket$ax25(0x3, 0x2, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4212, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000000c0)={0x8}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r7, 0x89e0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup3(r10, r11, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x1d, &(0x7f00000002c0)=0xa5f, 0x4) r13 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x50565559}}) bind$ax25(r5, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 1.304773298s ago: executing program 0 (id=233): socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) socket$inet_sctp(0x2, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) 1.294880699s ago: executing program 1 (id=234): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000007c0)="17000000020001000002d68c5ee17688a200d3135447dd376874ae08bc447a32080300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039000000000000000002ffff02dfccebf6ba0008400300000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2127c3d0", 0xb8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x94}}, 0x0) syz_usb_disconnect(r0) 1.23394567s ago: executing program 0 (id=235): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x1, {0x5, 0x80000001, 0x1, 0xff}}) 1.193724429s ago: executing program 0 (id=236): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, r4, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, 0x0, 0x0) 692.167951ms ago: executing program 3 (id=237): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 446.954467ms ago: executing program 3 (id=238): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32, @ANYBLOB="7c0033008000de000802110000000802110000005050"], 0x9c}, 0x1, 0x0, 0x0, 0x24000880}, 0x20040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0a00f7ff080211000001000004002a0008009e0008"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 406.588071ms ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x5, 0x26, 0x6}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000080)) 380.568384ms ago: executing program 3 (id=240): openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) 244.165092ms ago: executing program 1 (id=241): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x5, 0x1, 0xe, 0x4, 0xb7, "fab9ba40164b60cabf429ca65d3e1b7b0465860faf1591f71c294b01077a23ffe0b4774f3cb6bb07ed98e2af3b71d8693eec0be0ea07ac15b86add556c9c95cda4b2df486b613fee71141ca242d22dc5dc66e680de16dd36fa78697b06b2692232364ffeded896805f16b7cf1682cb76697bd5cc1b39a4b1c0df9369ac00c9c63b33f73ec2e6e50b811dcb73b4ee45d10474e7397f68a7723c68065cb2e9cec1fe22a33b28ffb8fa7f3a956e2af611e44b5e76d7f3e7ee"}, 0xc0, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 186.906479ms ago: executing program 2 (id=242): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 184.366144ms ago: executing program 3 (id=243): socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) 170.842179ms ago: executing program 0 (id=244): ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x1, {0x5, 0x80000001, 0x1, 0xff}}) 49.029092ms ago: executing program 1 (id=245): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b22000/0x3000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b22000/0x3000)=nil) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 45.96918ms ago: executing program 3 (id=246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="be88fa01b84a05dd854a75c8a431970dc272aa74fe9c21e6b554bdd80c2e9f4069dad4c4f5a3319d80270e35d93b0ef00bf9806732054aa2842eda44784e0c3549ba7c8bcae739f4d42f977e3c236bd30ddfee2be84ec6388b085d5397a4940c0eb6766c886730d8b5607a7ad3654e058634ffb0da21213175f0b7223b0c7794c2ca8f71d48a8b7202354e4c343607"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (rerun: 32) 272.462µs ago: executing program 0 (id=247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02dd81", "06c9b3000800"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendto(r0, &(0x7f0000000200)="99", 0xfffffffffffffdcb, 0xf0ffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x2000, &(0x7f0000001000)=[{&(0x7f00000083c0)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x776}], 0x2, 0x40011120, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 70.744233][ T5850] cgroup: Unknown subsys name 'net' [ 70.905483][ T5850] cgroup: Unknown subsys name 'cpuset' [ 70.914021][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.526708][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.533253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.350806][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.169452][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.177870][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.187771][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.207583][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.216469][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.224047][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.225412][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.232965][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.247820][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.255007][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.265551][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.269991][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.280242][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.288453][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.289574][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.303990][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.313435][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.322435][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.327741][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.339748][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.867326][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 76.912520][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 76.954224][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 77.147463][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.155369][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.163091][ T5862] bridge_slave_0: entered allmulticast mode [ 77.170363][ T5862] bridge_slave_0: entered promiscuous mode [ 77.179566][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.187142][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.194757][ T5862] bridge_slave_1: entered allmulticast mode [ 77.202387][ T5862] bridge_slave_1: entered promiscuous mode [ 77.210051][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.323808][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.346571][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.354224][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.361626][ T5859] bridge_slave_0: entered allmulticast mode [ 77.369667][ T5859] bridge_slave_0: entered promiscuous mode [ 77.378071][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.386235][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.393727][ T5860] bridge_slave_0: entered allmulticast mode [ 77.400881][ T5860] bridge_slave_0: entered promiscuous mode [ 77.412019][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.432381][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.439607][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.447642][ T5859] bridge_slave_1: entered allmulticast mode [ 77.455069][ T5859] bridge_slave_1: entered promiscuous mode [ 77.474902][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.482369][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.489802][ T5860] bridge_slave_1: entered allmulticast mode [ 77.497291][ T5860] bridge_slave_1: entered promiscuous mode [ 77.574116][ T5862] team0: Port device team_slave_0 added [ 77.584903][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.609259][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.622231][ T5862] team0: Port device team_slave_1 added [ 77.631617][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.654538][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.717223][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.724891][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.732385][ T5861] bridge_slave_0: entered allmulticast mode [ 77.739455][ T5861] bridge_slave_0: entered promiscuous mode [ 77.771623][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.778779][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.804769][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.818564][ T5860] team0: Port device team_slave_0 added [ 77.824846][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.832791][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.840141][ T5861] bridge_slave_1: entered allmulticast mode [ 77.847452][ T5861] bridge_slave_1: entered promiscuous mode [ 77.856134][ T5859] team0: Port device team_slave_0 added [ 77.868563][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.875662][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.902099][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.915231][ T5860] team0: Port device team_slave_1 added [ 77.942154][ T5859] team0: Port device team_slave_1 added [ 77.974375][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.981384][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.008156][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.061209][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.068516][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.095432][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.110164][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.131461][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.139181][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.166157][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.186691][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.208652][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.215885][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.242129][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.292691][ T5862] hsr_slave_0: entered promiscuous mode [ 78.299183][ T5862] hsr_slave_1: entered promiscuous mode [ 78.322712][ T5864] Bluetooth: hci1: command tx timeout [ 78.337545][ T5861] team0: Port device team_slave_0 added [ 78.346749][ T5861] team0: Port device team_slave_1 added [ 78.358646][ T5860] hsr_slave_0: entered promiscuous mode [ 78.365283][ T5860] hsr_slave_1: entered promiscuous mode [ 78.371592][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 78.378417][ T5860] Cannot create hsr debugfs directory [ 78.401906][ T5864] Bluetooth: hci0: command tx timeout [ 78.402022][ T5876] Bluetooth: hci3: command tx timeout [ 78.407749][ T5864] Bluetooth: hci2: command tx timeout [ 78.488455][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.496526][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.523246][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.540444][ T5859] hsr_slave_0: entered promiscuous mode [ 78.547153][ T5859] hsr_slave_1: entered promiscuous mode [ 78.553580][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 78.559481][ T5859] Cannot create hsr debugfs directory [ 78.592933][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.600047][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.626544][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.780930][ T5861] hsr_slave_0: entered promiscuous mode [ 78.788118][ T5861] hsr_slave_1: entered promiscuous mode [ 78.794589][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 78.800364][ T5861] Cannot create hsr debugfs directory [ 79.103577][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.117849][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.145369][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.173664][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.246172][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.257136][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.284205][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.295533][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.370987][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.396353][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.408960][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.425411][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.537335][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.551641][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.572616][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.585752][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.652369][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.740976][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.768499][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.776010][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.799554][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.807407][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.829874][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.863986][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.888531][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.905859][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.913375][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.941277][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.949122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.010730][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.031655][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.057755][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.065364][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.131386][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.158109][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.165987][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.236612][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.275106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.282594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.337222][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.345348][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.404501][ T5864] Bluetooth: hci1: command tx timeout [ 80.483175][ T5864] Bluetooth: hci2: command tx timeout [ 80.488910][ T5864] Bluetooth: hci3: command tx timeout [ 80.495399][ T5871] Bluetooth: hci0: command tx timeout [ 80.569062][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.636729][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.693874][ T5860] veth0_vlan: entered promiscuous mode [ 80.733472][ T5860] veth1_vlan: entered promiscuous mode [ 80.769651][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.820650][ T5860] veth0_macvtap: entered promiscuous mode [ 80.838909][ T5862] veth0_vlan: entered promiscuous mode [ 80.856691][ T5860] veth1_macvtap: entered promiscuous mode [ 80.887947][ T5862] veth1_vlan: entered promiscuous mode [ 80.915915][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.936233][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.956932][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.994686][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.005105][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.022949][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.032478][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.055831][ T5859] veth0_vlan: entered promiscuous mode [ 81.064740][ T5862] veth0_macvtap: entered promiscuous mode [ 81.100056][ T5859] veth1_vlan: entered promiscuous mode [ 81.114658][ T5862] veth1_macvtap: entered promiscuous mode [ 81.177222][ T5861] veth0_vlan: entered promiscuous mode [ 81.197452][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.215291][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.271484][ T5861] veth1_vlan: entered promiscuous mode [ 81.280014][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.289787][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.310181][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.332171][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.339721][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.349484][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.379045][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.394582][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.408163][ T5859] veth0_macvtap: entered promiscuous mode [ 81.435766][ T5859] veth1_macvtap: entered promiscuous mode [ 81.468893][ T5861] veth0_macvtap: entered promiscuous mode [ 81.488134][ T5861] veth1_macvtap: entered promiscuous mode [ 81.503733][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.585257][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.620942][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.643729][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.648302][ T5953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.656024][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.679126][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.679700][ T5953] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 81.706143][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.732805][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.745526][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.754292][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.763350][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.781505][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.802379][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817500][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.842393][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.883103][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.901271][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.956103][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.067159][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.078564][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137480][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.169220][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.224527][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.234176][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.329251][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.357196][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.482571][ T5864] Bluetooth: hci1: command tx timeout [ 82.562661][ T5864] Bluetooth: hci2: command tx timeout [ 82.568526][ T5871] Bluetooth: hci3: command tx timeout [ 82.568540][ T5876] Bluetooth: hci0: command tx timeout [ 82.628814][ T5964] sctp: [Deprecated]: syz.0.5 (pid 5964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.628814][ T5964] Use struct sctp_sack_info instead [ 82.662618][ T5965] sctp: [Deprecated]: syz.0.5 (pid 5965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.662618][ T5965] Use struct sctp_sack_info instead [ 82.828609][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 82.853562][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.874853][ T5970] fuse: Unknown parameter 'fsmagic' [ 82.884454][ T5970] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7'. [ 82.902323][ T5970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7'. [ 82.972164][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.162826][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 83.185352][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 83.200140][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D [ 83.215294][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 83.230809][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 83.250265][ T5983] Zero length message leads to an empty skb [ 83.257387][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.269933][ T10] usb 2-1: Product: syz [ 83.288912][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.289382][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.290747][ T10] usb 2-1: Manufacturer: syz [ 83.290775][ T10] usb 2-1: SerialNumber: syz [ 83.298867][ T10] usb 2-1: config 0 descriptor?? [ 83.308920][ T10] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 83.418323][ T5990] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.512219][ T5916] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.572021][ T5955] usb 2-1: USB disconnect, device number 2 [ 83.655142][ T5916] usb 3-1: device descriptor read/64, error -71 [ 83.747105][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14'. [ 83.901828][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.031812][ T5916] usb 3-1: device descriptor read/64, error -71 [ 84.123746][ T6010] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 84.137992][ T6010] overlay: Unknown parameter 'uid' [ 84.142305][ T5916] usb usb3-port1: attempt power cycle [ 84.164117][ T5923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.341755][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 84.355028][ T5923] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.366488][ T5923] usb 1-1: config 0 has no interface number 0 [ 84.374733][ T5923] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.387983][ T5923] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.398208][ T5923] usb 1-1: config 0 interface 41 has no altsetting 0 [ 84.408253][ T5923] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.417663][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.425969][ T5923] usb 1-1: Product: syz [ 84.430217][ T5923] usb 1-1: Manufacturer: syz [ 84.435035][ T5923] usb 1-1: SerialNumber: syz [ 84.447523][ T5923] usb 1-1: config 0 descriptor?? [ 84.453324][ T6007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.460834][ T6007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.463002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.493919][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.522511][ T5916] usb 3-1: device descriptor read/8, error -71 [ 84.562282][ T5876] Bluetooth: hci1: command tx timeout [ 84.602391][ T5955] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.642336][ T5876] Bluetooth: hci0: command tx timeout [ 84.653076][ T5876] Bluetooth: hci2: command tx timeout [ 84.653651][ T5864] Bluetooth: hci3: command tx timeout [ 84.673542][ T6006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.689349][ T6006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.725406][ T6017] kvm: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 84.734166][ T6017] kvm: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 84.745506][ T6017] kvm: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 84.757709][ T6017] kvm: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 84.766402][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 84.771829][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.782101][ T6017] kvm: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 84.793489][ T5916] usb 3-1: device descriptor read/8, error -71 [ 84.800277][ T5955] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 84.813367][ T5955] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 84.827621][ T6017] kvm_intel: kvm [6016]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 84.838536][ T5955] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.950144][ T5916] usb usb3-port1: unable to enumerate USB device [ 84.963750][ T5955] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.979732][ T5955] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 84.992862][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.001066][ T5955] usb 4-1: Product: syz [ 85.005400][ T5955] usb 4-1: Manufacturer: syz [ 85.010041][ T5955] usb 4-1: SerialNumber: syz [ 85.025328][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 85.038122][ T5955] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input6 [ 85.241739][ T5955] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.250078][ T5955] (id 0x00) [ 85.321751][ T5955] rc_core: IR keymap rc-imon-pad not found [ 85.327821][ T5955] Registered IR keymap rc-empty [ 85.332923][ T5955] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 85.343401][ T5955] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.353613][ T5955] imon:send_packet: packet tx failed (-71) [ 85.363196][ T5923] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 85.375900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.382170][ T5955] imon 4-1:155.0: remote input dev register failed [ 85.385068][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.391007][ T5955] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 85.422247][ T5955] imon 4-1:155.0: unable to initialize intf0, err 0 [ 85.428922][ T5955] imon:imon_probe: failed to initialize context! [ 85.435516][ T5955] imon 4-1:155.0: unable to register, err -19 [ 85.452595][ T5955] usb 4-1: USB disconnect, device number 2 [ 85.532807][ T5930] usb 2-1: device descriptor read/64, error -71 [ 85.751856][ T5955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.771830][ T5930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.901773][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 85.911404][ T5955] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.911911][ T5930] usb 2-1: device descriptor read/64, error -71 [ 85.924048][ T5955] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 85.940013][ T5955] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 85.950023][ T5955] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 85.963681][ T5955] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 85.973083][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.981110][ T5955] usb 4-1: Product: syz [ 85.985435][ T5955] usb 4-1: Manufacturer: syz [ 85.990046][ T5955] usb 4-1: SerialNumber: syz [ 86.000202][ T5955] hso 4-1:6.0: Can't find BULK OUT endpoint [ 86.042099][ T5930] usb usb2-port1: attempt power cycle [ 86.207775][ T5955] usb 4-1: USB disconnect, device number 3 [ 86.291643][ T6034] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.320122][ T6034] CIFS: Unable to determine destination address [ 86.339195][ T6034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.381887][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.408178][ T5930] usb 2-1: device descriptor read/8, error -71 [ 86.651832][ T5930] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.671983][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.680041][ T5930] usb 2-1: device descriptor read/8, error -71 [ 86.793673][ T5930] usb usb2-port1: unable to enumerate USB device [ 86.842864][ T10] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 86.854275][ T10] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.868308][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.882526][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 86.886894][ T982] cfg80211: failed to load regulatory.db [ 86.894260][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.908637][ T10] usb 3-1: config 0 descriptor?? [ 86.919490][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 87.189334][ T6042] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 87.199718][ T6042] overlayfs: missing 'lowerdir' [ 87.202550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 87.301861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.511710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.579655][ T6046] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 87.747513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.779971][ T5923] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 87.797384][ T5923] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 87.811957][ T5923] usb 1-1: USB disconnect, device number 2 [ 88.473377][ T6061] warning: `syz.3.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.516325][ T6066] FAULT_INJECTION: forcing a failure. [ 88.516325][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.540793][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 88.540818][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.540833][ T6066] Call Trace: [ 88.540839][ T6066] [ 88.540846][ T6066] dump_stack_lvl+0x189/0x250 [ 88.540873][ T6066] ? __pfx____ratelimit+0x10/0x10 [ 88.540903][ T6066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.540918][ T6066] ? __pfx__printk+0x10/0x10 [ 88.540939][ T6066] ? __might_fault+0xb0/0x130 [ 88.540968][ T6066] should_fail_ex+0x414/0x560 [ 88.540993][ T6066] _copy_from_user+0x2d/0xb0 [ 88.541012][ T6066] ___sys_sendmsg+0x158/0x2a0 [ 88.541030][ T6066] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.541076][ T6066] ? __fget_files+0x2a/0x420 [ 88.541091][ T6066] ? __fget_files+0x3a0/0x420 [ 88.541116][ T6066] __x64_sys_sendmsg+0x19b/0x260 [ 88.541133][ T6066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.541155][ T6066] ? __pfx_ksys_write+0x10/0x10 [ 88.541178][ T6066] ? do_syscall_64+0xbe/0xfa0 [ 88.541196][ T6066] do_syscall_64+0xfa/0xfa0 [ 88.541210][ T6066] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.541230][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.541244][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 88.541263][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.541277][ T6066] RIP: 0033:0x7fbbcfd8eec9 [ 88.541296][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.541309][ T6066] RSP: 002b:00007fbbd0b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.541327][ T6066] RAX: ffffffffffffffda RBX: 00007fbbcffe5fa0 RCX: 00007fbbcfd8eec9 [ 88.541339][ T6066] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 88.541349][ T6066] RBP: 00007fbbd0b46090 R08: 0000000000000000 R09: 0000000000000000 [ 88.541357][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.541365][ T6066] R13: 00007fbbcffe6038 R14: 00007fbbcffe5fa0 R15: 00007ffd69ce4858 [ 88.541393][ T6066] [ 88.541624][ T6067] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 89.698283][ T5955] usb 3-1: USB disconnect, device number 6 [ 90.145074][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 90.244213][ T6100] team_slave_0: entered allmulticast mode [ 90.255093][ T6100] team_slave_0: entered promiscuous mode [ 90.311774][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.473111][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 90.490979][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.521861][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.532477][ T5923] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 90.535641][ T6108] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 90.550810][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.565297][ T5923] usb 1-1: config 0 descriptor?? [ 90.612760][ T6108] team0: Port device macvlan1 added [ 90.815398][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.57'. [ 90.834879][ T6112] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 90.842282][ T6112] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 91.020746][ T5923] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 91.021745][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.091625][ T6123] netlink: 9 bytes leftover after parsing attributes in process `syz.3.62'. [ 91.172169][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.63'. [ 91.201890][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 91.208644][ T5923] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 91.210291][ T5955] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.240132][ T5955] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.254445][ T5955] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 91.264642][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.279414][ T5955] usb 2-1: config 0 descriptor?? [ 91.422798][ T5923] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 91.496967][ T5955] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 91.624717][ T5923] ft260 0003:0403:6030.0001: failed to retrieve status: -71, no wakeup [ 91.633511][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 91.644401][ T5923] ft260 0003:0403:6030.0001: failed to retrieve status: -71 [ 91.653307][ T5923] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 91.683520][ T5923] usb 1-1: USB disconnect, device number 3 [ 91.701497][ T9] usb 2-1: USB disconnect, device number 7 [ 91.804079][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.813387][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 91.832665][ T10] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 91.841382][ T10] usb 4-1: config 0 has no interface number 0 [ 91.849288][ T10] usb 4-1: config 0 interface 202 has no altsetting 0 [ 91.859581][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c2.6c [ 91.869660][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.892941][ T10] usb 4-1: Product: syz [ 91.900842][ T10] usb 4-1: Manufacturer: syz [ 91.908571][ T10] usb 4-1: SerialNumber: syz [ 91.922940][ T10] usb 4-1: config 0 descriptor?? [ 92.213282][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 92.225944][ T10] ttusb-dec 4-1:0.202: probe with driver ttusb-dec failed with error -22 [ 92.238780][ T6149] No control pipe specified [ 92.254353][ T10] usb 4-1: USB disconnect, device number 4 [ 92.309000][ T6153] netlink: 104 bytes leftover after parsing attributes in process `syz.0.74'. [ 92.344923][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.712493][ T5955] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 92.729482][ T6175] netlink: 'syz.0.84': attribute type 72 has an invalid length. [ 92.743222][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 92.783991][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.798634][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.809333][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.817324][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.828255][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.885416][ T5955] usb 3-1: not running at top speed; connect to a high speed hub [ 92.887553][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 92.905207][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 92.925211][ T5955] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.943155][ T5955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.953823][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.962993][ T5955] usb 3-1: Product: syz [ 92.967598][ T5955] usb 3-1: Manufacturer: syz [ 92.976390][ T5955] usb 3-1: SerialNumber: syz [ 92.988461][ T6161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.042301][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 93.208208][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 93.218309][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.226600][ T9] usb 2-1: Product: syz [ 93.230951][ T9] usb 2-1: Manufacturer: syz [ 93.235759][ T9] usb 2-1: SerialNumber: syz [ 93.244570][ T9] usb 2-1: config 0 descriptor?? [ 93.252957][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 93.266041][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.277827][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 93.291080][ T9] usb 2-1: media controller created [ 93.301878][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.318705][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.327949][ T5930] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 93.367235][ T9] DVB: Unable to find symbol mt352_attach() [ 93.398865][ T9] DVB: Unable to find symbol nxt6000_attach() [ 93.406147][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 93.421896][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 93.443218][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 93.450829][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 93.455080][ T6176] dvb-usb: bulk message failed: -22 (7/0) [ 93.461998][ T5930] usb 4-1: device descriptor read/64, error -71 [ 93.474713][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 93.482682][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 93.506795][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 93.528983][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.537790][ T10] usb 1-1: Product: syz [ 93.543109][ T10] usb 1-1: Manufacturer: syz [ 93.547877][ T10] usb 1-1: SerialNumber: syz [ 93.564510][ T5955] usb 2-1: USB disconnect, device number 8 [ 93.579456][ T10] usb 1-1: config 0 descriptor?? [ 93.609812][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 93.634844][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.646725][ T5955] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 93.658981][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 93.671880][ T10] usb 1-1: media controller created [ 93.720688][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.729837][ T5930] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 93.802554][ T10] DVB: Unable to find symbol mt352_attach() [ 93.861138][ T10] DVB: Unable to find symbol nxt6000_attach() [ 93.867466][ T5930] usb 4-1: device descriptor read/64, error -71 [ 93.875089][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 93.888310][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 93.891220][ T5955] usb 3-1: USB disconnect, device number 7 [ 93.912134][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 93.919481][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 93.933493][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 93.940688][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 93.949883][ T10] usb 1-1: USB disconnect, device number 4 [ 93.984037][ T5930] usb usb4-port1: attempt power cycle [ 94.018065][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 94.331921][ T5930] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 94.373579][ T5930] usb 4-1: device descriptor read/8, error -71 [ 94.428812][ T6201] mmap: syz.0.92 (6201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.497302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.512915][ T6203] input: syz1 as /devices/virtual/input/input11 [ 94.519590][ T6203] input: failed to attach handler leds to device input11, error: -6 [ 94.607667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.616848][ T5930] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 94.664796][ T5930] usb 4-1: device descriptor read/8, error -71 [ 94.727097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.842134][ T5930] usb usb4-port1: unable to enumerate USB device [ 95.190000][ T6199] syz.1.91 (6199): drop_caches: 2 [ 95.729001][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.739362][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.894249][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.905097][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 95.911750][ T982] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.914823][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.932489][ T10] usb 3-1: config 0 descriptor?? [ 95.999922][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 96.059405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.099444][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 96.110857][ T982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 96.121621][ T982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 96.140168][ T982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.151872][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.161480][ T982] usb 2-1: Product: 崙ꈗ켗澺﬽挻힌춅ꫜ奅귄圫鼞磶᧨䞪斑䣮޺ዿ喻暷题磙簞쓞ꡒ䰗脤䔇יࢍ銶ꊱ軇섏诤랸尭띅㡡ﰪᗺ鄨犦ꏾ皪蔂鍒䂤牅盁厩賂⿙쀁Ю酻ྈ틞Ꮂ삝᛬螜䱾ࠨ뷿賦ᆟᐦ╋軵㳑륬䍁풯ẝΥ뺭βꈳ쵒왕⽵ [ 96.192379][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.463521][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 96.471173][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 96.491382][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 96.515073][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.524340][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 96.538160][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.552628][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 96.562392][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 96.569826][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 96.592135][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 96.596746][ T982] usb 2-1: Manufacturer: ࠝ [ 96.599935][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.603384][ T982] usb 2-1: SerialNumber: ь [ 96.632676][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.635766][ T6233] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 96.674261][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 96.728789][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 96.750997][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 96.815803][ T6231] syz.0.104 (6231): drop_caches: 2 [ 96.827036][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.838466][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.880026][ T982] cdc_ncm 2-1:1.0: bind() failure [ 96.914151][ T982] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 96.921895][ T982] cdc_ncm 2-1:1.1: bind() failure [ 96.951817][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 96.972870][ T982] usb 2-1: USB disconnect, device number 9 [ 96.989053][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 97.164152][ T9] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 97.173455][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.183863][ T9] usb 4-1: config 0 has no interface number 0 [ 97.189987][ T9] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 97.200191][ T9] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 97.210137][ T9] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.223520][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.230380][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.239627][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 97.250547][ T10] pwc: Registered as video103. [ 97.257101][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.266165][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 97.281768][ T9] usb 4-1: Product: syz [ 97.286495][ T9] usb 4-1: Manufacturer: syz [ 97.291475][ T9] usb 4-1: SerialNumber: syz [ 97.303235][ T5955] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.334499][ T9] usb 4-1: config 0 descriptor?? [ 97.340131][ T10] usb 3-1: USB disconnect, device number 8 [ 97.353402][ T9] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 97.375799][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 97.398156][ T9] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 97.474034][ T5955] usb 1-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 97.498422][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 97.504397][ T6238] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.510425][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 50959, setting to 64 [ 97.533351][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.549427][ T5955] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 97.561765][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 97.572212][ T5916] usb 4-1: USB disconnect, device number 9 [ 97.583748][ T5955] usb 1-1: Product: syz [ 97.590742][ T5955] usb 1-1: Manufacturer: syz [ 97.601099][ T5955] usb 1-1: SerialNumber: syz [ 97.607706][ T5916] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 97.624867][ T5955] usb 1-1: config 0 descriptor?? [ 97.631355][ T5916] cyberjack 4-1:0.69: device disconnected [ 97.641388][ T6235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.860738][ T5955] radio-si470x 1-1:0.0: DeviceID=0xa78c ChipID=0x46e0 [ 97.932216][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 97.984445][ T6251] tipc: Started in network mode [ 97.990534][ T6251] tipc: Node identity ac14140f, cluster identity 4711 [ 97.998071][ T6251] tipc: New replicast peer: 255.255.255.83 [ 98.005620][ T6251] tipc: Enabled bearer , priority 10 [ 98.061487][ T5955] radio-si470x 1-1:0.0: software version 167, hardware version 140 [ 98.067799][ T6253] netlink: 277 bytes leftover after parsing attributes in process `syz.2.114'. [ 98.101916][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 98.117280][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.145639][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.154928][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 98.177877][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.193949][ T10] usb 2-1: config 0 descriptor?? [ 98.281606][ T5955] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 98.302020][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.308815][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.315666][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.322308][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.329021][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.335714][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.342373][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.349202][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.355854][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.362488][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.369284][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.375922][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.382553][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.389274][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.395159][ T6259] overlay: filesystem on ./bus is read-only [ 98.396476][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.409184][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.415818][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.416717][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.422956][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.423158][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.443966][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.450693][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.457499][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.464207][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.471493][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.478198][ T5955] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 98.478298][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.486785][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.493363][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.499908][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.508908][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.515494][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.522277][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.528902][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.535766][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.542351][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.548891][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.555563][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.562445][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.569033][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.575830][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.582408][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.588970][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.595839][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.602699][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.608620][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.610891][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.618481][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.626987][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.649767][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.655327][ T9] usb 3-1: Product: syz [ 98.657613][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.668280][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.669415][ T6242] openvswitch: netlink: Key type 31 is not supported [ 98.675082][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.689221][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.696167][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.704239][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.712340][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.720118][ T9] usb 3-1: Manufacturer: syz [ 98.720139][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.732367][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.739929][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.747185][ T9] usb 3-1: SerialNumber: syz [ 98.747224][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.759658][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.766559][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.773195][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.779886][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.786514][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 98.793505][ T5955] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 98.797579][ T10] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 98.820915][ T5955] usb 1-1: USB disconnect, device number 5 [ 98.832515][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.900668][ T5923] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.123255][ T10] tipc: Node number set to 2886997007 [ 99.180690][ T5955] usb 2-1: USB disconnect, device number 10 [ 99.519052][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.530222][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.542014][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 99.581485][ T5955] usb 3-1: USB disconnect, device number 9 [ 99.631811][ T5956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.701770][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 99.718038][ T5916] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 99.738522][ T5916] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 99.750942][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.760694][ T5916] usb 4-1: Product: syz [ 99.765751][ T5916] usb 4-1: Manufacturer: syz [ 99.770748][ T5916] usb 4-1: SerialNumber: syz [ 99.788129][ T5916] usb 4-1: config 0 descriptor?? [ 99.793348][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 99.798493][ T6282] netlink: 277 bytes leftover after parsing attributes in process `syz.1.124'. [ 99.813243][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 99.822321][ T5916] usb 4-1: setting power ON [ 99.828406][ T5956] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.840232][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 99.852203][ T5956] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.871272][ T5956] usb 1-1: config 1 interface 0 has no altsetting 0 [ 99.879030][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.897493][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.907287][ T5916] usb 4-1: media controller created [ 99.914168][ T5956] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.931726][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.940823][ T5956] usb 1-1: Product: 랓⡲瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮珇㷕ꠂ㹎笹쮴⋯୚﵀쏽儸모쉓热龇澥⯀湒ᖧ懲䤬恑Ṛꕜ뭦쥴벡﫥঴⸧／璫䌄령盵殽Ψ햎鱖㤁ݧࡹ춧秷皓銼ዞ쁞瀁빴펤醇쥰഑尸⥮嚝鎁퇖⑺윏핈贴ት푿䟂 [ 99.973330][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.982573][ T5956] usb 1-1: Manufacturer: င [ 99.993508][ T5956] usb 1-1: SerialNumber: syz [ 99.998586][ T5916] usb 4-1: selecting invalid altsetting 6 [ 100.006196][ T5916] usb 4-1: digital interface selection failed (-22) [ 100.014099][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 100.018803][ T6273] dvb-usb: bulk message failed: -22 (3/0) [ 100.024494][ T5916] usb 4-1: setting power OFF [ 100.031213][ T6277] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.039873][ T6273] cxusb: i2c rd: len=169 is too big! [ 100.039873][ T6273] [ 100.045705][ T6277] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.050212][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 100.064666][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 100.074434][ T5916] (NULL device *): no alternate interface [ 100.098902][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 100.145116][ T5916] usb 4-1: USB disconnect, device number 10 [ 100.171984][ T5923] usb 3-1: Service connection timeout for: 256 [ 100.194490][ T5923] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 100.204398][ T5923] ath9k_htc: Failed to initialize the device [ 100.216451][ T5955] usb 3-1: ath9k_htc: USB layer deinitialized [ 100.276373][ T5956] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 100.295898][ T5956] usb 1-1: USB disconnect, device number 6 [ 100.622177][ T5955] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 100.782108][ T5955] usb 3-1: device descriptor read/64, error -71 [ 100.801257][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 100.972302][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 101.022206][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.045845][ T6313] openvswitch: netlink: IP tunnel dst address not specified [ 101.058289][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 101.071477][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 101.083409][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 101.094404][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 101.143594][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 101.153568][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 101.162503][ T5955] usb 3-1: device descriptor read/64, error -71 [ 101.167566][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.182170][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.211878][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 101.223867][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 101.236168][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 101.245782][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.265731][ T9] usb 4-1: config 0 descriptor?? [ 101.272174][ T5955] usb usb3-port1: attempt power cycle [ 101.284078][ T6299] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.233236][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 102.325218][ T5955] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.397330][ T5955] usb 3-1: device descriptor read/8, error -71 [ 102.640801][ T5956] usb 4-1: USB disconnect, device number 11 [ 102.647077][ T5955] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 102.656253][ T5864] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 102.669891][ T6323] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.709947][ T5955] usb 3-1: device descriptor read/8, error -71 [ 102.771945][ T6320] syz.0.138 (6320): drop_caches: 2 [ 102.842416][ T5955] usb usb3-port1: unable to enumerate USB device [ 103.401799][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.584160][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.601854][ T9] usb 2-1: config 0 has no interface number 0 [ 103.626223][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.645665][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.662338][ T9] usb 2-1: Product: syz [ 103.669940][ T9] usb 2-1: Manufacturer: syz [ 103.678864][ T9] usb 2-1: SerialNumber: syz [ 103.689007][ T9] usb 2-1: config 0 descriptor?? [ 104.029770][ T6360] syz.0.151 (6360): drop_caches: 2 [ 104.067382][ T5923] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 104.088998][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 104.155105][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.202921][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 104.228347][ T9] usb 2-1: media controller created [ 104.254576][ T5923] usb 3-1: config 0 has no interfaces? [ 104.265966][ T5923] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 104.691786][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.711757][ T5923] usb 3-1: Product: syz [ 104.718276][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.729721][ T5923] usb 3-1: Manufacturer: syz [ 104.737277][ T5923] usb 3-1: SerialNumber: syz [ 104.834736][ T5923] usb 3-1: config 0 descriptor?? [ 104.853263][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 105.081498][ T9] usb 2-1: USB disconnect, device number 11 [ 105.094923][ T6354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.150'. [ 105.134912][ T5923] usb 3-1: USB disconnect, device number 14 [ 105.516193][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 105.560983][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.738539][ T5916] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.758521][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.768007][ T5916] usb 1-1: Product: syz [ 105.776502][ T5916] usb 1-1: Manufacturer: syz [ 105.783557][ T5916] usb 1-1: SerialNumber: syz [ 105.802521][ T5916] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.822586][ T5955] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.958353][ T6387] syz.3.161 (6387): drop_caches: 2 [ 106.402647][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 106.439519][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.450400][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.613460][ T5923] usb 1-1: USB disconnect, device number 7 [ 107.091830][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 107.121854][ T5955] usb 1-1: Service connection timeout for: 256 [ 107.128318][ T5955] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 107.137896][ T5955] ath9k_htc: Failed to initialize the device [ 107.144671][ T5923] usb 1-1: ath9k_htc: USB layer deinitialized [ 107.183941][ T6400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.255470][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.269175][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.278929][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.291235][ T9] usb 4-1: config 0 descriptor?? [ 107.317649][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 107.641111][ T6416] pim6reg1: entered promiscuous mode [ 107.647398][ T6416] pim6reg1: entered allmulticast mode [ 107.717853][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.725513][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.743134][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.758518][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.767509][ T5864] Bluetooth: hci0: command 0x0401 tx timeout [ 107.775532][ T6379] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 107.787724][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.796485][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.806013][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.819008][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 107.828080][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.835849][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 107.844333][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 107.852299][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 107.859767][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 107.869314][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 108.079511][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 108.294920][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.306473][ T9] pwc: Registered as video103. [ 108.328298][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 108.364538][ T5956] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.387405][ T9] usb 4-1: USB disconnect, device number 12 [ 108.531883][ T5955] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 108.542905][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.554267][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.564606][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.577936][ T5956] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 108.587332][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.598306][ T5956] usb 1-1: config 0 descriptor?? [ 108.722355][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 108.724375][ T5864] Bluetooth: hci2: command tx timeout [ 108.731394][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.746344][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.757313][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.770605][ T5955] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 108.780695][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.793208][ T5955] usb 3-1: config 0 descriptor?? [ 108.832758][ T5955] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 108.865247][ T5219] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 108.887887][ T5219] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 108.918045][ T6447] openvswitch: netlink: IP tunnel dst address not specified [ 108.928219][ T5219] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 108.982792][ T6189] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 109.021875][ T5219] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 109.036794][ T6435] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 109.058279][ T5219] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 109.072016][ T9] usb 3-1: USB disconnect, device number 15 [ 109.079567][ T5956] hid-multitouch 0003:0EEF:72D0.0005: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 109.257616][ T6430] netlink: 596 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.295856][ T5955] usb 1-1: USB disconnect, device number 8 [ 109.382018][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 109.548251][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.566294][ T5923] usb 4-1: can't read configurations, error -61 [ 109.701823][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 109.864156][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.888340][ T5923] usb 4-1: can't read configurations, error -61 [ 109.901905][ T5923] usb usb4-port1: attempt power cycle [ 110.036330][ T6471] FAULT_INJECTION: forcing a failure. [ 110.036330][ T6471] name failslab, interval 1, probability 0, space 0, times 1 [ 110.058047][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.190 Not tainted syzkaller #0 PREEMPT(full) [ 110.058072][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.058081][ T6471] Call Trace: [ 110.058087][ T6471] [ 110.058094][ T6471] dump_stack_lvl+0x189/0x250 [ 110.058116][ T6471] ? __pfx____ratelimit+0x10/0x10 [ 110.058141][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.058156][ T6471] ? __pfx__printk+0x10/0x10 [ 110.058181][ T6471] ? __pfx___might_resched+0x10/0x10 [ 110.058198][ T6471] ? fs_reclaim_acquire+0x7d/0x100 [ 110.058220][ T6471] should_fail_ex+0x414/0x560 [ 110.058244][ T6471] should_failslab+0xa8/0x100 [ 110.058265][ T6471] kmem_cache_alloc_node_noprof+0x77/0x710 [ 110.058282][ T6471] ? __alloc_skb+0x112/0x2d0 [ 110.058300][ T6471] ? netlink_autobind+0xdb/0x300 [ 110.058324][ T6471] __alloc_skb+0x112/0x2d0 [ 110.058348][ T6471] netlink_sendmsg+0x5c6/0xb30 [ 110.058379][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.058404][ T6471] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.058427][ T6471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.058448][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.058471][ T6471] __sock_sendmsg+0x21c/0x270 [ 110.058494][ T6471] ____sys_sendmsg+0x505/0x830 [ 110.058516][ T6471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.058548][ T6471] ? import_iovec+0x74/0xa0 [ 110.058570][ T6471] ___sys_sendmsg+0x21f/0x2a0 [ 110.058588][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.058648][ T6471] ? __fget_files+0x2a/0x420 [ 110.058663][ T6471] ? __fget_files+0x3a0/0x420 [ 110.058689][ T6471] __x64_sys_sendmsg+0x19b/0x260 [ 110.058708][ T6471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.058733][ T6471] ? __pfx_ksys_write+0x10/0x10 [ 110.058759][ T6471] ? do_syscall_64+0xbe/0xfa0 [ 110.058778][ T6471] do_syscall_64+0xfa/0xfa0 [ 110.058791][ T6471] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.058814][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.058830][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 110.058848][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.058861][ T6471] RIP: 0033:0x7fd0b3b8eec9 [ 110.058876][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.058888][ T6471] RSP: 002b:00007fd0b498b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.058906][ T6471] RAX: ffffffffffffffda RBX: 00007fd0b3de5fa0 RCX: 00007fd0b3b8eec9 [ 110.058922][ T6471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.058930][ T6471] RBP: 00007fd0b498b090 R08: 0000000000000000 R09: 0000000000000000 [ 110.058939][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.058948][ T6471] R13: 00007fd0b3de6038 R14: 00007fd0b3de5fa0 R15: 00007ffdae559ff8 [ 110.058976][ T6471] [ 110.412215][ T5923] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 110.461108][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.469198][ T5923] usb 4-1: can't read configurations, error -61 [ 110.602191][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 110.624569][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.632591][ T5923] usb 4-1: can't read configurations, error -61 [ 110.639338][ T5923] usb usb4-port1: unable to enumerate USB device [ 111.183628][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 111.405042][ T6506] netlink: 'syz.2.203': attribute type 10 has an invalid length. [ 111.435924][ T6506] team0: Port device macvlan1 added [ 111.526855][ T6511] sctp: [Deprecated]: syz.2.206 (pid 6511) Use of int in maxseg socket option. [ 111.526855][ T6511] Use struct sctp_assoc_value instead [ 111.549150][ T6512] sctp: [Deprecated]: syz.2.206 (pid 6512) Use of int in maxseg socket option. [ 111.549150][ T6512] Use struct sctp_assoc_value instead [ 111.686948][ T6517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.208'. [ 111.697190][ T6517] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 111.704858][ T6517] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 111.762488][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 111.803300][ T6521] netlink: 9 bytes leftover after parsing attributes in process `syz.0.210'. [ 111.885000][ T5923] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 111.907273][ T2950] Bluetooth: Error in BCSP hdr checksum [ 112.045687][ T5923] usb 3-1: Invalid ep0 maxpacket: 64 [ 112.152819][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 112.173197][ T2950] Bluetooth: Error in BCSP hdr checksum [ 112.202967][ T5923] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 112.371874][ T5923] usb 3-1: Invalid ep0 maxpacket: 64 [ 112.379262][ T5923] usb usb3-port1: attempt power cycle [ 112.432620][ T2950] Bluetooth: Error in BCSP hdr checksum [ 112.455121][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.613583][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.626034][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.639862][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.652066][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 112.661227][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.677924][ T6537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.703359][ T2950] Bluetooth: Error in BCSP hdr checksum [ 112.732147][ T5923] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 112.754644][ T5923] usb 3-1: Invalid ep0 maxpacket: 64 [ 112.882008][ T5923] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 112.906119][ T5923] usb 3-1: Invalid ep0 maxpacket: 64 [ 112.912810][ T5923] usb usb3-port1: unable to enumerate USB device [ 112.962226][ T2996] Bluetooth: Error in BCSP hdr checksum [ 113.222584][ T2977] Bluetooth: Error in BCSP hdr checksum [ 113.279638][ T6557] ceph: Path missing in source [ 113.494025][ T78] Bluetooth: Error in BCSP hdr checksum [ 113.670847][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.681884][ T5876] Bluetooth: hci4: command 0x1003 tx timeout [ 113.685257][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.688603][ T5864] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.763834][ T78] Bluetooth: Error in BCSP hdr checksum [ 114.022027][ T78] Bluetooth: Error in BCSP hdr checksum [ 114.082234][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 114.091915][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input16 [ 114.151001][ T10] usb 1-1: USB disconnect, device number 9 [ 114.156997][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 114.292283][ T2950] Bluetooth: Error in BCSP hdr checksum [ 114.553338][ T2950] Bluetooth: Error in BCSP hdr checksum [ 114.750053][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 114.973851][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.033733][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.086385][ T36] ------------[ cut here ]------------ [ 115.093294][ T36] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3ca/0x440, CPU#0: kworker/u8:2/36 [ 115.105074][ T36] Modules linked in: [ 115.109328][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 115.119179][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.129527][ T36] Workqueue: cfg80211 cfg80211_event_work [ 115.135455][ T36] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 115.141923][ T36] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 aa a3 00 cc e8 02 3f d3 f6 90 0f 0b 90 eb bd e8 f7 3e d3 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 e7 3e d3 f6 90 0f 0b 90 e9 de fd [ 115.161562][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.167743][ T36] RSP: 0018:ffffc90000ac78c0 EFLAGS: 00010293 [ 115.174072][ T36] RAX: ffffffff8aecda29 RBX: dffffc0000000000 RCX: ffff888142ae1e40 [ 115.182774][ T36] RDX: 0000000000000000 RSI: ffffffff8dc89575 RDI: ffffffff8c053d60 [ 115.192057][ T36] RBP: ffffc90000ac7990 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 115.201272][ T36] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffff8880583ecdd0 [ 115.210314][ T36] R13: 1ffff92000158f20 R14: ffff888022bb3398 R15: 0000000000000006 [ 115.219038][ T36] FS: 0000000000000000(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000 [ 115.228259][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.235823][ T36] CR2: 00007fc17cfe0f98 CR3: 000000000e338000 CR4: 00000000003526f0 [ 115.244175][ T36] DR0: 0000000000000006 DR1: 00000000000007ff DR2: 0000100000000006 [ 115.252682][ T36] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 115.261111][ T36] Call Trace: [ 115.264769][ T36] [ 115.268106][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.274370][ T36] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 115.280730][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 115.286187][ T36] cfg80211_process_wdev_events+0x38a/0x4f0 [ 115.293278][ T36] cfg80211_process_rdev_events+0xa1/0x110 [ 115.300200][ T36] cfg80211_event_work+0x31/0x70 [ 115.305835][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 115.312481][ T36] process_scheduled_works+0xae1/0x17b0 [ 115.318517][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.325142][ T36] worker_thread+0x8a0/0xda0 [ 115.329905][ T36] kthread+0x711/0x8a0 [ 115.334286][ T36] ? __pfx_worker_thread+0x10/0x10 [ 115.339470][ T36] ? __pfx_kthread+0x10/0x10 [ 115.344331][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.349748][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.355037][ T36] ? __pfx_kthread+0x10/0x10 [ 115.359756][ T36] ret_from_fork+0x4bc/0x870 [ 115.364493][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 115.369634][ T36] ? __switch_to_asm+0x39/0x70 [ 115.374469][ T36] ? __switch_to_asm+0x33/0x70 [ 115.379288][ T36] ? __pfx_kthread+0x10/0x10 [ 115.383981][ T36] ret_from_fork_asm+0x1a/0x30 [ 115.389097][ T36] [ 115.392425][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.399810][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 115.409186][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.419419][ T36] Workqueue: cfg80211 cfg80211_event_work [ 115.425527][ T36] Call Trace: [ 115.429003][ T36] [ 115.432061][ T36] dump_stack_lvl+0x99/0x250 [ 115.437194][ T36] ? __asan_memcpy+0x40/0x70 [ 115.441802][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.447115][ T36] ? __pfx__printk+0x10/0x10 [ 115.451856][ T36] vpanic+0x237/0x6d0 [ 115.455944][ T36] ? __pfx_vpanic+0x10/0x10 [ 115.460541][ T36] ? is_bpf_text_address+0x292/0x2b0 [ 115.466021][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 115.471367][ T36] panic+0xb9/0xc0 [ 115.475274][ T36] ? __pfx_panic+0x10/0x10 [ 115.479728][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 115.484942][ T36] __warn+0x334/0x4c0 [ 115.488939][ T36] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 115.494938][ T36] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 115.500508][ T36] report_bug+0x2be/0x4f0 [ 115.504856][ T36] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 115.510776][ T36] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 115.516410][ T36] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 115.522050][ T36] handle_bug+0x84/0x160 [ 115.526657][ T36] exc_invalid_op+0x1a/0x50 [ 115.531311][ T36] asm_exc_invalid_op+0x1a/0x20 [ 115.536260][ T36] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 115.542502][ T36] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 aa a3 00 cc e8 02 3f d3 f6 90 0f 0b 90 eb bd e8 f7 3e d3 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 e7 3e d3 f6 90 0f 0b 90 e9 de fd [ 115.562103][ T36] RSP: 0018:ffffc90000ac78c0 EFLAGS: 00010293 [ 115.568295][ T36] RAX: ffffffff8aecda29 RBX: dffffc0000000000 RCX: ffff888142ae1e40 [ 115.576378][ T36] RDX: 0000000000000000 RSI: ffffffff8dc89575 RDI: ffffffff8c053d60 [ 115.584552][ T36] RBP: ffffc90000ac7990 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 115.592636][ T36] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffff8880583ecdd0 [ 115.600822][ T36] R13: 1ffff92000158f20 R14: ffff888022bb3398 R15: 0000000000000006 [ 115.608851][ T36] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 115.614477][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.619677][ T36] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 115.625670][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 115.631220][ T36] cfg80211_process_wdev_events+0x38a/0x4f0 [ 115.637301][ T36] cfg80211_process_rdev_events+0xa1/0x110 [ 115.643167][ T36] cfg80211_event_work+0x31/0x70 [ 115.648209][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 115.654122][ T36] process_scheduled_works+0xae1/0x17b0 [ 115.659721][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.665729][ T36] worker_thread+0x8a0/0xda0 [ 115.670342][ T36] kthread+0x711/0x8a0 [ 115.674409][ T36] ? __pfx_worker_thread+0x10/0x10 [ 115.679510][ T36] ? __pfx_kthread+0x10/0x10 [ 115.684108][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.689389][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.694579][ T36] ? __pfx_kthread+0x10/0x10 [ 115.699191][ T36] ret_from_fork+0x4bc/0x870 [ 115.703781][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 115.709069][ T36] ? __switch_to_asm+0x39/0x70 [ 115.713871][ T36] ? __switch_to_asm+0x33/0x70 [ 115.718631][ T36] ? __pfx_kthread+0x10/0x10 [ 115.723220][ T36] ret_from_fork_asm+0x1a/0x30 [ 115.727990][ T36] [ 115.731140][ T36] Kernel Offset: disabled [ 115.735468][ T36] Rebooting in 86400 seconds..