last executing test programs: 9.271711437s ago: executing program 2 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4000000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x0, 0x11, 0x3, "49769e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0x1a}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.573020091s ago: executing program 2 (id=389): prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="080000000000000002004e20ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002004e236401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1e010100000000061a75a4aa15f60e8c786357eaad000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100"/912], 0x390) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)="d1c09074a946002a3f22b963b61ca0c8705b6cce19187c2c88a91bdb644491644b72a420a9b57a0db08fd6a519af39bf07ad8acedfc7ed96b3eb2b6143a41970695e837d773966a7ec697817cb4b5d59a2dd5e7d15b43eea7541c2a6f030b202ab4ecfaa320415ae80d8efd8452f2a69dbbfafb24f53df1d1886110127f5f42d5294f512ccce6df0f5f73969379db50325c37a81f01e6cec72421cbc", 0x9c}, {&(0x7f00000003c0)="518cc4e80f29e8a084f9640a5a053ad5e76be634e71a4609f62bcefadd8f5b84b26cdbbda46f9f4416e4f79bf4a4c875f33a8462e94dc7e8c38aecafcdafc5444e54e8c1036b0d73bd3b7cd9b680281e5e1008cb1c643b2b708d068174ed08e040d3bf16b1f89cbf9c33d4e2523c61a685c75e", 0x73}, {&(0x7f0000000480)="d599502bae1263265fa98fb1454bc8fbeb5bed2cd2f81d23457298f0b1390ac468f4e1a1df2fb97f9893b1ce492d83b7cd5423f56ae5a2a34b0a8ede42fcbf91ece92fa4328a633731b6cf2fdc82df998eead7b92c6662675ce4f3a07945b03ae49b7cc791cdae67cf32257066a46c83c6b1e1daf2e4f0e64996918a3e38902c5544979378e6af1ffa6c89406a241b4879ac11231213481e928aef1584db555cce201297b2a1003bb17b06b07787015a7e9a3f130e9d00f2abc61c27f8ceb8f494763dfb61", 0xc5}, {&(0x7f0000000580)="6c137850c37e9ab6a79b6c6f04d4327fe1ab6c1595382006f7cfd13921b45c9b18b951cfd49a9c27ca86d1d523eb5f1c2851599cb08c44bc76b633b810c938ea4c2a869ee976a7c62c0802272239b2bcb5caa7e7d6edecb469bfaa7c3c88be3b4cfb37b126b37fff74af8dff9a2bcfa93f6b47551e19a993b46ec9650a71308896e7dc4e6fb7a605911628525d964180d8f9272b9caa9cf815bb7280d508cba6f9c12f654499ef66b5f24c0c9d37e75da08e39d2fa358333715d65cc0553289500bafff0", 0xc4}, {&(0x7f0000000680)="c992fd31010b8fb2fa7c540f669fe83acf86642152e6b80478d094363de42f0e5a727da1eb878be630651b56c5602ad655399bb2c6250fc4f5e7d818b11d0a9b8661856b3435ca11ad7970383bcb456fb922940eae8bc1b501f2323831fea56208a67cc836437bba977100253704bbb4e230c0b1a0d0017abaa1dbbe345a55fbe3018d9a2b54056d015f3f650b01d2c46faeef93efd7f0e87801041e8fa8da58fa2826fa2756f209e659aa0b3f7d4317", 0xb0}], 0x5}, 0x1) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'macsec0\x00', 0x2}, 0x18) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="204b1180ff3701"], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b04, 0x0) 4.373142582s ago: executing program 1 (id=397): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x1, 0x2011, 0x0, 0x0}, {0x18d, 0x8a00, 0x0, &(0x7f0000000040)}, {0x5, 0x0, 0x0, 0x0}], 0x3}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x1, 0x4, 0x8, &(0x7f0000000040)={0x4, "20bb0845a2604d0ce61a10cbdd4373bd65f39a6aa0fc8cb4c26fc081f756a1a2d6"}}) 3.72027035s ago: executing program 0 (id=398): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x82400, 0x0) recvmsg$unix(r0, &(0x7f0000000a40)={&(0x7f0000000600), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/6, 0x6}], 0x5, &(0x7f00000009c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x1) (async) recvmsg$unix(r0, &(0x7f0000000a40)={&(0x7f0000000600), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/6, 0x6}], 0x5, &(0x7f00000009c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x1) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000576d0404ca0000000000010902240001000000000904000005030003000921000005012a050009f1800300f10d0054"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000040)={0x14, &(0x7f0000000240)={0x20, 0x8, 0xfc, {0xfc, 0xa, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "39ad11ff28298ae70b0b1176d4e1752c39fcc08a40a4556ba52839ac292fce44296dde4a7c6497d8778fd4f48de19394ac33209b85f808c0921171a58d2073ea57296e949f4c3308e0a82420d396ad827d99296f643dcb03e4086f06e549fe5e60b88277090c09ef3f12c187d1d8294fd152917c3a86fd92a57b6c9dab7248f30c3de708aae6e7b22e58f5a1508e392fc6c55e23be3caed94a72d5cc400ecd6bd52b5a5f49f62b956a3dc967c6cd8c7bb481bb2c8f51b8463f802567d6346d6dbbcd692766807aec445c9cb7ab40ae41877644d300f936a9aa6136155f8a24fffc549b864a1b33a128d17ef830f8b9ec9de64309c451ff"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000140)={0x20, 0xe, 0x91, "657eb5d2997853203ef080f8b229e34af94bd094ae761a53cd4ef445c46e1003b6c838144f9608f00e9836a1d49895f558afa1bce564667bf9065dea59b829955dbce4b6d12fa42a27dc2b676256872a00e6f55a59b8552dec2e59d2e130ab71db9ac8638ee8c386d73608cd46114aea030eb83c6b6e0356499d02a4287877799acefeea56a2e97e76b1125eb8b1ffcaf8"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x400}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "3f110fa7f75565443745add15d4b65e488cef969c56345a1b1c293f92781b35dd5fc4b14d525683b3b851f58c0a267"}}) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000407"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.581393473s ago: executing program 2 (id=399): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.50923955s ago: executing program 2 (id=400): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x10000005, 0x8cd5, 0x17, 0x5}) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0x7324000, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x40, 0x7, 0x4005, 0x7f, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x64, 0x0, 0x6f, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xad, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x1f, 0x86, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x12, 0x1, [{0x7, 0xa, "5b9ab035a75d4457"}, {0x2, 0x2}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x8, 0x0, 0xffff, 0xf, {{0x2a, 0x4, 0x2, 0x39, 0xa8, 0x68, 0x0, 0xfc, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x1, [{@loopback, 0x4}, {@local, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x59c}, {@multicast1, 0x9}]}, @generic={0x86, 0x2}, @noop, @cipso={0x86, 0x17, 0x1, [{0x5, 0x8, "ab07f41105b9"}, {0x2, 0x9, "8b26f463f468ad"}]}, @end, @timestamp_prespec={0x44, 0x54, 0x31, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0xffff}, {@multicast2, 0xfff}, {@multicast2, 0xac}, {@multicast1}, {@broadcast, 0xfffffffc}, {@loopback, 0x10001}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x400}, {@loopback, 0x8ed9}]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@mcast2, 0x0}, &(0x7f00000006c0)=0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x80, 0x7, 0xefa, 0x3, {{0x17, 0x4, 0x1, 0x3, 0x5c, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0x5, "90cd1c"}, {0x7, 0xc, "2d9f4f1718c3fddbcef4"}]}, @rr={0x7, 0x17, 0xf4, [@multicast2, @remote, @local, @empty, @multicast2]}, @rr={0x7, 0x17, 0x7a, [@broadcast, @multicast1, @multicast2, @rand_addr=0x64010101, @empty]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x2, 0x7, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x64, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@lsrr={0x83, 0xf, 0xa2, [@remote, @private=0xa010100, @multicast2]}, @rr={0x7, 0x7, 0xde, [@empty]}, @generic={0x44, 0x3, "8d"}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000900)={@rand_addr, 0x0}, &(0x7f0000000940)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000980)={'gretap0\x00', 0x0, 0x1, 0x40, 0x0, 0x81, {{0x3b, 0x4, 0x3, 0x11, 0xec, 0xb, 0x0, 0x6, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0xf, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @lsrr={0x83, 0x7, 0x62, [@dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0xf, 0xa0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @timestamp_prespec={0x44, 0x44, 0xc8, 0x3, 0x8, [{@loopback, 0xae5}, {@rand_addr=0x64010101}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x6}, {@local, 0xf6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8f5}]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x7f}]}, @end, @cipso={0x86, 0x32, 0x0, [{0x2, 0xe, "e2f38896a52a61149db7b6ea"}, {0x0, 0x10, "a48abcd252fff405019d06627379"}, {0x1, 0xe, "613ff47811c1ebf91067d4a2"}]}, @ssrr={0x89, 0x1b, 0xe9, [@multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) (async) r18 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r18, &(0x7f0000000100)={0x1d, r19, 0x2, {0x1, 0xff}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c40)={0x0, @initdev, @broadcast}, &(0x7f0000000c80)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000cc0)={0xae8, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x453b}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3b31}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xb, 0x5b, 0x4, 0x6}, {0x3, 0x2, 0x3c}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x55, 0x8}, {0x8000, 0x8, 0x9, 0xa240}]}}}]}}, {{0x8, 0x1, r7}, {0x238, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x46cf}}}]}}, {{0x8, 0x1, r12}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff5f9a}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xae8}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 3.378733093s ago: executing program 3 (id=401): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x8, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000) 3.333372172s ago: executing program 3 (id=402): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) 2.871086069s ago: executing program 3 (id=403): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x17, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000000000deffffffffffffff0200"}) r2 = syz_open_pts(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x41, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xc, "7fff7a2004dc17a8"}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4) 2.75400253s ago: executing program 3 (id=404): futex(&(0x7f0000000080)=0x1, 0xa, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x1) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = socket$caif_stream(0x25, 0x1, 0x2) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000800)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) tkill(0x0, 0xb) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) socketpair(0x18, 0x1, 0x8, &(0x7f0000000080)) readv(r2, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/236, 0xec}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40000046, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r5, 0x4b72, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) syz_fuse_handle_req(r4, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x7f, 0x1, 0xdcf, 0x5, 0xd, 0x0, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000002100)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x4008, 0x6, 0x0, {0x2, 0x4, 0x0, 0x80000001, 0x0, 0x1, 0x4000256, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0xffffffffffffffff, 0x0, 0x0, 0xd1f2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) keyctl$link(0x8, r6, r6) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r7 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xfffffffffffffffe, 0x2) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000180)={0x1, 0x1d, 0x10000006, 0x80c80}) 2.385678706s ago: executing program 2 (id=405): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (fail_nth: 4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) 1.842074062s ago: executing program 2 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x4000000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x0, 0x11, 0x3, "49769e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0x1a}, 0x0, 0x0}) 1.606227955s ago: executing program 1 (id=407): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b04, 0x0) 1.50689243s ago: executing program 1 (id=408): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.484782912s ago: executing program 1 (id=409): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x10b8}, 0xff00) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) socket$kcm(0x29, 0x0, 0x0) 1.427175985s ago: executing program 1 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) (async) 1.328784733s ago: executing program 1 (id=411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) read$alg(r1, &(0x7f0000002200)=""/4146, 0x1032) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0xf5, {0xf5, 0x18, "c48e336dd6d2c5781df99c7c93bcb28f8e1ef4a37a73b862f70667c4fc0a08b18b21b29790943353b82e51d41dfcca5b76b0d3d749d05b3363c47099c0e61e584e6d89cacc9205eb74c083cc97002d60ba35a9fa83be2df47a80a1d9cd49b3ab32966235a4e7872d2c8b2b918dd8b5f44127a9cd8cb6e304340c54f01aeba6a308b1af9494758a1818c1f586d8b2770d5852d83be851e143a342153413dcb45431c9ca06b99be45320df04958d38b6b644e62d7f89b6c302015f18c604ed6340145e7bc835dcac023cd201fb0ae37ed47509a88b0386ceba6e950becb08380ddc91710516fa35b5241892ef3093dfd7517508d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000140)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "242ae1aed43a019766aa2fa98d343b80"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x7, 0xa, '\x00', "8329e31c"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x1, 0x9, 0x4, 0x6, 0x7fff, 0xa}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000240)={0x40, 0x0, 0x42, "d181d946477a9b0e36d732715bc58afa447d4d422d0e084b2649ae41d87d41a869da1a2f9d3c7496d8c3e32d3c960a6e99139fb69885241fcbbf478490550ba6643d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x6ea0}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000440)={0x40, 0xb, 0x2, "6eaa"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfc18}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "5b97"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xab}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 1.146834623s ago: executing program 3 (id=412): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x97) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) 1.074219716s ago: executing program 3 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x2, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xf5ed, 0x0, 0xf0}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x350, 0x6, 0x5, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xd, 0x7, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x1, 0xf9}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xe, 0x3, 0x4, 0x20, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1004}}, {0xbd, &(0x7f0000000340)=@string={0xbd, 0x3, "93b772289d00e17412166808957ed8a6c96553252e0bc795bd2de61e809ba200d3caac810568653d2e28c773d53d02a84e3e397be9e6b4cbef225a0b40fdfdc33851a8ba53c2ed70879fa56fc02b526ea715f2612c49d3eee9f751605a1e5ca566bb74c9a1bc3fe1aaeee5fab409272e0fffab74044339b8f576bd6ba8038ed5569c013967077908a7cdf7799376bc92de125ec0017074bea4d3879170c9110d385c6e299d568193d6d101dc7a240fc748d5348d75127fd4c24765"}}]}) 610.199905ms ago: executing program 0 (id=414): write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'stack ', '$*@}\x00'}, 0xb) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmod(r1, 0x40) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xb9, 0x2d50c000000, 0x8000, 0x8}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0xaf, 0x8001, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x7, 0x101, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}]}, 0xbc}}, 0x4008080) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xec, r5, 0x910, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf8ab}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x35}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x40805}, 0x841) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x101ff, 0x6, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', r3, 0x8, 0x80, 0x0, 0x6a18, {{0x47, 0x4, 0x1, 0x2, 0x11c, 0x68, 0x0, 0x67, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x1, [{@local, 0x4}, {@multicast1, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x24, 0xc5, 0x3, 0x9, [{@multicast2, 0xf3b}, {@empty, 0xffffffff}, {@remote, 0x7}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x1f, 0x1f, [@remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x9e, 0x3, 0xb, [{@remote, 0x7}, {@rand_addr=0x64010100, 0x6d87956e}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x10000}, {@remote, 0x6}]}, @timestamp_addr={0x44, 0x4c, 0x6, 0x1, 0x9, [{@empty, 0x6}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x965}, {@empty, 0x401}, {@private=0xa010101, 0x1}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd3}, {@empty}]}, @timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@broadcast, 0x469fe97a}, {@empty, 0xfffffffd}]}, @end, @ssrr={0x89, 0x13, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xaf, [@loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r4, 0x29, 0x7, 0xf, 0x2, 0x16, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x20, 0x700, 0x7ff, 0x3550}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', r4, 0x29, 0x82, 0x4, 0x808, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x700, 0x0, 0x67}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x120, 0x0, 0x900, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xec, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008010}, 0x11) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e24, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x198, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48000}, 0x24040004) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x154, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeaf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000011c0)={'vlan0\x00', {0x2, 0x4e22, @multicast1}}) sendmsg$xdp(r1, &(0x7f0000002740)={&(0x7f0000001200)={0x2c, 0xe, r4, 0x5}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000001240)="1b49b6c494fdb5dc32959a4ace1a17167d52c92f067cdc0aa197b5c19b49dcb2baa42e7a380dcce51ac2b7dbd97392ac255d3d8350577f299fdd87301160df59b0052c64656c28b0c0b8a9f9fb5638db608b6fb645420d03d08d93e03334f240d98ab33e36688444972781ce176da0fb88dc1044f41f728f8acacc47d2e94085e5e28cc1bc873de2674ce94595e419c94c3a00944aea6420529dd8660a703b5b3358bb2b8fc2c91b89dbcd39777e6b184e66942a3012f12da8b972fa43f83aea21b4752b1d6e1cdc064636d2f4c3", 0xce}, {&(0x7f0000001340)="6ba4c05ae12acbc9cf3b8739ef4618895e30af02b3242a7654ea1adb5728f380b064a51a1e5d0f8a90c1f7e1036f6fc8ed74ff9e9a54d7c9c81bb4e884185bfb487de7c2ac5b6a2aca0c37e7ce3e040ca573ed4d15f4a3439c111332b65eb8ca5df77af31419ae7639ee98f02c99f753bc4187689f7d8b716c6279a9d6aab0c2558c5cd56301242e3ac39ca2e7558da35554be62c27cd12f5be3b169354595b6815b786d9c33693c8f8539647d8b1ffc914ccf4850de55c64c12c0122505caf1b4fe7f6218240b5e5a23c80ed017478ad37e8c3ad3b61aa31118366d0a95ae47390b68196701026826061562daa0c801261086985f7ea312239b233d7caf7bd84dd945ac991d8ab66e6118e40ceee1a44041f0d4c968b3987cad7cb7936dcf6a1950bde4744b12106076c53aab238e03514ded4e6890727ae75981a91d51b54077c1f8f035aef4ef98b898b84b1fcbbde70f27653200e471a1a40a6d33ce5e7443daadcd73b85f9f6958d8796e4c824c2145c6b2b0d27a0d2818907a87a0b66bb10369fadd618db28e2d512d5ca5c5f9791920598a3f34b9c98592b7b9fed3df6d855b3a3fcc1d69e51c7ffb45e8ff3ae5fb94853a814e2bf46a5eacf729b07d3a159c26c77a7e334e7c2320f17fb5d01d1964eb8ac8e4c308541f1e47ac77d2f98ac3ce47d687a837f14b6b604b6e38fa7741d19eab9929eaf51e8302d629a4116b05a50bef096ede6b6d0c7e02955d650f95cce97b85d6a0b4f6fcfdd63a1ba4d58cda38e9bb5070e3b8ecf3efa1272645e080ae90d5eedd9aed43a5c471f4987b7dff4096392cede19c79e308736ab6a3de670c12b53b256aad5b3bcbb03661a86a0990fdcab4ac29def9b34b58bda4f2dd61f19d2eb489833330a162cd32b1c75fe50fbf5d0ace20fa94eaf769a4e0b1a2044fb42a55ce4216d646b7a00d7761dbcdb5f56affc6016c60f6bd0a79535bd3702fe210b97af84f3659feb25d3160efa99ee9f887198c5b8b46ee7d6dbec27d3ba452ebea95c725facba1410a5c7aeec7edaef71f87a4f60673d450cd27b8ed864a1906e38ce85b80b0f602ef9373e5de0507e728af23599b0e22d3baf0e1b3558460b655809e7d921148f3495ce471aef1f5d9dffa68c2c71444600e99300f6091538dcc68a751c282a136da328e5f4782b0f8fbf4f2fcc8e46dc598051e14dd7ee3a85cc7101f19295fe0c143fb4f778497c9249c3d4eb9491d6ff078517c33714396466129e1716782b6710d61d752ad03ae8f2a4ebede532f651e7f9e16c875823a44644fc917e59f38e165d9a1d8b243a3c30e66fb61f61175881d9ec70dce9a660ca3d06e9f2f55314e53012846288f8279125272bd83db4bd4a2f8129f7c19f6219faa07e22cfd5a2f7128bc5a9d31057a18e7f4829f919abb247dd479072268c0a4195caf0546b4be5382f32c536882eb000ce3a168b030e8eb28f81f605333db930ed051c5bf9f0ecf8c087bcf029404d2a3bf6e12c7181162c0d0fb77d6b8e1331a870a748c1759995dff573619fbc4beb312b20ef1d931527460fdf21bd9e2f11276ff9e0d11d7030ac31fcd875287c7351c9d1bbebc46d0d9c839f3096e69d8933a4c90843813c5042bb51d2c94072a1916d46009aadcb7ede285e282f18c29179263a3c524fd9afd9e565eafae272601c9ad20590aee844440aeea687ec92ebcc2372ca647d63088a8570b984e133582ca21ea8712d541316219e457430bfd4582131f500efc9b01dd225fd923c541993ef1da95a13be0132c0c0fc787d3bc2ebd3a3a409e121dff4a8a6f71212ec2117a536d0fbf081a26f3220e6321fce44f423da01b0d6248dad1970958db4c68ee991740432c5dd04dc7adcebbec29cbf89e8a1053d1748c5188bdaa6ef63f862921fbdfc55a3f1286e34a703dfc88ac1934c3a810e16da437536604da4489064aae842172c801b8b75f478083dcd22644c82ee60f07182a4188ba2ecce869d29a5a4e91f092d144d565bd08aaf9fcae7cdc987597e3dc6b16346435da7de67f26df77d0685d2a1caeda1c39070b7638451af20c011b4eead3bcc446b48c1b077d760b549c97c028acbc1a9aa2dfb03c16f331a4a1f91f3718830f1d92e66e5abb24d643856e8d9bb1ca53a49a1e88150ab124911277071482ecdf4fb28b963ab890b34cafc8bcb0e40d1924d57dc5ff30b1a9a89e5e1309436c1cb291dd344f560dc519ebefaf5b5a7a4db0007a7af76fd1c5149a729d858ca764dfd3350410c07a3d1bab0ff6f260cb8fdf122f9a58e3d926429384adc205b237b2f228fc948fba9d73d9f8cc959d57b3ba37b6d897d69b7343c180988ec1332f491487ae76e5b3daf5fe216ad9fb3dff90e6ad1c835aa5cedaa94a2b2f432c9bd6046eb7b0c02eea894fc83651cc1327800fbd6ff8f5257e85e23f6134dfcea7a38b8ed3ab54e336b0c847eb28b30cafceb51d64ae41ca06908cb05dc55461d9472ea909ca52eb543b4e7db00d1a9e65910f1f0f86ed1fc79b6882088b3907280253c14589deb8d17e9b01fb4b5431d747ce7cb952fcefbd5a9386f845593c19b173e8b347c9519c30ba749f446b5c5173f59cda79d26a2d1527e88bb1387cd927d4c5bb143660ab5bb5d553b1b298b62c66a7f232cefab57ebabd2cf53ceb3a010041f1acd3364636029c9ed4b527c19ad4ef0d4cd7cc5bb9803b40a76734600c95841ec631eedbb7701e50e5556e01ea363d53a61470c32ec773aebc62b8e76d86263446a455849434e85cb2138d9cd8d28c1bd0e584d6fb6bbc6c6da4321801c598c3b9a77947f14ee4f81993274e2b805eb4187383c946b8e1722db06d3a7bb61ef0ff088f5bf6235ef4332a116a84402b5786a6eb60eb1f2be8c7417fd3400ff59e356565f030f9929eb76555412f0ec9fa8ba4d0c4d299eaebce0719778bd4e98336c8084359f253aea50173d6bb912425ca3bfbf63d2adaacb8c87b7ae35964f7969ea8aeb284b5833d7b8c2073465cdac6c65bf1bed2bce9d69d91e869b7fce2aac282466446776d1103550f107fc640225d7cdee59415a5e141d1d95277083e64599ce546a930979b21b4e56086107b8d97f70276290da4dd8dba4dd5203a4e1321518c6e3dbd650e87f297fa9d217f171fcb971818e2ab61644a408f01cf20aa8b82f7b0f3385209c457ec50b79d309a551bbd0972e672b94cc37162b32fd49acb4e78c76823bb6d6aaffd2129d3a24ba4d76a05414f8e385fc5e76ef2f7dc18b49175b0b3557cb4db6900e2fe7eee935be4ead26f5bc77e850df9cdbee1744f6eda818d1a84129edbb7e72da93898c500ce98d00950190207dbba05649bee78b58f3644badae7c6562e0d890369eae5b5664417358d40bd45a48f73358be5b87e98d98dbfce083e0775d9b7e5714ede997fdddaeb3fbcc74d1c0783f9330d0a73f9ad9959345a113e9245cfef528211cf86b20d2f34e1d017fbdcba264224b2ed4352b84c7dbe577643e7b47d126d1c0ed6d0472c6ab3a2f9c2f4983c8fcd524d650199b4b7b6608926e5147e0f1bf777e63c78ec34dfb93e256481d5d664618831d22d28c2ccc7284eaea79f06d5e80b8f7c403b16df1d25521d84475d1947a0296b9eed9d01a1c5fc9ebafa0ec8c19c8b8ce06c20c220e7f46ac57bc138950da3d638b668745aa6d338792b73f9e8d23721396f8cb2c20b16329e4c9a37a0545cc5bb2ffd834314715ffa31bc219463167b556fa3a229462a6f1c7ea19f504aa6963daad445a51386d39d3d2f178a89436b7278aa9d10577f00ada069a817e6ddd9cf2e99e5bd3a24d899a71efd48056a36d77306ed238cb9769f33e7e920b97d3937c2b3725d5c386f22160009eb0ddf01257536535ce85fad9fb15fbc2f9f553b16be9a7bb6f809d2735e7cb12ace2c4a95af5998f73263785d1cbd7375945d2de5a883cf016e2486ea915163fc588aa8fb3acda059827624cee2ee1af73a98febafda1256710bd4cbaa6c77438123841848099ff66ec058ca08a1ab85344943b8018be2a8778d3442263ab5b8eb0caac481f2822c11e1736eca8000ec5364bff895d2af91d7209375c71eee5dc78bf61060bbd35e309fcdf52f10dd4d526d8c62faaec587d92460d6d9b6c35fb34347806997153cab30c54927fb17e85640ad085f78a4978c73eadaae5382ea9e57faee220479cec99f4293c349696b2d83baef0b25bcc4451994279081ecc9f87fe956ec40270b701ebaca4aefcb98883e66dc0f47d745bd1c1169210ff3e56af7c3026567b61c8d3008dcca66c8625247bc6a4ca0a6ad78a773267b09ece43fb476b5c1a8a53e7fd4adeac2db603513fab42f579f924169d692aa1e04f0b29ce0adf2a24b1431e2a0456894a7319c29e13d2f53b37f9888cd11a0bafa612303a800c27b5f87768addd5519f9c70de3c082f8d40bebf04a10ccbfd6f37ee81955b38b3b9f3d481f6f8f8e7fba8a368505e45d4fa30c5efbe0a7b6da60b9cf7161b2b833506d0d3f71fd0c882ed402429e0b6d2f6e0eccf99eec868005799a51bd86443f11aa4d558efadcf9441dd98306aa3bdde0a38bb05ef8ef5bf9552afac954911e945484136ec0b6c11aa86e16451d3b40430aa8833ed589e9d4c58642cbee59e56b918dccdbd26eb7fbb9162433884b5fc03b399becac9934eaa4b58c8f5a5339aab72df7900016664e99bf88c0357e2d108ce8af206c6df4ad36a1103140d1b72bcd560c754a09db009d7faa7e09219ec4a0683b28fd77b505fb9ee7efe8a9814ed42e2ceb042f36c8231ba68e6866b5aa84fae68d34c7e76a5cc3656e697e33a1ab4573c0349ba1c40d7623b2536e89dcc4a558dcbc4a34462fc348be4769dee8a2724b016c4841f4190d14059c33d0f17af58612b6206f348a62b20d4b538c5890cfea11d5d82f80143ed19dbd0fa16a0bc7bf5fc6564de829fa524267b0469a168794ac3e4ae169cd2b51d28f833b0becd216597b2e522e50a3a34bbe24d5b196d55b909267089b534beb4c9c735170b509550b887c54ef2a63fca4e26b6ca75d28d29016e8cdca81578dc73e4b059477fb7f91d37a1f851b38468656a3432f8043e99bcc101cf166be24f79e01c535a02927ce8bdd1adb3ef32f26af30781925683b3bb5c91e218c21c263b58d738bb9acb9a31e6cdfd4966617edf9c58040fe6cf7306be0f59d6dae0310b05ef82cc5c2e2ddebd57bf1cf36442d917e923b20e3cf5c324594a860f1615c903ca415e22bfe1d1b77f8e7074a489512c4e8c969e3a26368d01937416d233505205e7849dbdfb7d0abcbae692d938529f9afdfb22a364fed4610d81eaf0036a0b75453f911673c6318ab9b383f8c038ac2d3a9182b441365045c26309241aeb8ed93e37e90744817136d8235a4097191db84fbbd0a984fe781c071c9ad69a6e0bf4b0f320e87cb7f71e223f57b20e2595ddf5a188a6a3f479595c7f3317d64c296e74dd80481bf25b6e5e277a8891250846d56c36d04f93d42d9d3f26327b8720ef1b453c155e7d5eab4c2d618b01db7ef372bb9b13cb9ba85bb78941e274c6b27d50c28ad8c649e608d2b3f7edf43e2688ac583d2372de6c7d6187079b54d4f304332a35c0cccd4e74b904648e04a05128b79440e17034c52401c02add8b0fbc86f6dc34f70d62b4f3a76faa7dc8cb339c209bdbc9b13527170d9248cdfe7f3b2d574840a06f399228d409c676d479f7ea0f7c54413d484a40dc4a84d4529365bb44e9e9e3efa33d539e789e39f8d01454523b269", 0x1000}, {&(0x7f0000002340)="469481c00741c68133458fc27d6a5fa63569e96c1bf0d15726596296c6bbc515", 0x20}, {&(0x7f0000002380)="4f464eb0669468cc2c2fe3e66e99c3e56b967c3b8897487d22349514272e51382d63f52586a2f4226018788c7691320336ef080923deb64edc25516bd0a2b5361964e0ef68bd84ae2638421034da0ad6b1daa57ef0af57565012495975ba51f3ea64757e45a79e2aeeaaa1c30a00a2150ca0a0657ec749699bdf98c196f309d7b109ac96d7799d4425fdb2356f2b27d783199bd2757c096dd9bb80dcb720eda824feb88debab6688cba09987e9ce623f", 0xb0}, {&(0x7f0000002440)="716585edf658536739382ecaed31fdc3fe8344948222c4612f4c7d8c140ef1e358ed1f241e314101a6ca4c0c7b55ac18a5ad5fbd8eff922071f4ebf4fdaf548c6abf3112f8baf9cc58a5b60e88996c529088ab795374fe021fddc0fb13efdb4ad9733a3e80f7714249eacac0f477ac4535291b7ac60d967cac2795b087dc36d486010b9db22df867600e3603fcb19f95e8c86feee85c64f0d1ddb3c6abb23a46394c48179d3891788aa5c9a2fd072f3e6714d7fc2f5bd1d26e0f", 0xba}, {&(0x7f0000002500)="9c7477c602b2fe6198f3a4de06e3d49579335813746f7b9d2af0c76dac4ab5dff0622663850ea457f662b76dbb2aa4bbf6aa6507fa4b88321b661f1e3c454c2c2704419af57571e95a03cd804ebfe7d3b9c5b609a1a8b8915264203c2184be11351248c9100ebed99139c7ad818c998ec2e7a2de215d8ce86da2182cf505c207223139ccdf6f697b4b9ba673e365c4198a8f3b7f1d95a59603c0ec657a32f7aaef07b3f20f28a23f9787d387c3eb85a461340581342788dc1f366b761e24b249d7173a467b6f3f2d2f", 0xc9}, {&(0x7f0000002600)="f3bb17708e1efd56ba479b602f97570e9578206f18a171ed0f22d285ae18290632b86315f200eaacceb51444cc1c77e62468ae0d94846bc7fe5d541f63f0e5fa9c6092ca2d929afd68f7d55e7910801a6f39e60a84813d7cf12abe58c27c5c98106181cf44d0528f2009bdca8f3973eb47c50055959b2955b651a1d94464bf94d98e3936909c82874193a06094fbc7d780f1d5f4735a2b34d1eb1153", 0x9c}], 0x7, 0x0, 0x0, 0x48000}, 0x1) socket(0x1e, 0xa, 0x4) read$FUSE(r1, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000047c0)={0x18, 0x0, r11, {0x6}}, 0x18) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000004800)=""/4096, &(0x7f0000005800)=0x1000) r12 = syz_open_dev$video(&(0x7f0000005840), 0x7fffffffffffffff, 0x40002) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000005880)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 529.842163ms ago: executing program 0 (id=415): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (fail_nth: 5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) 153.122806ms ago: executing program 0 (id=416): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b04, 0x0) 70.001872ms ago: executing program 0 (id=417): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 0s ago: executing program 0 (id=418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x1, 0x2011, 0x0, 0x0}, {0x18d, 0x8a00, 0x0, &(0x7f0000000040)}, {0x5, 0x0, 0x0, 0x0}], 0x3}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x1, 0x4, 0x8, &(0x7f0000000040)={0x4, "20bb0845a2604d0ce61a10cbdd4373bd65f39a6aa0fc8cb4c26fc081f756a1a2d6"}}) kernel console output (not intermixed with test programs): ][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 145.363363][ T5915] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 145.433344][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 145.503248][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 145.523268][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 145.530282][ T5915] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.538619][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.548489][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.558597][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.568808][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.582348][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.592495][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.593372][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 145.609976][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 145.621415][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.631259][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.643515][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.653548][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.666704][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.676040][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.678070][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.696065][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.702778][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 145.713192][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.726635][ T24] usb 4-1: config 0 descriptor?? [ 145.809009][ T5915] usb 1-1: usb_control_msg returned -32 [ 145.814806][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 145.900204][ T10] usb 3-1: usb_control_msg returned -32 [ 145.906355][ T10] usbtmc 3-1:16.0: can't read capabilities [ 146.141238][ T24] hid (null): report_id 29495 is invalid [ 146.147181][ T24] hid (null): bogus close delimiter [ 146.158629][ T24] wacom 0003:056A:00F8.0004: unknown main item tag 0x6 [ 146.165663][ T24] wacom 0003:056A:00F8.0004: report_id 29495 is invalid [ 146.170195][ T6451] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 146.172634][ T24] wacom 0003:056A:00F8.0004: item 0 2 1 8 parsing failed [ 146.173974][ T24] wacom 0003:056A:00F8.0004: parse failed [ 146.192388][ T24] wacom 0003:056A:00F8.0004: probe with driver wacom failed with error -22 [ 146.345644][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.355128][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.364241][ T5915] usb 4-1: USB disconnect, device number 26 [ 146.383219][ T9] usb 1-1: USB disconnect, device number 40 [ 147.213220][ T5915] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 147.379292][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.393460][ T5915] usb 1-1: config 0 has no interface number 0 [ 147.432778][ T5915] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 147.442388][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.452849][ T5915] usb 1-1: Product: syz [ 147.457647][ T5915] usb 1-1: Manufacturer: syz [ 147.464081][ T5915] usb 1-1: SerialNumber: syz [ 147.472024][ T5915] usb 1-1: config 0 descriptor?? [ 147.685291][ T5915] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 147.696874][ T5915] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.707474][ T5915] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 147.715939][ T5915] usb 1-1: media controller created [ 147.731023][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.823296][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 147.985589][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.994358][ T24] usb 4-1: config 0 has no interface number 0 [ 148.006908][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 148.016447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.024968][ T24] usb 4-1: Product: syz [ 148.032795][ T24] usb 4-1: Manufacturer: syz [ 148.038994][ T24] usb 4-1: SerialNumber: syz [ 148.060242][ T24] usb 4-1: config 0 descriptor?? [ 148.109999][ T9] usb 3-1: USB disconnect, device number 34 [ 148.285338][ T24] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 148.297289][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.308032][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 148.316283][ T24] usb 4-1: media controller created [ 148.332524][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.491801][ T6465] FAULT_INJECTION: forcing a failure. [ 148.491801][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.508171][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) [ 148.508200][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.508212][ T6465] Call Trace: [ 148.508221][ T6465] [ 148.508229][ T6465] dump_stack_lvl+0x189/0x250 [ 148.508262][ T6465] ? __pfx____ratelimit+0x10/0x10 [ 148.508287][ T6465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.508313][ T6465] ? __pfx__printk+0x10/0x10 [ 148.508338][ T6465] ? __might_fault+0xb0/0x130 [ 148.508376][ T6465] should_fail_ex+0x414/0x560 [ 148.508403][ T6465] _copy_from_user+0x2d/0xb0 [ 148.508433][ T6465] memdup_user+0x5e/0xd0 [ 148.508454][ T6465] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 148.508490][ T6465] i2cdev_ioctl+0x64b/0x820 [ 148.508511][ T6465] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.508538][ T6465] ? __fget_files+0x3a0/0x420 [ 148.508563][ T6465] ? __fget_files+0x2a/0x420 [ 148.508592][ T6465] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.508611][ T6465] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.508633][ T6465] __se_sys_ioctl+0xfc/0x170 [ 148.508676][ T6465] do_syscall_64+0xfa/0xfa0 [ 148.508705][ T6465] ? irqentry_exit+0x10f/0x640 [ 148.508729][ T6465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.508749][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 148.508774][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.508793][ T6465] RIP: 0033:0x7f657198f6c9 [ 148.508811][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.508829][ T6465] RSP: 002b:00007f656fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.508851][ T6465] RAX: ffffffffffffffda RBX: 00007f6571be5fa0 RCX: 00007f657198f6c9 [ 148.508882][ T6465] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 148.508894][ T6465] RBP: 00007f656fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 148.508907][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.508918][ T6465] R13: 00007f6571be6038 R14: 00007f6571be5fa0 R15: 00007ffc0f7e0838 [ 148.508956][ T6465] [ 148.725060][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 148.803587][ T5915] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 148.823387][ T24] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 148.887978][ T24] usb 4-1: USB disconnect, device number 27 [ 148.898770][ T5915] usb 1-1: USB disconnect, device number 41 [ 148.903700][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 148.916188][ T9] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 148.928410][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.949165][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 148.964567][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.974841][ T9] usb 3-1: Product: Е [ 148.978992][ T9] usb 3-1: Manufacturer: ἗줆酛倏憎솱኉鯯ρ仔獇슁坻垮櫐יִ삅衝뭹箈嵜렼벭╷焋幬闓ﵚ◟쾸ꃴ끨❷洇ṻඋ쀅Ⰸ쥵칺䴋 [ 148.995536][ T9] usb 3-1: SerialNumber: 웩淺Ꝝ೓毚綳艰蠼ኗ篜闊歹ﭝـྀዠ췗翡ഥ䏄ײ뢉橕ꙕ㞃㪜撅྆抈䢀禱࣋빵댬㋯ںꈢے뼞鵅昕櫨䔜鋞ᨂⒶ㠇߸᫜쒢倸፳ꁅ宴襲犬뇥䝻ЬḔ씓Ᏼ訷슢륏季⋅댠繂ᙠ뎙⎼̼窞鸕콥輤疋孡༰㱀俪㘾垓꺇鏂眎쥲鎧ࡏ溢黷䟒㧱ྫ궦⺴굩⍚퀱⏎໡媬 [ 149.036676][ T6470] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.254461][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 149.265817][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 127 proto 2 vid 0x03F0 pid 0x0004 [ 149.281800][ T9] usb 3-1: USB disconnect, device number 35 [ 149.294492][ T9] usblp0: removed [ 149.503353][ T6478] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 149.723303][ T5915] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 149.822994][ T6484] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 149.863255][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 149.873396][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 149.889882][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.904122][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.915378][ T5915] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 149.928915][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.937619][ T5915] usb 4-1: Product: syz [ 149.941931][ T5915] usb 4-1: Manufacturer: syz [ 149.947010][ T5915] usb 4-1: SerialNumber: syz [ 149.964357][ T5915] usb 4-1: config 0 descriptor?? [ 150.035672][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.047616][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 150.056879][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.069301][ T9] usb 1-1: config 0 descriptor?? [ 150.183193][ T5915] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 150.463308][ T5915] rc_core: IR keymap rc-imon-pad not found [ 150.469262][ T5915] Registered IR keymap rc-empty [ 150.475826][ T5915] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 150.487305][ T5915] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 150.606400][ T5915] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 150.616780][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 150.627592][ T5915] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 150.643429][ T5915] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:28> initialized [ 150.779800][ C1] imon 4-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 0, intf0) [ 150.790354][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 150.797164][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.808372][ T24] usb 3-1: config 0 has no interfaces? [ 150.817710][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 150.826857][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.836000][ T24] usb 3-1: Product: syz [ 150.841458][ T24] usb 3-1: Manufacturer: syz [ 150.846145][ T24] usb 3-1: SerialNumber: syz [ 150.854476][ T24] usb 3-1: config 0 descriptor?? [ 150.980831][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.989814][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.998557][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 151.000163][ T9] usb 4-1: USB disconnect, device number 28 [ 151.783299][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 151.943290][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 151.950718][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 151.959246][ T9] usb 4-1: config 0 has no interface number 0 [ 151.967416][ T9] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 151.979690][ T9] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 151.993520][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 152.002761][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 152.012237][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.020408][ T9] usb 4-1: Product: syz [ 152.024646][ T9] usb 4-1: Manufacturer: syz [ 152.029506][ T9] usb 4-1: SerialNumber: syz [ 152.037225][ T9] usb 4-1: config 0 descriptor?? [ 152.251728][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 152.456228][ T6503] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 153.063434][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.072362][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.395532][ T24] usb 3-1: USB disconnect, device number 36 [ 153.532728][ T43] usb 1-1: USB disconnect, device number 42 [ 153.743256][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 153.883354][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 153.894797][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.903320][ T24] usb 3-1: config 0 has no interface number 0 [ 153.914657][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 153.923974][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.932215][ T24] usb 3-1: Product: syz [ 153.936571][ T24] usb 3-1: Manufacturer: syz [ 153.941270][ T24] usb 3-1: SerialNumber: syz [ 153.949071][ T24] usb 3-1: config 0 descriptor?? [ 154.035786][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.044923][ T43] usb 1-1: config 0 has no interface number 0 [ 154.054794][ T43] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.064035][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.072124][ T43] usb 1-1: Product: syz [ 154.076409][ T43] usb 1-1: Manufacturer: syz [ 154.081062][ T43] usb 1-1: SerialNumber: syz [ 154.089649][ T43] usb 1-1: config 0 descriptor?? [ 154.159530][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 154.183604][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.199856][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 154.210072][ T24] usb 3-1: media controller created [ 154.248646][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.333984][ T9] gspca_stk1135: reg_w 0x203 err -71 [ 154.350810][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.352034][ T43] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 154.364484][ T9] gspca_stk1135: Sensor write failed [ 154.370601][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.382169][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.382779][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 154.398370][ T43] usb 1-1: media controller created [ 154.403605][ T9] gspca_stk1135: Sensor write failed [ 154.408996][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.422320][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.434591][ T9] gspca_stk1135: Sensor read failed [ 154.447972][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.461107][ T9] gspca_stk1135: Sensor read failed [ 154.475044][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 154.485002][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.491423][ T9] gspca_stk1135: Sensor read failed [ 154.496939][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.504369][ T9] gspca_stk1135: Sensor read failed [ 154.509709][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.516346][ T9] gspca_stk1135: Sensor write failed [ 154.521713][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 154.529896][ T9] gspca_stk1135: Sensor write failed [ 154.535571][ T9] stk1135 4-1:0.255: probe with driver stk1135 failed with error -71 [ 154.549864][ T9] usb 4-1: USB disconnect, device number 29 [ 155.213305][ T5876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 155.363213][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 155.363674][ T24] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 155.369602][ T6510] FAULT_INJECTION: forcing a failure. [ 155.369602][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.394756][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 155.394783][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.394796][ T6510] Call Trace: [ 155.394805][ T6510] [ 155.394812][ T6510] dump_stack_lvl+0x189/0x250 [ 155.394840][ T6510] ? __pfx____ratelimit+0x10/0x10 [ 155.394874][ T6510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.394895][ T6510] ? __pfx__printk+0x10/0x10 [ 155.394925][ T6510] should_fail_ex+0x414/0x560 [ 155.394949][ T6510] _copy_to_user+0x31/0xb0 [ 155.394977][ T6510] simple_read_from_buffer+0xe1/0x170 [ 155.395008][ T6510] proc_fail_nth_read+0x1b3/0x220 [ 155.395030][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.395049][ T6510] ? rw_verify_area+0x2a6/0x4d0 [ 155.395064][ T6510] ? __lock_acquire+0xab9/0xd20 [ 155.395080][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.395097][ T6510] vfs_read+0x200/0xa30 [ 155.395114][ T6510] ? fdget_pos+0x247/0x320 [ 155.395141][ T6510] ? __pfx___mutex_lock+0x10/0x10 [ 155.395168][ T6510] ? __pfx_vfs_read+0x10/0x10 [ 155.395186][ T6510] ? __fget_files+0x2a/0x420 [ 155.395210][ T6510] ? __fget_files+0x3a0/0x420 [ 155.395229][ T6510] ? __fget_files+0x2a/0x420 [ 155.395257][ T6510] ksys_read+0x145/0x250 [ 155.395278][ T6510] ? __pfx_ksys_read+0x10/0x10 [ 155.395301][ T6510] ? do_syscall_64+0xbe/0xfa0 [ 155.395332][ T6510] do_syscall_64+0xfa/0xfa0 [ 155.395355][ T6510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.395372][ T6510] ? clear_bhb_loop+0x60/0xb0 [ 155.395391][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.395407][ T6510] RIP: 0033:0x7f2d9098e0dc [ 155.395424][ T6510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.395440][ T6510] RSP: 002b:00007f2d8ebee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.395458][ T6510] RAX: ffffffffffffffda RBX: 00007f2d90be5fa0 RCX: 00007f2d9098e0dc [ 155.395471][ T6510] RDX: 000000000000000f RSI: 00007f2d8ebee0a0 RDI: 0000000000000005 [ 155.395481][ T6510] RBP: 00007f2d8ebee090 R08: 0000000000000000 R09: 0000000000000000 [ 155.395492][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.395501][ T6510] R13: 00007f2d90be6038 R14: 00007f2d90be5fa0 R15: 00007ffee63c8b88 [ 155.395528][ T6510] [ 155.396591][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.540808][ T43] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 155.566460][ T5876] usb 4-1: config 0 has no interfaces? [ 155.592913][ T24] usb 3-1: USB disconnect, device number 37 [ 155.655529][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 155.707270][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.728566][ T5876] usb 4-1: Product: syz [ 155.732818][ T5876] usb 4-1: Manufacturer: syz [ 155.748041][ T5876] usb 4-1: SerialNumber: syz [ 155.757232][ T43] usb 1-1: USB disconnect, device number 43 [ 155.795491][ T5876] usb 4-1: config 0 descriptor?? [ 156.193242][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 156.343259][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 156.350274][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.360588][ T24] usb 3-1: config 0 has no interfaces? [ 156.370788][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 156.380728][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.389895][ T24] usb 3-1: Product: syz [ 156.394401][ T24] usb 3-1: Manufacturer: syz [ 156.399023][ T24] usb 3-1: SerialNumber: syz [ 156.407164][ T24] usb 3-1: config 0 descriptor?? [ 156.473374][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 156.623301][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 156.629942][ T980] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 156.638455][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.648519][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.658545][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.668671][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.682947][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.692128][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.905825][ T980] usb 1-1: usb_control_msg returned -32 [ 156.911467][ T980] usbtmc 1-1:16.0: can't read capabilities [ 157.519131][ T6544] netlink: 'syz.1.195': attribute type 4 has an invalid length. [ 157.664332][ T6548] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 157.814063][ T24] usb 1-1: USB disconnect, device number 44 [ 157.989369][ T5876] usb 4-1: USB disconnect, device number 30 [ 158.257801][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.268778][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.377784][ T6563] loop4: detected capacity change from 0 to 2560 [ 158.396189][ T5933] buffer_io_error: 11 callbacks suppressed [ 158.396208][ T5933] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.412596][ T5933] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.426614][ T5933] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.446069][ T5933] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.464017][ T5933] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.505291][ T5876] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 158.665430][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.674325][ T5876] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.685401][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0 [ 158.693278][ T980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 158.702904][ T5876] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 158.712487][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.720575][ T5876] usb 4-1: Product: syz [ 158.726151][ T5876] usb 4-1: Manufacturer: syz [ 158.730809][ T5876] usb 4-1: SerialNumber: syz [ 158.845077][ T980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.853281][ T980] usb 1-1: config 0 has no interface number 0 [ 158.862283][ T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 158.871563][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.879768][ T980] usb 1-1: Product: syz [ 158.884027][ T980] usb 1-1: Manufacturer: syz [ 158.888672][ T980] usb 1-1: SerialNumber: syz [ 158.896801][ T980] usb 1-1: config 0 descriptor?? [ 158.938236][ T9] usb 3-1: USB disconnect, device number 38 [ 158.970210][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 159.021405][ T5180] bcm5974 4-1:1.0: could not read from device [ 159.037169][ T5180] bcm5974 4-1:1.0: could not read from device [ 159.055003][ T5876] usb 4-1: USB disconnect, device number 31 [ 159.069539][ T5180] bcm5974 4-1:1.0: could not read from device [ 159.227616][ T980] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 159.244838][ T980] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.259023][ T980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 159.267501][ T980] usb 1-1: media controller created [ 159.293906][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.805220][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 159.973287][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 159.982460][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.995530][ T9] usb 4-1: config 0 has no interfaces? [ 160.005739][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 160.015274][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.025900][ T9] usb 4-1: Product: syz [ 160.030256][ T9] usb 4-1: Manufacturer: syz [ 160.035047][ T9] usb 4-1: SerialNumber: syz [ 160.046250][ T9] usb 4-1: config 0 descriptor?? [ 160.403466][ T980] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 160.673300][ T980] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 160.823276][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 160.831866][ T980] usb 3-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 160.843212][ T980] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 160.856522][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 160.863257][ T980] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 160.872318][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.884295][ T980] usb 3-1: config 0 descriptor?? [ 161.302396][ T980] vrc2 0003:07C0:1125.0005: fixing up VRC-2 report descriptor [ 161.314527][ T980] input: HID 07c0:1125 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:07C0:1125.0005/input/input11 [ 161.392505][ T980] vrc2 0003:07C0:1125.0005: input,hidraw0: USB HID v0.04 Joystick [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 161.516907][ T24] usb 3-1: USB disconnect, device number 39 [ 161.656429][ T980] usb 1-1: USB disconnect, device number 45 [ 161.778606][ T6600] overlayfs: missing 'lowerdir' [ 161.779472][ T6601] overlayfs: missing 'lowerdir' [ 162.143259][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 162.293283][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 162.300466][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.312962][ T24] usb 1-1: config 0 has no interfaces? [ 162.320460][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 162.329779][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.338342][ T24] usb 1-1: Product: syz [ 162.342552][ T24] usb 1-1: Manufacturer: syz [ 162.349058][ T24] usb 1-1: SerialNumber: syz [ 162.358311][ T24] usb 1-1: config 0 descriptor?? [ 162.575298][ T24] usb 4-1: USB disconnect, device number 32 [ 162.584327][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 162.753506][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 162.760624][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.770066][ T9] usb 3-1: config 8 has an invalid interface number: 103 but max is 1 [ 162.778452][ T9] usb 3-1: config 8 has an invalid interface number: 179 but max is 1 [ 162.786961][ T9] usb 3-1: config 8 has no interface number 0 [ 162.793070][ T9] usb 3-1: config 8 has no interface number 1 [ 162.800491][ T9] usb 3-1: config 8 interface 103 has no altsetting 0 [ 162.808019][ T9] usb 3-1: config 8 interface 179 has no altsetting 0 [ 162.818091][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12 [ 162.828362][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.836523][ T9] usb 3-1: Product: syz [ 162.840725][ T9] usb 3-1: Manufacturer: syz [ 162.845409][ T9] usb 3-1: SerialNumber: syz [ 162.964541][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 163.106302][ T9] msi2500 3-1:8.103: Registered as swradio24 [ 163.112466][ T9] msi2500 3-1:8.103: SDR API is still slightly experimental and functionality changes may follow [ 163.137226][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 163.144671][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.157211][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.167586][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.177180][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.189415][ T24] usb 4-1: config 0 descriptor?? [ 163.189925][ T9] videodev: could not get a free minor [ 163.198053][ T24] hub 4-1:0.0: USB hub found [ 163.201941][ T9] msi2500 3-1:8.179: Failed to register as video device (-23) [ 163.219405][ T9] msi2500 3-1:8.179: probe with driver msi2500 failed with error -23 [ 163.235686][ T9] usb 3-1: USB disconnect, device number 40 [ 163.397660][ T24] hub 4-1:0.0: 1 port detected [ 163.853085][ T6634] befs: (nullb0): invalid magic header [ 163.865476][ T6634] capability: warning: `syz.2.218' uses 32-bit capabilities (legacy support in use) [ 164.006740][ T24] hub 4-1:0.0: activate --> -90 [ 164.133292][ T5897] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 164.305209][ T5897] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.313492][ T5897] usb 3-1: config 0 has no interface number 0 [ 164.322004][ T5897] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.331318][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.339420][ T5897] usb 3-1: Product: syz [ 164.343666][ T5897] usb 3-1: Manufacturer: syz [ 164.348420][ T5897] usb 3-1: SerialNumber: syz [ 164.357672][ T5897] usb 3-1: config 0 descriptor?? [ 164.415297][ T980] usb 4-1: USB disconnect, device number 33 [ 164.569324][ T5897] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 164.580777][ T5897] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.591503][ T5897] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 164.599677][ T5897] usb 3-1: media controller created [ 164.614953][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.770552][ T5897] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 164.806654][ T5897] usb 3-1: USB disconnect, device number 41 [ 164.937766][ T43] usb 1-1: USB disconnect, device number 46 [ 165.037242][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.047708][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.293586][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 165.453248][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 165.460950][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.472921][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.486287][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 165.497786][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.507171][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.518495][ T9] usb 4-1: config 0 descriptor?? [ 165.525237][ T6643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.583473][ T980] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 165.739309][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.750275][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 165.759154][ T9] usb 4-1: USB disconnect, device number 34 [ 165.767565][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.778881][ T980] usb 3-1: config 0 has no interfaces? [ 165.796679][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 165.814428][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.822605][ T980] usb 3-1: Product: syz [ 165.827479][ T980] usb 3-1: Manufacturer: syz [ 165.832140][ T980] usb 3-1: SerialNumber: syz [ 165.841115][ T980] usb 3-1: config 0 descriptor?? [ 166.133232][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 166.283278][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 166.291448][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 166.308179][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.319693][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.332005][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.342371][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.365834][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.384243][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.599997][ T9] usb 1-1: usb_control_msg returned -32 [ 166.607387][ T9] usbtmc 1-1:16.0: can't read capabilities [ 166.659680][ T6662] mmap: syz.3.227 (6662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.033309][ T980] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 167.183284][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 167.190195][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.200965][ T980] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 167.214022][ T980] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 167.224421][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.232457][ T980] usb 4-1: Product: syz [ 167.237032][ T980] usb 4-1: Manufacturer: syz [ 167.241659][ T980] usb 4-1: SerialNumber: syz [ 167.248720][ T980] usb 4-1: config 0 descriptor?? [ 167.364586][ T6673] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 167.513608][ T980] usb 1-1: USB disconnect, device number 47 [ 168.353222][ T980] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 168.374704][ T43] usb 3-1: USB disconnect, device number 42 [ 168.474352][ T6685] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 168.490360][ T6685] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 168.504978][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 168.516150][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.528078][ T980] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 168.538819][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.547034][ T980] usb 1-1: Product: syz [ 168.551437][ T980] usb 1-1: Manufacturer: syz [ 168.558760][ T980] usb 1-1: SerialNumber: syz [ 168.569931][ T980] usb 1-1: config 0 descriptor?? [ 168.579333][ T980] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 169.250749][ T6684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.257317][ T6684] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.267575][ T6684] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.277859][ T6684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.284618][ T6684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.295522][ T6684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.306757][ T6684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.313757][ T6684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.320859][ T6684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.330194][ T6684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.336776][ T6684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.345307][ T6684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.354863][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.369109][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.394645][ T43] usb 1-1: USB disconnect, device number 48 [ 169.486973][ T6690] netlink: 56 bytes leftover after parsing attributes in process `syz.2.233'. [ 169.821117][ T9] usb 4-1: USB disconnect, device number 35 [ 169.877158][ T6694] syzkaller1: entered promiscuous mode [ 169.882846][ T6694] syzkaller1: entered allmulticast mode [ 170.082214][ T6700] evm: overlay not supported [ 170.213319][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 170.284470][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 170.364914][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.373267][ T9] usb 4-1: config 0 has no interface number 0 [ 170.373750][ T5897] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 170.383040][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 170.399376][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.409387][ T9] usb 4-1: Product: syz [ 170.413955][ T9] usb 4-1: Manufacturer: syz [ 170.418630][ T9] usb 4-1: SerialNumber: syz [ 170.426902][ T9] usb 4-1: config 0 descriptor?? [ 170.463454][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 170.472213][ T24] usb 1-1: config index 0 descriptor too short (expected 241, got 203) [ 170.481752][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.492190][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.492212][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 170.513827][ T24] usb 1-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 170.523482][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.535754][ T24] usb 1-1: config 0 descriptor?? [ 170.543229][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 170.557845][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 170.568042][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.578008][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.587991][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.598086][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.612902][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.622212][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.638163][ T9] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 170.678163][ T9] usb 4-1: USB disconnect, device number 36 [ 170.748120][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.758464][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.777938][ T6698] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 170.798535][ T980] usb 1-1: USB disconnect, device number 49 [ 170.837198][ T5897] usb 3-1: usb_control_msg returned -32 [ 170.843517][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 171.283579][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.363364][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.363372][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.427574][ T6712] vivid-000: disconnect [ 171.604074][ T6713] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 171.613507][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 171.673342][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 171.747494][ T5897] usb 3-1: USB disconnect, device number 43 [ 171.763246][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 171.771589][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.782184][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 171.796797][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 171.806111][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.814284][ T24] usb 4-1: Product: syz [ 171.818494][ T24] usb 4-1: Manufacturer: syz [ 171.823178][ T24] usb 4-1: SerialNumber: syz [ 171.825827][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.834761][ T24] usb 4-1: config 0 descriptor?? [ 171.848607][ T9] usb 1-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 171.859297][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.868431][ T9] usb 1-1: config 1 has no interface number 0 [ 171.876513][ T9] usb 1-1: too many endpoints for config 1 interface 2 altsetting 83: 91, using maximum allowed: 30 [ 171.887720][ T9] usb 1-1: config 1 interface 2 altsetting 83 endpoint 0x81 has invalid maxpacket 4658, setting to 1024 [ 171.899065][ T9] usb 1-1: config 1 interface 2 altsetting 83 bulk endpoint 0x81 has invalid maxpacket 1024 [ 171.909286][ T9] usb 1-1: config 1 interface 2 altsetting 83 has 1 endpoint descriptor, different from the interface descriptor's value: 91 [ 171.922391][ T9] usb 1-1: config 1 interface 2 has no altsetting 0 [ 171.931955][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.942456][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.950606][ T9] usb 1-1: Product: syz [ 171.954938][ T9] usb 1-1: Manufacturer: syz [ 171.965466][ T6712] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.533338][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 172.563500][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.683247][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 172.690457][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.700962][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 172.712474][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 172.721725][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.729895][ T9] usb 3-1: Product: syz [ 172.731499][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.744065][ T9] usb 3-1: Manufacturer: syz [ 172.748335][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.750007][ T9] usb 3-1: SerialNumber: syz [ 172.766799][ T9] usb 3-1: config 0 descriptor?? [ 173.373378][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.444845][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.446308][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.489450][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 173.499514][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 173.659184][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 174.398366][ T9] usb 4-1: USB disconnect, device number 37 [ 174.460537][ T5897] usb 1-1: USB disconnect, device number 50 [ 174.467713][ T6711] vivid-000: reconnect [ 174.556827][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 174.643555][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.763332][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 174.863366][ T5897] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 174.925085][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.933511][ T9] usb 4-1: config 0 has no interface number 0 [ 174.941948][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 174.951236][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.959348][ T9] usb 4-1: Product: syz [ 174.963817][ T9] usb 4-1: Manufacturer: syz [ 174.968484][ T9] usb 4-1: SerialNumber: syz [ 174.976608][ T9] usb 4-1: config 0 descriptor?? [ 175.013723][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 175.021129][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 36096, setting to 64 [ 175.032251][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.046466][ T5897] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 175.055635][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.064098][ T5897] usb 1-1: Product: syz [ 175.068293][ T5897] usb 1-1: Manufacturer: syz [ 175.072925][ T5897] usb 1-1: SerialNumber: syz [ 175.081557][ T5897] usb 1-1: config 0 descriptor?? [ 175.092125][ T5897] usb 1-1: no audio or video endpoints found [ 175.187916][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 175.293315][ T5897] usb 1-1: USB disconnect, device number 51 [ 175.337379][ T24] usb 3-1: USB disconnect, device number 44 [ 175.391057][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.401146][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.443425][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.524756][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.524769][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.693308][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 175.853248][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 175.861152][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 175.875957][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.887248][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.901087][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.911409][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.924858][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.935289][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.133861][ T5897] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 176.151603][ T24] usb 3-1: usb_control_msg returned -32 [ 176.163339][ T24] usbtmc 3-1:16.0: can't read capabilities [ 176.263211][ T5897] usb 1-1: device descriptor read/64, error -71 [ 176.503296][ T5897] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 176.634004][ T5897] usb 1-1: device descriptor read/64, error -71 [ 176.743595][ T5897] usb usb1-port1: attempt power cycle [ 176.934140][ T6770] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 177.073836][ T24] usb 3-1: USB disconnect, device number 45 [ 177.083216][ T5897] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 177.114018][ T5897] usb 1-1: device descriptor read/8, error -71 [ 177.363357][ T5897] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 177.383954][ T5897] usb 1-1: device descriptor read/8, error -71 [ 177.504398][ T5897] usb usb1-port1: unable to enumerate USB device [ 177.603259][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.640081][ T6776] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.883371][ T5897] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 178.013223][ T5897] usb 3-1: device descriptor read/64, error -71 [ 178.263460][ T5897] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 178.393278][ T5897] usb 3-1: device descriptor read/64, error -71 [ 178.503515][ T5897] usb usb3-port1: attempt power cycle [ 178.843303][ T5897] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 178.863842][ T5897] usb 3-1: device descriptor read/8, error -71 [ 179.113396][ T5897] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 179.134091][ T5897] usb 3-1: device descriptor read/8, error -71 [ 179.253653][ T5897] usb usb3-port1: unable to enumerate USB device [ 179.264163][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 179.423252][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 179.430104][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.440300][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 179.452271][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 179.461599][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.469703][ T24] usb 1-1: Product: syz [ 179.473956][ T24] usb 1-1: Manufacturer: syz [ 179.478616][ T24] usb 1-1: SerialNumber: syz [ 179.485854][ T24] usb 1-1: config 0 descriptor?? [ 179.702571][ T6780] input: syz1 as /devices/virtual/input/input12 [ 180.611486][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 180.659286][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.746092][ T6791] binder_alloc: 6790: pid 6790 spamming oneway? 1 buffers allocated for a total size of 4096 [ 181.224521][ T6802] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 181.234404][ T6802] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 181.253207][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 181.413247][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 181.420355][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 181.428706][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.438633][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.448537][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.460008][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.473123][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.482179][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.699413][ T24] usb 3-1: usb_control_msg returned -32 [ 181.705101][ T24] usbtmc 3-1:16.0: can't read capabilities [ 181.979749][ T5876] usb 1-1: USB disconnect, device number 56 [ 182.333326][ T5876] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 182.464288][ T6810] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 182.483268][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 182.489802][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.500123][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.511323][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.521790][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.531909][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.542222][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.552365][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.562661][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.575140][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.586515][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.596720][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.606962][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.608770][ T24] usb 3-1: USB disconnect, device number 50 [ 182.621410][ T5876] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 182.635121][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.654719][ T5876] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 182.664384][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.672385][ T5876] usb 1-1: Product: syz [ 182.677943][ T5876] usb 1-1: Manufacturer: syz [ 182.682791][ T5876] usb 1-1: SerialNumber: syz [ 182.691914][ T5876] usb 1-1: config 0 descriptor?? [ 182.899890][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.908714][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.908946][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.922915][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.298155][ T6821] netlink: 'syz.2.274': attribute type 11 has an invalid length. [ 183.307701][ T6821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.274'. [ 184.074604][ T6820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.081716][ T6820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.088196][ T6820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.094417][ T6820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.393412][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 184.553174][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 184.560414][ T24] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.576011][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.587573][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 184.597159][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.605701][ T24] usb 3-1: Product: syz [ 184.610204][ T24] usb 3-1: Manufacturer: syz [ 184.615295][ T24] usb 3-1: SerialNumber: syz [ 184.790733][ T6835] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 184.843270][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 184.875640][ T5180] bcm5974 3-1:1.0: could not read from device [ 184.898651][ T5180] bcm5974 3-1:1.0: could not read from device [ 184.912048][ T24] usb 3-1: USB disconnect, device number 51 [ 184.923659][ T5180] bcm5974 3-1:1.0: could not read from device [ 185.038912][ T5897] usb 1-1: USB disconnect, device number 57 [ 185.363227][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.394352][ T5897] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 185.402947][ T6843] overlayfs: failed to resolve './file0': -2 [ 185.543302][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 185.550024][ T5897] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 185.560093][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.569916][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.579757][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.589796][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.602935][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.612258][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.673626][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 185.826224][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.834583][ T10] usb 3-1: config 0 has no interface number 0 [ 185.834883][ T5897] usb 1-1: usb_control_msg returned -32 [ 185.845589][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 185.855436][ T5897] usbtmc 1-1:16.0: can't read capabilities [ 185.863731][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.872047][ T10] usb 3-1: Product: syz [ 185.876745][ T10] usb 3-1: Manufacturer: syz [ 185.881393][ T10] usb 3-1: SerialNumber: syz [ 185.890788][ T10] usb 3-1: config 0 descriptor?? [ 186.084020][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.137209][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 186.164876][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.172194][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.183227][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.203557][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 186.212890][ T10] usb 3-1: media controller created [ 186.231915][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.617995][ T6856] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 186.821333][ T5876] usb 1-1: USB disconnect, device number 58 [ 187.364194][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 187.437864][ T10] usb 3-1: USB disconnect, device number 52 [ 187.657055][ T6867] vivid-001: disconnect [ 188.038668][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 188.369690][ T6863] vivid-001: reconnect [ 188.683217][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 188.843250][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 188.850341][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 188.858822][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.868694][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.878498][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.888703][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.903221][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.912318][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.125760][ T10] usb 1-1: usb_control_msg returned -32 [ 189.131498][ T10] usbtmc 1-1:16.0: can't read capabilities [ 189.711310][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060d56400: rx timeout, send abort [ 189.722116][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060d56400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.895934][ T6892] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 190.097578][ T980] usb 1-1: USB disconnect, device number 59 [ 190.523291][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 190.674006][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 190.681037][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 190.692143][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 190.701401][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.710182][ T10] usb 3-1: Product: syz [ 190.714634][ T10] usb 3-1: Manufacturer: syz [ 190.719342][ T10] usb 3-1: SerialNumber: syz [ 190.726678][ T10] usb 3-1: config 0 descriptor?? [ 190.893254][ T5897] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 191.054680][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 191.061906][ T5897] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 191.070458][ T5897] usb 1-1: config 0 has no interface number 0 [ 191.078977][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 191.089422][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.097534][ T5897] usb 1-1: Product: syz [ 191.101728][ T5897] usb 1-1: Manufacturer: syz [ 191.106405][ T5897] usb 1-1: SerialNumber: syz [ 191.113579][ T5897] usb 1-1: config 0 descriptor?? [ 191.122981][ T5897] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 191.348082][ T6903] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 191.359135][ T6903] nbd: error processing sock list [ 191.379546][ T6903] Invalid option length (1048467) for dns_resolver key [ 191.392018][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 191.732865][ T6900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 191.740426][ T6900] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 191.747647][ T6900] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 191.974897][ T5897] usb 1-1: USB disconnect, device number 60 [ 192.903256][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 193.053259][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 193.060565][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 193.072859][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 193.082347][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.090700][ T10] usb 1-1: Product: syz [ 193.112359][ T10] usb 1-1: Manufacturer: syz [ 193.117226][ T10] usb 1-1: SerialNumber: syz [ 193.133494][ T10] usb 1-1: config 0 descriptor?? [ 193.313879][ T10] usb 3-1: USB disconnect, device number 53 [ 193.506859][ T6925] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 193.803256][ T5897] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 193.963292][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 193.970843][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 193.979192][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.989205][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.999291][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.009368][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.022693][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.031914][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.246894][ T5897] usb 3-1: usb_control_msg returned -32 [ 194.252540][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 195.015944][ T6933] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 195.217525][ T980] usb 3-1: USB disconnect, device number 54 [ 195.291425][ T6947] netlink: 'syz.3.311': attribute type 21 has an invalid length. [ 195.299277][ T6947] netlink: 128 bytes leftover after parsing attributes in process `syz.3.311'. [ 195.711454][ T980] usb 1-1: USB disconnect, device number 61 [ 195.835900][ T6950] capability: warning: `syz.0.312' uses deprecated v2 capabilities in a way that may be insecure [ 196.177498][ T980] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 196.329708][ T5897] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 196.343197][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 196.356569][ T980] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 196.369762][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 196.379376][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.387943][ T980] usb 3-1: Product: syz [ 196.394446][ T980] usb 3-1: Manufacturer: syz [ 196.402108][ T980] usb 3-1: SerialNumber: syz [ 196.417401][ T980] usb 3-1: config 0 descriptor?? [ 196.480170][ T6962] 9p: Bad value for 'rfdno' [ 196.491666][ T5897] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.502088][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.512886][ T5897] usb 1-1: Product: syz [ 196.517502][ T5897] usb 1-1: Manufacturer: syz [ 196.522241][ T5897] usb 1-1: SerialNumber: syz [ 196.947506][ T5897] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 196.960424][ T5897] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 197.797232][ T6956] syzkaller1: entered promiscuous mode [ 197.802989][ T6956] syzkaller1: entered allmulticast mode [ 198.620788][ T6956] netlink: 348 bytes leftover after parsing attributes in process `syz.0.315'. [ 198.832385][ T5897] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 198.845948][ T5897] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 198.857031][ T5897] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 198.871770][ T5897] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 198.938896][ T5897] usb 3-1: USB disconnect, device number 55 [ 199.393365][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 199.555766][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 199.563553][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 199.573330][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.585949][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.596384][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.614097][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.614219][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.628780][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.642547][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.652117][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.877631][ T10] usb 3-1: usb_control_msg returned -32 [ 199.892448][ T10] usbtmc 3-1:16.0: can't read capabilities [ 200.011061][ T5897] usb 1-1: USB disconnect, device number 62 [ 200.195472][ T6946] kexec: Could not allocate control_code_buffer [ 200.413269][ T5897] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 200.573392][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 200.580820][ T5897] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 200.589146][ T5897] usb 1-1: config 0 has no interface number 0 [ 200.597964][ T5897] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.608415][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.616503][ T5897] usb 1-1: Product: syz [ 200.620690][ T5897] usb 1-1: Manufacturer: syz [ 200.625359][ T5897] usb 1-1: SerialNumber: syz [ 200.632111][ T5897] usb 1-1: config 0 descriptor?? [ 200.640597][ T5897] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.654190][ T6993] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 200.769306][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 200.778470][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'. [ 200.848947][ T5897] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.860904][ T43] usb 3-1: USB disconnect, device number 56 [ 200.879877][ T5897] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 201.249446][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.258490][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.267353][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 201.276488][ T43] usb 1-1: USB disconnect, device number 63 [ 201.286537][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 201.303514][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 201.316332][ T43] quatech2 1-1:0.51: device disconnected [ 201.763304][ T5897] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 201.933257][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 201.944202][ T5897] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 201.953443][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.961639][ T5897] usb 3-1: Product: syz [ 201.965914][ T5897] usb 3-1: Manufacturer: syz [ 201.970584][ T5897] usb 3-1: SerialNumber: syz [ 201.978064][ T5897] usb 3-1: config 0 descriptor?? [ 201.986171][ T5897] gspca_main: sq905-2.14.0 probing 2770:9120 [ 202.063347][ T43] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 202.225207][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.236272][ T43] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 202.246855][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.257607][ T43] usb 1-1: config 0 descriptor?? [ 202.263584][ T7013] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 202.687761][ T43] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input14 [ 202.781350][ T43] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input15 [ 202.810133][ T43] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input16 [ 202.877928][ T43] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input17 [ 202.980555][ T43] hid-udraw 0003:20D6:CB17.0006: hidraw0: USB HID vff.f8 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 202.999254][ T5897] gspca_sq905: bulk read fail (-22) len 0/4 [ 203.018612][ T5897] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 203.169515][ T5897] usb 1-1: USB disconnect, device number 64 [ 203.200004][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.211234][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.247208][ T10] usb 3-1: USB disconnect, device number 57 [ 203.653233][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 203.803707][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 203.820635][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 203.832755][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 203.842366][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.850680][ T10] usb 3-1: Product: syz [ 203.855138][ T10] usb 3-1: Manufacturer: syz [ 203.859887][ T10] usb 3-1: SerialNumber: syz [ 203.867198][ T10] usb 3-1: config 0 descriptor?? [ 203.875471][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 204.006289][ T7037] loop5: detected capacity change from 0 to 7 [ 204.017401][ T7037] Dev loop5: unable to read RDB block 7 [ 204.024219][ T7037] loop5: unable to read partition table [ 204.030100][ T7037] loop5: partition table beyond EOD, truncated [ 204.037065][ T7037] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 204.493210][ T43] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 204.683265][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 204.690347][ T43] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 204.698910][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.710627][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.718113][ T5876] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 204.730972][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.733016][ T5884] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 204.742600][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.757368][ T9] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 204.790556][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.791396][ T5884] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 204.811762][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.813710][ T5876] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.829786][ T9] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 204.844536][ T9] usb 4-1: USB disconnect, device number 38 [ 204.863667][ T5884] usb 2-1: USB disconnect, device number 29 [ 205.063773][ T43] usb 1-1: usb_control_msg returned -32 [ 205.070064][ T43] usbtmc 1-1:16.0: can't read capabilities [ 205.243301][ T5884] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 205.393228][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 205.401111][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.410766][ T5884] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 205.425255][ T5884] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 205.434420][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.442460][ T5884] usb 2-1: Product: syz [ 205.446818][ T5884] usb 2-1: Manufacturer: syz [ 205.451478][ T5884] usb 2-1: SerialNumber: syz [ 205.759412][ T5884] usb 2-1: Limiting number of CPorts to U8_MAX [ 205.767903][ T5884] usb 2-1: Not enough endpoints found in device, aborting! [ 205.834957][ T7064] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 205.900330][ T10] gspca_zc3xx: reg_r err -32 [ 205.943260][ T5884] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 205.962874][ T9] usb 2-1: USB disconnect, device number 30 [ 206.036749][ T5876] usb 1-1: USB disconnect, device number 65 [ 206.116950][ T5884] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.125099][ T5884] usb 4-1: config 0 has no interface number 0 [ 206.134484][ T5884] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 206.144594][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.152636][ T5884] usb 4-1: Product: syz [ 206.157227][ T5884] usb 4-1: Manufacturer: syz [ 206.161867][ T5884] usb 4-1: SerialNumber: syz [ 206.170916][ T5884] usb 4-1: config 0 descriptor?? [ 206.378558][ T5884] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 206.389706][ T5884] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.400309][ T5884] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 206.408477][ T5884] usb 4-1: media controller created [ 206.422227][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.493284][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 206.511632][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 206.664726][ T7072] trusted_key: syz.0.351 sent an empty control message without MSG_MORE. [ 206.813290][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 206.932238][ T5914] usb 3-1: USB disconnect, device number 58 [ 206.966851][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.983551][ T5876] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 206.992387][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 207.008564][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 207.026612][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.035929][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.051064][ T10] usb 2-1: Product: syz [ 207.055788][ T10] usb 2-1: Manufacturer: syz [ 207.061591][ T10] usb 2-1: SerialNumber: syz [ 207.163198][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 207.170043][ T5876] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 207.181775][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 207.190992][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.199173][ T5876] usb 1-1: Product: syz [ 207.203433][ T5876] usb 1-1: Manufacturer: syz [ 207.208099][ T5876] usb 1-1: SerialNumber: syz [ 207.216733][ T5876] usb 1-1: config 0 descriptor?? [ 207.226020][ T5876] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 207.277508][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.287229][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.343200][ T5914] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 207.362006][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 207.397324][ T10] usb 2-1: USB disconnect, device number 31 [ 207.426953][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.483185][ T5914] usb 3-1: device descriptor read/64, error -71 [ 207.523694][ T5884] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 207.562756][ T5884] usb 4-1: USB disconnect, device number 39 [ 207.723303][ T5914] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 207.853217][ T5914] usb 3-1: device descriptor read/64, error -71 [ 207.963604][ T5914] usb usb3-port1: attempt power cycle [ 208.118891][ T7088] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 208.217345][ T6606] Bluetooth: hci4: Frame reassembly failed (-84) [ 208.229696][ T7094] IPv6: syztnl0: Disabled Multicast RS [ 208.305663][ T5914] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 208.335245][ T5914] usb 3-1: device descriptor read/8, error -71 [ 208.453215][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 208.553256][ T43] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 208.573192][ T5914] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 208.596195][ T5914] usb 3-1: device descriptor read/8, error -71 [ 208.603233][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 208.611413][ T10] usb 2-1: config 9 has an invalid interface number: 232 but max is 3 [ 208.620044][ T10] usb 2-1: config 9 has an invalid interface number: 137 but max is 3 [ 208.628408][ T10] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 208.637324][ T10] usb 2-1: config 9 has an invalid interface number: 96 but max is 3 [ 208.645722][ T10] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 208.654697][ T10] usb 2-1: config 9 has an invalid interface number: 179 but max is 3 [ 208.662911][ T10] usb 2-1: config 9 has an invalid interface number: 147 but max is 3 [ 208.671214][ T10] usb 2-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 208.680266][ T10] usb 2-1: config 9 has no interface number 0 [ 208.686461][ T10] usb 2-1: config 9 has no interface number 1 [ 208.692610][ T10] usb 2-1: config 9 has no interface number 2 [ 208.700064][ T10] usb 2-1: config 9 has no interface number 3 [ 208.706570][ T10] usb 2-1: config 9 has no interface number 4 [ 208.712790][ T10] usb 2-1: config 9 interface 232 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 208.714113][ T5914] usb usb3-port1: unable to enumerate USB device [ 208.724848][ T10] usb 2-1: config 9 interface 232 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 208.742200][ T10] usb 2-1: config 9 interface 232 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 208.744091][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 208.757206][ T10] usb 2-1: config 9 interface 232 altsetting 5 endpoint 0xE has invalid maxpacket 967, setting to 64 [ 208.772614][ T10] usb 2-1: config 9 interface 232 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 208.784999][ T10] usb 2-1: config 9 interface 232 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 208.785038][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 208.802237][ T10] usb 2-1: too many endpoints for config 9 interface 137 altsetting 49: 217, using maximum allowed: 30 [ 208.821004][ T43] usb 4-1: config 1 has no interface number 1 [ 208.821557][ T10] usb 2-1: config 9 interface 137 altsetting 49 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 208.827407][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.840397][ T10] usb 2-1: config 9 interface 137 altsetting 49 has a duplicate endpoint with address 0xE, skipping [ 208.855340][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.865710][ T10] usb 2-1: config 9 interface 137 altsetting 49 has 2 endpoint descriptors, different from the interface descriptor's value: 217 [ 208.872102][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.885428][ T10] usb 2-1: config 9 interface 96 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 208.894015][ T43] usb 4-1: Product: syz [ 208.907852][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 208.910842][ T43] usb 4-1: Manufacturer: syz [ 208.920383][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 208.925202][ T43] usb 4-1: SerialNumber: syz [ 208.940754][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 208.951941][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 208.963071][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 208.974396][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 208.985480][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 208.996348][ T10] usb 2-1: config 9 interface 179 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.008537][ T10] usb 2-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 209.019404][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 209.030282][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 209.041166][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 209.052246][ T10] usb 2-1: config 9 interface 147 altsetting 6 has an endpoint descriptor with address 0x6A, changing to 0xA [ 209.066333][ T10] usb 2-1: config 9 interface 147 altsetting 6 endpoint 0xA has invalid maxpacket 6590, setting to 1024 [ 209.078146][ T10] usb 2-1: config 9 interface 147 altsetting 6 bulk endpoint 0xA has invalid maxpacket 1024 [ 209.088918][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 209.100065][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 209.112437][ T10] usb 2-1: config 9 interface 147 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 209.130787][ T10] usb 2-1: config 9 interface 147 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 209.144019][ T10] usb 2-1: config 9 interface 232 has no altsetting 0 [ 209.150850][ T10] usb 2-1: config 9 interface 137 has no altsetting 0 [ 209.159921][ T10] usb 2-1: config 9 interface 96 has no altsetting 0 [ 209.161940][ T43] usb 4-1: failed to enable PITCH for EP 0x82 [ 209.166987][ T10] usb 2-1: config 9 interface 147 has no altsetting 0 [ 209.184435][ T10] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice=5b.5f [ 209.195729][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.205214][ T10] usb 2-1: Manufacturer: ﳿ [ 209.212488][ T10] usb 2-1: SerialNumber: ‘䗍嘉菲꘨䀬흝媢ว勱꛿锣稫䔎䪋풒ꠔ론⍋乏≬ణ䘖楉᙭핕䃻쩅꽹细ꅥ熔譪犉婤ᝲ̳듊漆榱㘺⍨ᔷ穆㎦嗱䔋새嬾╾絖ಶ [ 209.217192][ T43] usb 4-1: USB disconnect, device number 40 [ 209.266976][ T5876] gspca_zc3xx: reg_r err -32 [ 209.300438][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.467817][ T10] usb 2-1: can't set first interface for hiFace device. [ 209.474999][ T10] snd-usb-hiface 2-1:9.232: probe with driver snd-usb-hiface failed with error -5 [ 209.491912][ T10] usb 2-1: can't set first interface for hiFace device. [ 209.499091][ T10] snd-usb-hiface 2-1:9.137: probe with driver snd-usb-hiface failed with error -5 [ 209.511448][ T10] usb 2-1: can't set first interface for hiFace device. [ 209.519843][ T10] snd-usb-hiface 2-1:9.96: probe with driver snd-usb-hiface failed with error -5 [ 209.535322][ T10] usb 2-1: can't set first interface for hiFace device. [ 209.542321][ T10] snd-usb-hiface 2-1:9.179: probe with driver snd-usb-hiface failed with error -5 [ 209.557058][ T10] usb 2-1: can't set first interface for hiFace device. [ 209.564199][ T10] snd-usb-hiface 2-1:9.147: probe with driver snd-usb-hiface failed with error -5 [ 209.582161][ T10] usb 2-1: USB disconnect, device number 32 [ 209.777305][ T7100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.854880][ T5876] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 209.867352][ T5876] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 209.899909][ T7100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.992051][ T7100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.111991][ T7100] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.138570][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 210.243540][ T5836] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.250118][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 210.302057][ T5876] usb 1-1: USB disconnect, device number 66 [ 210.385879][ T6606] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.466267][ T6606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.491337][ T6606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.501771][ T6606] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.532102][ T5914] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 210.590221][ T7112] loop4: detected capacity change from 0 to 2560 [ 210.607425][ T5932] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.627611][ T5932] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.644531][ T5932] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.671720][ T5932] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.686215][ T5932] Buffer I/O error on dev loop4, logical block 0, async page read [ 210.695529][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 210.703434][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 210.717271][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 210.733380][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.746707][ T5914] usb 3-1: Product: syz [ 210.751268][ T5914] usb 3-1: Manufacturer: syz [ 210.756718][ T5914] usb 3-1: SerialNumber: syz [ 210.776817][ T5914] usb 3-1: config 0 descriptor?? [ 210.806619][ T5914] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 210.843382][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 211.026171][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 211.046371][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 211.060146][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 211.070345][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 211.079992][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.091237][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.121919][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.145509][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 211.157069][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.170216][ T24] usb 4-1: config 0 descriptor?? [ 211.207772][ T7123] overlay: Bad value for 'workdir' [ 211.278780][ T5876] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 211.381762][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 211.399319][ T24] usb 4-1: USB disconnect, device number 41 [ 211.410824][ T24] usblp0: removed [ 211.435457][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.446245][ T5876] usb 2-1: not running at top speed; connect to a high speed hub [ 211.457705][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.469495][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.481955][ T5876] usb 2-1: string descriptor 0 read error: -22 [ 211.488463][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.497915][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.525090][ T5876] usb 2-1: 0:2 : does not exist [ 211.553303][ T5915] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 211.723403][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 211.730371][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 211.742624][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 211.752136][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.760624][ T5915] usb 1-1: Product: syz [ 211.765786][ T5915] usb 1-1: Manufacturer: syz [ 211.771626][ T5915] usb 1-1: SerialNumber: syz [ 211.780012][ T5915] usb 1-1: config 0 descriptor?? [ 211.791179][ T5915] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 211.853532][ T5884] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 212.003304][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 212.010509][ T5884] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 212.019018][ T5884] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 212.027787][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 212.036923][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.046789][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.057160][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 212.070334][ T5884] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 212.081625][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.094422][ T5884] usb 4-1: config 0 descriptor?? [ 212.168096][ T5876] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 212.212569][ T5876] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 212.281421][ T5876] usb 2-1: USB disconnect, device number 33 [ 212.314719][ T5884] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 212.508157][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.517240][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.527637][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.536754][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.546831][ T5884] usb 4-1: USB disconnect, device number 42 [ 212.573789][ T5884] usblp0: removed [ 212.663253][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.803495][ T5876] usb 2-1: device descriptor read/64, error -71 [ 212.810149][ T5914] gspca_zc3xx: reg_r err -32 [ 213.043248][ T5876] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 213.173188][ T5876] usb 2-1: device descriptor read/64, error -71 [ 213.293721][ T5876] usb usb2-port1: attempt power cycle [ 213.413184][ T5914] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 213.419681][ T5914] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 213.633220][ T5876] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 213.654615][ T5876] usb 2-1: device descriptor read/8, error -71 [ 213.798732][ T5915] gspca_zc3xx: reg_r err -32 [ 213.833418][ T5914] usb 3-1: USB disconnect, device number 63 [ 213.903357][ T5876] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 213.925793][ T5876] usb 2-1: device descriptor read/8, error -71 [ 214.043649][ T5876] usb usb2-port1: unable to enumerate USB device [ 214.090451][ T7145] 9p: Bad value for 'rfdno' [ 214.183289][ T5914] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 214.333270][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 214.340721][ T5914] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.352318][ T5914] usb 3-1: config 0 interface 0 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.365752][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.372510][ T5914] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 214.382077][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.393038][ T5914] usb 3-1: config 0 descriptor?? [ 214.393343][ T5876] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 214.398132][ T5915] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 214.412437][ T5915] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 214.563364][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 214.571059][ T5876] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.579304][ T5876] usb 4-1: config 0 has no interface number 0 [ 214.585533][ T5876] usb 4-1: config 0 interface 12 has no altsetting 0 [ 214.596407][ T5876] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.605606][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.613749][ T5876] usb 4-1: Product: syz [ 214.617950][ T5876] usb 4-1: Manufacturer: syz [ 214.626112][ T5876] usb 4-1: SerialNumber: syz [ 214.633505][ T5876] usb 4-1: config 0 descriptor?? [ 214.829354][ T5915] usb 1-1: USB disconnect, device number 67 [ 214.867784][ T5914] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.09 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 214.890188][ T7154] FAULT_INJECTION: forcing a failure. [ 214.890188][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.904817][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(full) [ 214.904845][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.904858][ T7154] Call Trace: [ 214.904866][ T7154] [ 214.904875][ T7154] dump_stack_lvl+0x189/0x250 [ 214.904919][ T7154] ? __pfx____ratelimit+0x10/0x10 [ 214.904953][ T7154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.904979][ T7154] ? __pfx__printk+0x10/0x10 [ 214.905004][ T7154] ? __might_fault+0xb0/0x130 [ 214.905044][ T7154] should_fail_ex+0x414/0x560 [ 214.905070][ T7154] _copy_from_user+0x2d/0xb0 [ 214.905100][ T7154] ___sys_sendmsg+0x158/0x2a0 [ 214.905127][ T7154] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.905190][ T7154] ? __fget_files+0x2a/0x420 [ 214.905215][ T7154] ? __fget_files+0x3a0/0x420 [ 214.905252][ T7154] __sys_sendmmsg+0x227/0x430 [ 214.905281][ T7154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.905315][ T7154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.905362][ T7154] ? ksys_write+0x22a/0x250 [ 214.905387][ T7154] ? __pfx_ksys_write+0x10/0x10 [ 214.905415][ T7154] __x64_sys_sendmmsg+0xa0/0xc0 [ 214.905441][ T7154] do_syscall_64+0xfa/0xfa0 [ 214.905467][ T7154] ? irqentry_exit+0x10f/0x640 [ 214.905491][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.905511][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 214.905536][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.905556][ T7154] RIP: 0033:0x7f091c78f6c9 [ 214.905578][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.905596][ T7154] RSP: 002b:00007f091d550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.905617][ T7154] RAX: ffffffffffffffda RBX: 00007f091c9e5fa0 RCX: 00007f091c78f6c9 [ 214.905632][ T7154] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 214.905645][ T7154] RBP: 00007f091d550090 R08: 0000000000000000 R09: 0000000000000000 [ 214.905658][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.905670][ T7154] R13: 00007f091c9e6038 R14: 00007f091c9e5fa0 R15: 00007ffc6665f528 [ 214.905702][ T7154] [ 215.049795][ T5914] usb 3-1: USB disconnect, device number 64 [ 215.157801][ T7155] fido_id[7155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 215.809517][ T5876] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 215.817445][ T5876] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 215.828011][ T5876] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 215.836910][ T5876] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 215.880278][ T5876] usb 4-1: USB disconnect, device number 43 [ 216.024117][ T7128] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 216.163402][ T5914] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 216.193187][ T7128] usb 1-1: Using ep0 maxpacket: 8 [ 216.200272][ T7128] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 216.211854][ T7128] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 216.221046][ T7128] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 216.229382][ T7128] usb 1-1: Product: syz [ 216.233720][ T7128] usb 1-1: Manufacturer: syz [ 216.238448][ T7128] usb 1-1: SerialNumber: syz [ 216.324381][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 216.346794][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 216.373837][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 216.380655][ T7173] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 216.386666][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.404018][ T5914] usb 3-1: Product: syz [ 216.408396][ T5914] usb 3-1: Manufacturer: syz [ 216.413315][ T5914] usb 3-1: SerialNumber: syz [ 216.420863][ T7173] overlayfs: missing 'lowerdir' [ 216.422273][ T5914] usb 3-1: config 0 descriptor?? [ 216.437253][ T5914] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 216.451998][ T7128] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 216.460543][ T7128] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 216.468647][ T7128] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 216.476625][ T7128] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 216.654164][ T7128] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 216.665443][ T7128] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 216.677509][ T7128] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 216.857769][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.866696][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.960204][ T7128] usb 1-1: USB disconnect, device number 68 [ 216.987440][ T7128] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 217.012445][ T7128] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 217.044633][ T7128] visor 1-1:1.0: device disconnected [ 217.283246][ T5915] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 217.443238][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 217.450425][ T5915] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 217.458995][ T5915] usb 4-1: config 0 has no interface number 0 [ 217.465630][ T5915] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 217.476125][ T5915] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 217.486308][ T5915] usb 4-1: config 0 interface 126 has no altsetting 0 [ 217.498508][ T5915] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 217.524333][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.532435][ T5915] usb 4-1: Product: syz [ 217.538016][ T5915] usb 4-1: Manufacturer: syz [ 217.544268][ T5915] usb 4-1: SerialNumber: syz [ 217.554019][ T5915] usb 4-1: config 0 descriptor?? [ 217.560460][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.568578][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.779388][ T7178] 9p: Bad value for 'wfdno' [ 217.814583][ T5884] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 217.818131][ T5915] ir_usb 4-1:0.126: IR Dongle converter detected [ 217.858378][ T7185] FAULT_INJECTION: forcing a failure. [ 217.858378][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 217.863440][ T5915] usb 4-1: IRDA class descriptor not found, device not bound [ 217.872547][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.3.385 Not tainted syzkaller #0 PREEMPT(full) [ 217.872575][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.872592][ T7185] Call Trace: [ 217.872620][ T7185] [ 217.872630][ T7185] dump_stack_lvl+0x189/0x250 [ 217.872666][ T7185] ? __pfx____ratelimit+0x10/0x10 [ 217.872695][ T7185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.872725][ T7185] ? __pfx__printk+0x10/0x10 [ 217.872760][ T7185] ? __pfx___might_resched+0x10/0x10 [ 217.872787][ T7185] ? fs_reclaim_acquire+0x7d/0x100 [ 217.872826][ T7185] should_fail_ex+0x414/0x560 [ 217.872855][ T7185] should_failslab+0xa8/0x100 [ 217.872874][ T7185] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 217.872989][ T7185] ? __alloc_skb+0x112/0x2d0 [ 217.873021][ T7185] __alloc_skb+0x112/0x2d0 [ 217.873050][ T7185] __ip_append_data+0x2dae/0x40c0 [ 217.873086][ T7185] ? rt_is_expired+0x1c/0x2d0 [ 217.873133][ T7185] ? __pfx_raw_getfrag+0x10/0x10 [ 217.873174][ T7185] ? ipv4_mtu+0x23/0x650 [ 217.873209][ T7185] ? __pfx___ip_append_data+0x10/0x10 [ 217.873230][ T7185] ? ipv4_mtu+0x53b/0x650 [ 217.873259][ T7185] ? ipv4_mtu+0x23/0x650 [ 217.873292][ T7185] ? __pfx_ipv4_mtu+0x10/0x10 [ 217.873322][ T7185] ? ip_setup_cork+0x577/0x9a0 [ 217.873341][ T7185] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.873374][ T7185] ip_append_data+0x10e/0x190 [ 217.873402][ T7185] ? __pfx_raw_getfrag+0x10/0x10 [ 217.873428][ T7185] raw_sendmsg+0x13d8/0x18b0 [ 217.873470][ T7185] ? __pfx_raw_sendmsg+0x10/0x10 [ 217.873504][ T7185] ? __pfx_handle_mm_fault+0x10/0x10 [ 217.873543][ T7185] ? aa_sk_perm+0x81c/0x950 [ 217.873579][ T7185] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.873721][ T7185] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 217.873764][ T7185] ? sock_rps_record_flow+0x19/0x410 [ 217.873794][ T7185] ? inet_sendmsg+0x2f4/0x370 [ 217.873819][ T7185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.873854][ T7185] __sock_sendmsg+0x19c/0x270 [ 217.873886][ T7185] ____sys_sendmsg+0x52d/0x870 [ 217.873919][ T7185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.873956][ T7185] ? import_iovec+0x74/0xa0 [ 217.873992][ T7185] ___sys_sendmsg+0x21f/0x2a0 [ 217.874035][ T7185] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.874113][ T7185] ? __fget_files+0x2a/0x420 [ 217.874141][ T7185] ? __fget_files+0x3a0/0x420 [ 217.874198][ T7185] __sys_sendmmsg+0x227/0x430 [ 217.874233][ T7185] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.874270][ T7185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.874328][ T7185] ? ksys_write+0x22a/0x250 [ 217.874356][ T7185] ? __pfx_ksys_write+0x10/0x10 [ 217.874388][ T7185] __x64_sys_sendmmsg+0xa0/0xc0 [ 217.874419][ T7185] do_syscall_64+0xfa/0xfa0 [ 217.874452][ T7185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.874476][ T7185] ? clear_bhb_loop+0x60/0xb0 [ 217.874504][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.874526][ T7185] RIP: 0033:0x7f657198f6c9 [ 217.874549][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.874569][ T7185] RSP: 002b:00007f656fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.874592][ T7185] RAX: ffffffffffffffda RBX: 00007f6571be5fa0 RCX: 00007f657198f6c9 [ 217.874690][ T7185] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 217.874705][ T7185] RBP: 00007f656fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 217.874719][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.874734][ T7185] R13: 00007f6571be6038 R14: 00007f6571be5fa0 R15: 00007ffc0f7e0838 [ 217.874773][ T7185] [ 217.983219][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 217.996929][ T5915] usb 4-1: USB disconnect, device number 44 [ 218.030269][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 218.267150][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 218.276437][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.284556][ T5884] usb 1-1: Product: syz [ 218.288765][ T5884] usb 1-1: Manufacturer: syz [ 218.294038][ T5884] usb 1-1: SerialNumber: syz [ 218.305911][ T5884] usb 1-1: config 0 descriptor?? [ 218.320462][ T5884] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 218.381910][ T7189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.451596][ T5914] gspca_zc3xx: reg_r err -32 [ 218.743254][ T7128] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 218.893289][ T7128] usb 4-1: Using ep0 maxpacket: 16 [ 218.900184][ T7128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.911419][ T7128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.921275][ T7128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.928128][ T7128] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 218.938968][ T7128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.951078][ T7128] usb 4-1: config 0 descriptor?? [ 219.053241][ T5914] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 219.059671][ T5914] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 219.420495][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.427355][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.434398][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.441147][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.449614][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.456620][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.463519][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.470295][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.477280][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.484073][ T7128] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 219.491728][ T7128] kye 0003:0458:0138.0009: unexpected long global item [ 219.499419][ T7128] kye 0003:0458:0138.0009: parse failed [ 219.502228][ T980] usb 3-1: USB disconnect, device number 65 [ 219.505163][ T7128] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 219.587267][ T7197] tipc: Started in network mode [ 219.592193][ T7197] tipc: Node identity 4, cluster identity 4711 [ 219.598506][ T7197] tipc: Node number set to 4 [ 219.639409][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.648577][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.933239][ T980] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 220.104429][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 220.113906][ T980] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 220.122543][ T980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.143293][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.153322][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.167857][ T980] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.181180][ T980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.190606][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.250023][ T7204] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 220.334819][ T5884] gspca_zc3xx: reg_r err -32 [ 220.415649][ T980] usb 3-1: usb_control_msg returned -32 [ 220.421423][ T980] usbtmc 3-1:16.0: can't read capabilities [ 220.509178][ T7207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.393'. [ 220.520098][ T7207] CUSE: info not properly terminated [ 220.769877][ T7218] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 220.923265][ T5884] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 220.929795][ T5884] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 220.971526][ T5915] usb 3-1: USB disconnect, device number 66 [ 221.004162][ T7128] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 221.165210][ T7128] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.173458][ T7128] usb 2-1: config 0 has no interface number 0 [ 221.182694][ T7128] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 221.193409][ T7128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.201647][ T7128] usb 2-1: Product: syz [ 221.206190][ T7128] usb 2-1: Manufacturer: syz [ 221.210845][ T7128] usb 2-1: SerialNumber: syz [ 221.218448][ T7128] usb 2-1: config 0 descriptor?? [ 221.369163][ T980] usb 1-1: USB disconnect, device number 69 [ 221.438960][ T7128] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 221.451244][ T7128] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.463301][ T7128] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 221.471422][ T7128] usb 2-1: media controller created [ 221.492086][ T7128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.667443][ T5884] usb 4-1: USB disconnect, device number 45 [ 221.714026][ T980] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 221.730887][ T7231] netlink: 288 bytes leftover after parsing attributes in process `syz.3.401'. [ 221.853229][ T980] usb 1-1: device descriptor read/64, error -71 [ 221.873237][ T5914] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 222.053205][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 222.060721][ T5914] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 222.069751][ T5914] usb 3-1: config 0 has no interface number 0 [ 222.093215][ T980] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 222.103834][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 222.117070][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.125816][ T5914] usb 3-1: Product: syz [ 222.130051][ T5914] usb 3-1: Manufacturer: syz [ 222.136127][ T5914] usb 3-1: SerialNumber: syz [ 222.144801][ T5914] usb 3-1: config 0 descriptor?? [ 222.223269][ T980] usb 1-1: device descriptor read/64, error -71 [ 222.344171][ T980] usb usb1-port1: attempt power cycle [ 222.579998][ T5914] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 222.597498][ T5914] uvcvideo 3-1:0.31: No valid video chain found. [ 222.613237][ T5914] usb 3-1: USB disconnect, device number 67 [ 222.653425][ T5915] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 222.661402][ T7128] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 222.680427][ T7229] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 222.691404][ T980] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 222.731083][ T7128] usb 2-1: USB disconnect, device number 38 [ 222.738081][ T980] usb 1-1: device descriptor read/8, error -71 [ 222.754470][ T7243] FAULT_INJECTION: forcing a failure. [ 222.754470][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 222.768898][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 222.768924][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.768937][ T7243] Call Trace: [ 222.768946][ T7243] [ 222.768954][ T7243] dump_stack_lvl+0x189/0x250 [ 222.768983][ T7243] ? __pfx____ratelimit+0x10/0x10 [ 222.769009][ T7243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.769035][ T7243] ? __pfx__printk+0x10/0x10 [ 222.769055][ T7243] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.769082][ T7243] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.769104][ T7243] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.769135][ T7243] should_fail_ex+0x414/0x560 [ 222.769163][ T7243] should_failslab+0xa8/0x100 [ 222.769185][ T7243] __kmalloc_noprof+0xdf/0x800 [ 222.769225][ T7243] ? ipt_do_table+0x13dd/0x1640 [ 222.769251][ T7243] ? ___neigh_create+0x6d5/0x2260 [ 222.769285][ T7243] ___neigh_create+0x6d5/0x2260 [ 222.769350][ T7243] ip_neigh_gw4+0x289/0x3b0 [ 222.769374][ T7243] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 222.769407][ T7243] ip_finish_output2+0x57a/0x1160 [ 222.769435][ T7243] ? ip_finish_output2+0x452/0x1160 [ 222.769460][ T7243] ? __pfx_ip_finish_output2+0x10/0x10 [ 222.769483][ T7243] ? ip_skb_dst_mtu+0x18d/0xb70 [ 222.769500][ T7243] ? ip_skb_dst_mtu+0x917/0xb70 [ 222.769522][ T7243] ? ip_finish_output+0x33a/0x3f0 [ 222.769556][ T7243] ip_output+0x29f/0x450 [ 222.769587][ T7243] ? ip_output+0x5b/0x450 [ 222.769619][ T7243] ip_push_pending_frames+0xbe/0x150 [ 222.769643][ T7243] raw_sendmsg+0x1440/0x18b0 [ 222.769678][ T7243] ? __pfx_raw_sendmsg+0x10/0x10 [ 222.769708][ T7243] ? __pfx_handle_mm_fault+0x10/0x10 [ 222.769743][ T7243] ? aa_sk_perm+0x81c/0x950 [ 222.769775][ T7243] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.769799][ T7243] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 222.769835][ T7243] ? sock_rps_record_flow+0x19/0x410 [ 222.769861][ T7243] ? inet_sendmsg+0x2f4/0x370 [ 222.769882][ T7243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.769917][ T7243] __sock_sendmsg+0x19c/0x270 [ 222.769949][ T7243] ____sys_sendmsg+0x52d/0x870 [ 222.769979][ T7243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.770022][ T7243] ? import_iovec+0x74/0xa0 [ 222.770055][ T7243] ___sys_sendmsg+0x21f/0x2a0 [ 222.770082][ T7243] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.770142][ T7243] ? __fget_files+0x2a/0x420 [ 222.770167][ T7243] ? __fget_files+0x3a0/0x420 [ 222.770210][ T7243] __sys_sendmmsg+0x227/0x430 [ 222.770241][ T7243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.770277][ T7243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.770327][ T7243] ? ksys_write+0x22a/0x250 [ 222.770352][ T7243] ? __pfx_ksys_write+0x10/0x10 [ 222.770379][ T7243] __x64_sys_sendmmsg+0xa0/0xc0 [ 222.770406][ T7243] do_syscall_64+0xfa/0xfa0 [ 222.770434][ T7243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.770455][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 222.770481][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.770501][ T7243] RIP: 0033:0x7f2d9098f6c9 [ 222.770520][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.770538][ T7243] RSP: 002b:00007f2d8ebee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.770559][ T7243] RAX: ffffffffffffffda RBX: 00007f2d90be5fa0 RCX: 00007f2d9098f6c9 [ 222.770575][ T7243] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 222.770589][ T7243] RBP: 00007f2d8ebee090 R08: 0000000000000000 R09: 0000000000000000 [ 222.770602][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.770614][ T7243] R13: 00007f2d90be6038 R14: 00007f2d90be5fa0 R15: 00007ffee63c8b88 [ 222.770649][ T7243] [ 222.993395][ T980] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 223.058114][ T5915] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 223.138626][ T980] usb 1-1: device descriptor read/8, error -71 [ 223.141428][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.163198][ T5915] usb 4-1: Product: syz [ 223.167405][ T5915] usb 4-1: Manufacturer: syz [ 223.172125][ T5915] usb 4-1: SerialNumber: syz [ 223.180225][ T5915] usb 4-1: config 0 descriptor?? [ 223.188198][ T5915] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 223.197208][ T5915] usb 4-1: Detected FT4232HP [ 223.256498][ T980] usb usb1-port1: unable to enumerate USB device [ 223.400970][ T5915] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 223.414262][ T5915] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 223.424754][ T5915] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 223.436262][ T5915] usb 4-1: USB disconnect, device number 46 [ 223.448455][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 223.464343][ T5915] ftdi_sio 4-1:0.0: device disconnected [ 223.553268][ T7128] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 223.723176][ T7128] usb 3-1: Using ep0 maxpacket: 8 [ 223.731100][ T7128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 223.756567][ T7128] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 223.766662][ T7128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.775585][ T7128] usb 3-1: Product: syz [ 223.779880][ T7128] usb 3-1: Manufacturer: syz [ 223.784619][ T7128] usb 3-1: SerialNumber: syz [ 223.793618][ T7128] usb 3-1: config 0 descriptor?? [ 223.801790][ T7128] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 224.065434][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 224.074682][ T980] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 224.233244][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 224.240683][ T980] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 224.250078][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.262017][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.272139][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.283222][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.296655][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.305770][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.343239][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 224.494621][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 224.504126][ T10] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.514797][ T10] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.530023][ T7259] netlink: 'syz.1.411': attribute type 11 has an invalid length. [ 224.539854][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 224.548557][ T980] usb 2-1: usb_control_msg returned -32 [ 224.555256][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 224.565510][ T980] usbtmc 2-1:16.0: can't read capabilities [ 224.577993][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.588217][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.596859][ T10] usb 4-1: Product: 랓⡲瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮珇㷕ꠂ㹎笹쮴⋯୚﵀쏽儸모쉓热龇澥⯀湒ᖧ懲䤬恑Ṛꕜ뭦쥴벡﫥঴⸧/璫䌄령盵殽Ψ햎鱖㤁ݧࡹ춧秷皓銼ዞ쁞瀁빴펤醇쥰഑尸⥮嚝鎁퇖⑺윏핈贴ት푿䟂 [ 224.628897][ T10] usb 4-1: Manufacturer: င [ 224.633632][ T10] usb 4-1: SerialNumber: syz [ 224.649737][ T7263] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 224.657534][ T7263] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 224.667184][ T7267] FAULT_INJECTION: forcing a failure. [ 224.667184][ T7267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.682018][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(full) [ 224.682050][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.682072][ T7267] Call Trace: [ 224.682081][ T7267] [ 224.682090][ T7267] dump_stack_lvl+0x189/0x250 [ 224.682121][ T7267] ? __pfx____ratelimit+0x10/0x10 [ 224.682147][ T7267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.682172][ T7267] ? __pfx__printk+0x10/0x10 [ 224.682196][ T7267] ? __might_fault+0xb0/0x130 [ 224.682238][ T7267] should_fail_ex+0x414/0x560 [ 224.682258][ T7267] _copy_from_user+0x2d/0xb0 [ 224.682279][ T7267] ___sys_sendmsg+0x158/0x2a0 [ 224.682306][ T7267] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.682370][ T7267] ? __might_fault+0xb0/0x130 [ 224.682404][ T7267] __sys_sendmmsg+0x227/0x430 [ 224.682431][ T7267] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.682456][ T7267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.682489][ T7267] ? ksys_write+0x22a/0x250 [ 224.682513][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 224.682542][ T7267] __x64_sys_sendmmsg+0xa0/0xc0 [ 224.682568][ T7267] do_syscall_64+0xfa/0xfa0 [ 224.682595][ T7267] ? irqentry_exit+0x10f/0x640 [ 224.682614][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.682628][ T7267] ? clear_bhb_loop+0x60/0xb0 [ 224.682646][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.682661][ T7267] RIP: 0033:0x7f091c78f6c9 [ 224.682682][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.682700][ T7267] RSP: 002b:00007f091d550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.682722][ T7267] RAX: ffffffffffffffda RBX: 00007f091c9e5fa0 RCX: 00007f091c78f6c9 [ 224.682737][ T7267] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 224.682750][ T7267] RBP: 00007f091d550090 R08: 0000000000000000 R09: 0000000000000000 [ 224.682764][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.682774][ T7267] R13: 00007f091c9e6038 R14: 00007f091c9e5fa0 R15: 00007ffc6665f528 [ 224.682798][ T7267] [ 224.904568][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 224.928692][ T10] usb 4-1: USB disconnect, device number 47 [ 224.997946][ T7271] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned d1 [ 225.123204][ C1] ------------[ cut here ]------------ [ 225.128904][ C1] ODEBUG: activate active (active state 1) object: ffff8880612923d8 object type: rcu_head hint: 0x0 [ 225.140402][ C1] WARNING: lib/debugobjects.c:615 at debug_print_object+0x16b/0x1e0, CPU#1: udevd/5933 [ 225.150133][ C1] Modules linked in: [ 225.154237][ C1] CPU: 1 UID: 0 PID: 5933 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 225.163140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.173260][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 225.179098][ C1] Code: 4c 89 ff e8 57 da 85 fd 4d 8b 0f 48 c7 c7 80 3b e1 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa b7 e1 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 ae 1d 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 225.198853][ C1] RSP: 0018:ffffc90000a088e0 EFLAGS: 00010292 [ 225.205005][ C1] RAX: fa3c804f07d98000 RBX: dffffc0000000000 RCX: ffff8880268c9e80 [ 225.213055][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 225.221114][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 225.229159][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: 0000000000000000 [ 225.237222][ C1] R13: ffffffff8be13d00 R14: ffff8880612923d8 R15: ffffffff8b8be780 [ 225.245269][ C1] FS: 00007f1902fdc880(0000) GS:ffff888125b76000(0000) knlGS:0000000000000000 [ 225.254287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.260921][ C1] CR2: 00007ffc6665dff8 CR3: 0000000030dea000 CR4: 00000000003526f0 [ 225.268965][ C1] Call Trace: [ 225.272292][ C1] [ 225.275192][ C1] debug_object_activate+0x26a/0x420 [ 225.280521][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 225.286647][ C1] call_rcu+0xaa/0x9c0 [ 225.290771][ C1] ? __queue_work+0x196/0xf90 [ 225.295502][ C1] ? __queue_work+0xbd6/0xf90 [ 225.300219][ C1] ? __pfx_call_rcu+0x10/0x10 [ 225.304964][ C1] ? queue_work_on+0x115/0x270 [ 225.309763][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.315136][ C1] ? queue_work_on+0x1ed/0x270 [ 225.320108][ C1] delete_node+0x1b6/0xa50 [ 225.324750][ C1] radix_tree_delete_item+0x2b6/0x400 [ 225.330188][ C1] ? rcu_core+0xc37/0x1770 [ 225.334668][ C1] afs_cell_destroy+0x16f/0x2c0 [ 225.339741][ C1] ? __pfx_afs_cell_destroy+0x10/0x10 [ 225.345177][ C1] rcu_core+0xcab/0x1770 [ 225.349472][ C1] ? __pfx_rcu_core+0x10/0x10 [ 225.354294][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 225.360590][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 225.367271][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 225.373246][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.373301][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 225.378493][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 225.378530][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.378555][ C1] ? clockevents_program_event+0x247/0x360 [ 225.378594][ C1] handle_softirqs+0x27d/0x880 [ 225.409100][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 225.413948][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 225.419326][ C1] __irq_exit_rcu+0xca/0x1f0 [ 225.424043][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 225.429299][ C1] irq_exit_rcu+0x9/0x30 [ 225.433616][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.439314][ C1] [ 225.442284][ C1] [ 225.445309][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.451349][ C1] RIP: 0010:policy_nodemask+0x4d9/0x720 [ 225.457085][ C1] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c b5 48 89 df e8 fd 3f 03 00 eb ab e8 b6 e7 9c ff e9 fe 00 00 00 e8 ac e7 9c ff b8 40 00 00 00 <83> f8 40 bb 40 00 00 00 0f 42 d8 4c 89 e8 48 c1 e8 03 48 b9 00 00 [ 225.476763][ C1] RSP: 0018:ffffc90004a777f8 EFLAGS: 00000242 [ 225.482878][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880268c9e80 [ 225.490942][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 225.499174][ C1] RBP: 00000000000d2040 R08: ffff8880268c9e80 R09: 0000000000000005 [ 225.507332][ C1] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000001 [ 225.515380][ C1] R13: ffffc90004a77864 R14: ffffffff99cbcf48 R15: ffffffffffffffff [ 225.523474][ C1] ? policy_nodemask+0x27c/0x720 [ 225.528653][ C1] alloc_pages_mpol+0x52/0x4a0 [ 225.533505][ C1] allocate_slab+0x96/0x350 [ 225.537728][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.538068][ C1] ___slab_alloc+0xf56/0x1990 [ 225.547268][ T10] usb 1-1: config 0 has no interface number 0 [ 225.550990][ C1] ? __pfx___might_resched+0x10/0x10 [ 225.562401][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.562531][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.572480][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.577506][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.586267][ T10] usb 1-1: Product: syz [ 225.591278][ C1] __slab_alloc+0x65/0x100 [ 225.591317][ C1] __kmalloc_noprof+0x47d/0x800 [ 225.591347][ C1] ? kfree+0x4d/0x6e0 [ 225.591372][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.591413][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.591449][ C1] ? tomoyo_domain+0xd8/0x130 [ 225.591492][ C1] tomoyo_path_perm+0x213/0x4b0 [ 225.591521][ C1] ? tomoyo_path_perm+0x1e3/0x4b0 [ 225.591549][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 225.591585][ C1] ? blkdev_common_ioctl+0x10ce/0x2570 [ 225.591651][ C1] security_inode_getattr+0x12f/0x330 [ 225.591677][ C1] __x64_sys_newfstat+0xfc/0x200 [ 225.591714][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 225.591777][ C1] ? do_syscall_64+0xbe/0xfa0 [ 225.591813][ C1] do_syscall_64+0xfa/0xfa0 [ 225.591843][ C1] ? irqentry_exit+0x10f/0x640 [ 225.591871][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.591896][ C1] ? clear_bhb_loop+0x60/0xb0 [ 225.591923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.591944][ C1] RIP: 0033:0x7f1902911ad7 [ 225.591965][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 225.591986][ C1] RSP: 002b:00007fff42790268 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 225.592019][ C1] RAX: ffffffffffffffda RBX: 000055a6a1300c50 RCX: 00007f1902911ad7 [ 225.592036][ C1] RDX: 0000000000000000 RSI: 00007fff427902b0 RDI: 0000000000000009 [ 225.592052][ C1] RBP: 0000000000000001 R08: 00000000000001e0 R09: 0000000000000000 [ 225.592065][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a69246c95f [ 225.592079][ C1] R13: 000055a69247d660 R14: 0000000000000000 R15: 0000000000000009 [ 225.592111][ C1] [ 225.592137][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.592154][ C1] CPU: 1 UID: 0 PID: 5933 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 225.592179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.592193][ C1] Call Trace: [ 225.592203][ C1] [ 225.592217][ C1] dump_stack_lvl+0x99/0x250 [ 225.592248][ C1] ? __asan_memcpy+0x40/0x70 [ 225.592278][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.592307][ C1] ? __pfx__printk+0x10/0x10 [ 225.592349][ C1] vpanic+0x237/0x6d0 [ 225.592369][ C1] ? __pfx_vpanic+0x10/0x10 [ 225.592389][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 225.592422][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 225.592465][ C1] panic+0xb9/0xc0 [ 225.592485][ C1] ? __pfx_panic+0x10/0x10 [ 225.592524][ C1] __warn+0x318/0x4d0 [ 225.592541][ C1] ? debug_print_object+0x16b/0x1e0 [ 225.592569][ C1] ? debug_print_object+0x16b/0x1e0 [ 225.592594][ C1] report_bug+0x2be/0x4f0 [ 225.592625][ C1] ? debug_print_object+0x16b/0x1e0 [ 225.592651][ C1] ? debug_print_object+0x16b/0x1e0 [ 225.592676][ C1] ? debug_print_object+0x16d/0x1e0 [ 225.592701][ C1] handle_bug+0x84/0x160 [ 225.592738][ C1] exc_invalid_op+0x1a/0x50 [ 225.592774][ C1] asm_exc_invalid_op+0x1a/0x20 [ 225.592797][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 225.592823][ C1] Code: 4c 89 ff e8 57 da 85 fd 4d 8b 0f 48 c7 c7 80 3b e1 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 aa b7 e1 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 ae 1d 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 225.592844][ C1] RSP: 0018:ffffc90000a088e0 EFLAGS: 00010292 [ 225.592866][ C1] RAX: fa3c804f07d98000 RBX: dffffc0000000000 RCX: ffff8880268c9e80 [ 225.592887][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 225.592902][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 225.592917][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: 0000000000000000 [ 225.592935][ C1] R13: ffffffff8be13d00 R14: ffff8880612923d8 R15: ffffffff8b8be780 [ 225.592981][ C1] debug_object_activate+0x26a/0x420 [ 225.593025][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 225.593052][ C1] call_rcu+0xaa/0x9c0 [ 225.593089][ C1] ? __queue_work+0x196/0xf90 [ 225.593119][ C1] ? __queue_work+0xbd6/0xf90 [ 225.593146][ C1] ? __pfx_call_rcu+0x10/0x10 [ 225.593177][ C1] ? queue_work_on+0x115/0x270 [ 225.593204][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.593238][ C1] ? queue_work_on+0x1ed/0x270 [ 225.593269][ C1] delete_node+0x1b6/0xa50 [ 225.593304][ C1] radix_tree_delete_item+0x2b6/0x400 [ 225.593338][ C1] ? rcu_core+0xc37/0x1770 [ 225.593367][ C1] afs_cell_destroy+0x16f/0x2c0 [ 225.593402][ C1] ? __pfx_afs_cell_destroy+0x10/0x10 [ 225.593438][ C1] rcu_core+0xcab/0x1770 [ 225.593488][ C1] ? __pfx_rcu_core+0x10/0x10 [ 225.593512][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 225.593550][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 225.593602][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 225.593632][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.593665][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 225.593696][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.593724][ C1] ? clockevents_program_event+0x247/0x360 [ 225.593764][ C1] handle_softirqs+0x27d/0x880 [ 225.593797][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 225.593831][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 225.593870][ C1] __irq_exit_rcu+0xca/0x1f0 [ 225.593897][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 225.593934][ C1] irq_exit_rcu+0x9/0x30 [ 225.593958][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.593988][ C1] [ 225.594005][ C1] [ 225.594016][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.594043][ C1] RIP: 0010:policy_nodemask+0x4d9/0x720 [ 225.594081][ C1] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c b5 48 89 df e8 fd 3f 03 00 eb ab e8 b6 e7 9c ff e9 fe 00 00 00 e8 ac e7 9c ff b8 40 00 00 00 <83> f8 40 bb 40 00 00 00 0f 42 d8 4c 89 e8 48 c1 e8 03 48 b9 00 00 [ 225.594103][ C1] RSP: 0018:ffffc90004a777f8 EFLAGS: 00000242 [ 225.594125][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880268c9e80 [ 225.594141][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 225.594156][ C1] RBP: 00000000000d2040 R08: ffff8880268c9e80 R09: 0000000000000005 [ 225.594173][ C1] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000001 [ 225.594189][ C1] R13: ffffc90004a77864 R14: ffffffff99cbcf48 R15: ffffffffffffffff [ 225.594228][ C1] ? policy_nodemask+0x27c/0x720 [ 225.594273][ C1] alloc_pages_mpol+0x52/0x4a0 [ 225.594319][ C1] allocate_slab+0x96/0x350 [ 225.594349][ C1] ___slab_alloc+0xf56/0x1990 [ 225.594378][ C1] ? __pfx___might_resched+0x10/0x10 [ 225.594406][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.594449][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.594484][ C1] __slab_alloc+0x65/0x100 [ 225.594514][ C1] __kmalloc_noprof+0x47d/0x800 [ 225.594545][ C1] ? kfree+0x4d/0x6e0 [ 225.594573][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.594614][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 225.594652][ C1] ? tomoyo_domain+0xd8/0x130 [ 225.594699][ C1] tomoyo_path_perm+0x213/0x4b0 [ 225.594730][ C1] ? tomoyo_path_perm+0x1e3/0x4b0 [ 225.594758][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 225.594796][ C1] ? blkdev_common_ioctl+0x10ce/0x2570 [ 225.594866][ C1] security_inode_getattr+0x12f/0x330 [ 225.594893][ C1] __x64_sys_newfstat+0xfc/0x200 [ 225.594932][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 225.595004][ C1] ? do_syscall_64+0xbe/0xfa0 [ 225.595040][ C1] do_syscall_64+0xfa/0xfa0 [ 225.595073][ C1] ? irqentry_exit+0x10f/0x640 [ 225.595102][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.595127][ C1] ? clear_bhb_loop+0x60/0xb0 [ 225.595157][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.595182][ C1] RIP: 0033:0x7f1902911ad7 [ 225.595203][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 225.595223][ C1] RSP: 002b:00007fff42790268 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 225.595247][ C1] RAX: ffffffffffffffda RBX: 000055a6a1300c50 RCX: 00007f1902911ad7 [ 225.595265][ C1] RDX: 0000000000000000 RSI: 00007fff427902b0 RDI: 0000000000000009 [ 225.595282][ C1] RBP: 0000000000000001 R08: 00000000000001e0 R09: 0000000000000000 [ 225.595297][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a69246c95f [ 225.595314][ C1] R13: 000055a69247d660 R14: 0000000000000000 R15: 0000000000000009 [ 225.595351][ C1] [ 225.596988][ C1] Kernel Offset: disabled