last executing test programs: 10.203731492s ago: executing program 1 (id=983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, 0xffffffffffffffff, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) syslog(0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) r10 = openat$cgroup_pressure(r9, 0x0, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 8.254810479s ago: executing program 1 (id=991): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a00010026bd7000fddbdf2502000000000000000010000008"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) (async, rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xf69}], 0x1}, 0x0) 8.095410169s ago: executing program 1 (id=992): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x1, 0x205, 0x0, 0x81, 0x0, 0x9}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) listen(r1, 0xfffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/235, 0xeb}, {0x0}, {&(0x7f0000000500)=""/161, 0xa1}, {0x0}], 0x4, 0x7, 0x9) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1}) dup(r1) r5 = epoll_create1(0x80000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2000000f}) epoll_pwait(r5, &(0x7f00000024c0)=[{}], 0x1, 0x81, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0x1000000, 0x0, 0x9, 0xe, 0x0, 0x8007fffffff}, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=0x0) geteuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRES32, @ANYBLOB="df2321ca099654518c30b7a1bede5ffa8af03691ea8193dbecc5ed30eace640c8c34f9be6ec9ccde159deaaf0000000000004e4783844e7abc7c3234ef4bd19feabc449fc353518bf2", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,max_read=0x00000000000000ff,default_permissions,blksize=0x0000000000000000,fsmagic=0x0000000000000009,uid<', @ANYRESDEC=r10, @ANYRES32=r0, @ANYRES32=r9, @ANYBLOB=',mask=^MAY_EXEC,func=FILE_CHECK,\x00']) 7.987615383s ago: executing program 4 (id=994): syz_usb_connect(0x6, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) 7.269318034s ago: executing program 4 (id=1002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x2}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x25dfdb7c, {0x0, 0x0, 0x0, 0x0, 0x1607, 0x800}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x136, &(0x7f0000000700)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @igmp={{0x25, 0x4, 0x3, 0x8, 0x124, 0x68, 0x0, 0x3, 0x2, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2e}}, {@empty, 0x5ac}]}, @ssrr={0x89, 0x3, 0x25}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x12, "3a6785521270ee98b3b6ca9da88531a3"}, {0x1, 0xd, "40fea5f75b2ed2cc5ff4ef"}, {0x5, 0x8, "36c59cd5ff66"}]}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0xc, [{@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}, {@multicast1, 0x6bb}, {@dev={0xac, 0x14, 0x14, 0x41}}, {@rand_addr=0x64010100, 0x9}]}, @rr={0x7, 0x7, 0xda, [@local]}]}}, {0x16, 0x0, 0x0, @rand_addr=0x64010100, "0e809c31b2cbb4307f9cbc79e526f008fd3592be684754c7c7e535b1583f2ffbf370a72eb285c4470d87cbba8ae900c57573d680e92b0ef7668afd94807e1210418f07ec4b0e16547f204da53a8a49da82d7eea5b28624fc963fef4adc9fc1a15b5d5650beb7c5416bd4d0645ee4bf722666add1bf97c7f3b4f25422951c875b68734b3b38a8240f"}}}}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x90) fchdir(r6) r7 = open(0x0, 0x1031c2, 0x20) set_mempolicy(0x1, &(0x7f0000001880)=0x8, 0xff) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a7594000000010902120001000000000904"], 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c84b9aaf0100dd031dd7504fe58066f3c100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000280)={"31ec861d1bdbb2f104dd52ad43b7db21214d0677cda6247cb86c05e119883e3f"}) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000", 0x17}], 0x1}, 0x0) syz_clone3(0x0, 0x0) preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/2, 0x2}, {&(0x7f0000000600)=""/14, 0xe}], 0x5, 0x81, 0x7) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.105121723s ago: executing program 1 (id=1003): r0 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) readv(r0, &(0x7f0000000140), 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x400, &(0x7f0000000b40)={[{0x85, 0x4e00, "46509ca31ecaa0b4a567fdc9246951ab6fae6f1f5e3544eb3ee23267c423dc771067de900677f09a42100cad6741dcbab0becbd59e7fd8503bcdbaf93bcca8567f5db360a6bd05d5ce86eadc9120e2faa3ce2fed7eb84c889e8bca0423851222e26be6d51d59e9f6dbd34c3c75957deebadaed886f9c5b650ca2de34c31e3cd1c0a2484454"}, {0xa5, 0x4e00, "c96c5c490d1258b8334b312d343117d78af315fecb7b96a37a435cc984a13c4e71755739a434bc239f14a83d22983fc9615105266e5e86fb2b229035364355c2b9a16086e84e1fabf2c37f73e6e70af4d07215f79e43ffe7c210e50e7c6a10d61199aca7afcbeb338c7d80425caa91cb2280b96e970ec62f14e4b67c7c5aadb2b5f9c56d21b1eb651dcad7530883652ecdbd950e2ef9f4b3d7339904f986ed3e4bc69448d2"}, {0x55, 0x4e00, "86b36370346e00241b512b7613ec92d39ec4706cf1cf8119bfe7c07bd50aaf7f37890786eee91ee566d28a9853e32aebd306add05801ea61fcf1c70907b6d6061ea79e338cb1f2883d7eb3609def0f721f50df67e8"}, {0x45, 0x4e00, "a21b742baa191d5a2c1c2b3aaf7941ce0e2f8d525c7fcd020fa39e11d0745457e72f2b06368d83158f3e2f590d971acd08079df16094e5cb32c4f65574bbcfa132279c9a1d"}, {0x2, 0x4e00, "af11"}, {0xc6, 0x4e00, "e22e1ebb6903c71eef0d672a20262284ba6920d1e17b5890d4b5c4fee80907c2224c35735613cf21eb290d14abf02b9b83489433606084859aa7bf077b22f48fd380e7fff7178a376ea84f6fa732d032c09aed9e1d510d808392dc399ecca9a50cf39982288e3841f3e662b48a959027e0df51a72bd9d94fc721276460733c5f098c5d268cec563e35c68726aaa5b989d38bced054bdbc35d65a8175cd2f8d46d5a0de232ece2a924d1785862e3a04a28ccb4d8a61c8dfccca22dd1bb50668fcc417145c15b0"}, {0x6d, 0x4e00, "9db8e07dd2f7b44f0f55f80c1e723e7970d03f901cc91dfcf3e2b1344e8c49b0668176144db2f78ef5a155431387dd82a0a6204d65f1d021dc43105b5fb85a55ced04cf46503d6914e8b67c97b5c7f523a3e945e513efa0ead7f1f9c5c11fb0b18128e838945563398a36f188b"}, {0xd1, 0x4e00, "4b374430f4fdd54dbaa1bfe680b0bc38f53ebf77b64874e06de7463635293227c2558f3cc50332b0e53c6051f5439477ebb509dd7fb6a69f4031f3796bce7166a51134265c496199c03f39a00963acd7a3e1bb21ef140351ca473ed7bc5cff9ddb2e2e0ae8579020ddff4eb1700c09f4856f531dcb919b3427f6febe8219017af6ba9d3a29bedef7c39e4e5ab26a8e93490d858781bcabd79032205f7789faa53ece66f0dc1b219aed4bef495e117f1ea19792062b19eebbecb8ea2492675704b402c53f3b340ca901f23322f9fcd27f0d"}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc, &(0x7f00000019c0)={[{}, {}, {}]}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xe9, 0x3f, 0xd7, 0x20, 0x58b, 0x28, 0xf5e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xe, 0x2, 0x10, 0x8d}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 6.661461933s ago: executing program 0 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000d40)={{0x80000000, r2, 0x3, [0x2, 0x9]}, {0x80000000, 0x0, 0x0, [0x100, 0x10e67612]}, 0x4, [0x2398c000, 0x100]}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "3badf3cc94e235fc912848ea6af5b71abb219dd9bc21c6b94bc167a374a870694c23f42bfbadf0cc210afd4a4c0dac353eedbaa819f245fa2ba39b88b2bd9f8b7d0e60a96d164a725f0b05e199f479725c9ccbfa2066a7fd8c6e5e060eb51738c3540561efb5254ff0f8048c8429478a93bd1b2f1a4742bed8f6c5ac96121939bc453bafca99453f18bd32eab3a0e4aa9d11d7d25e2952e68fc6afa59d1e204eac2e303d2907080d6c23e39189aee814faffc8b69e014f9219a2aa73d25cc5405a2aaed0cf794a7eb389931fc54778c672da683c06b1cc103b22d99de9ed19ca72c2bebda2e5f34aaaee8be999efa3cb085efed51aa0"}, 0x101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, 0x0, &(0x7f0000000100)) openat$cgroup_int(r4, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x8ebb, 0x400, 0x20000a, 0x37}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.22233151s ago: executing program 0 (id=1008): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="35ea48fb7a564ff6011db9268f884f0d59a0ad3facbb161667974e8dd0ad022d09aa29f6a895a5a7251d52303a449a0d67f4ebac7720d49265dcb0cdfd0b3bdab96d3ceabbf816fb43b613dc1271a789e3f2a44074fc859ad8c59992d8b3ad4ef5c8fb1a6c5088bf2a9c1af10c95917a629d0a21790353998b1c36252ec04d9ab5808e5cc0aadaf5caff03806ced3308b8508e4af5e4c92e60def7d067ddce3bde7d6cd9cf822c61ef227d7149fe5b607be490a06f4a3a094db2768dc1cb71559d62430ba7acccd4006ac64c162b7315307bc03dec945e485bb25ffd700ae0", 0xdf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) creat(0x0, 0x13) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xd1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a3100000000540000000300000400000000000000000100ff0900030073797a310000000028000480080002400004000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000140000001100010000000000000000000100000a00"], 0x9c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) syz_usb_control_io$uac3(r0, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0x23, 0xb7, {0xb7, 0x7, "ecfc322b17252585b9484eaca1db062d381e1b082da66e1606857f1234cf525cb8900cf66fa80073ca9869ed3119a0db6e9f2f3c3c9830abdc977948d4ad3e313bbf42d45a1d9631e44753433930d48a04ef8dd726e24ee0c05d90c8938ff14f09f855faaeb12721820dde74583afd26d86c2acdf776a98df188e349f462142435c2234be7786fac27d8ba415f688d0cf768574990d42c2ebcb750dc3539dbbac3b532825897a397006e6e0dd1ffe22108b51b1b9d"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x0, 0xf, 0xd4, "3c5c8d3af496ae9dca1ab8302955b88a0e2ad813e5cc4907a7bb0e8203377ec84946e1a2e4af8c35bde00c1612d426432bb72353f6d3833154bd15b0dc59485b73f8edddf35fa7977cd572da33b447fef522dadd08fdb7ed2b39b03d38b3e74338702b0c4ccefa1f2d5a1155f26d46047c8a9cef99442135fc0a0b19af33533546bb80b5faf3cec64bef0c6f20837b6989a4b8bfd85a279c3d4e686c0c112b4a5a16ac87cab14917df914762544f5e66cd3d23f5dcf0888bf6856e57d6a19fa036862d8a6f11b4455e795c30b2dc641b2347ac4d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x81, 0x2, 'L '}, &(0x7f0000000640)={0x20, 0x82, 0x3, "345dbc"}, &(0x7f0000000680)={0x20, 0x83, 0x1, '\v'}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "969874"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "1166a8"}}) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, r7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.220226743s ago: executing program 1 (id=1015): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2c67726f75705f69643dbecba44fe78fc9853c58925177298b7f33db0bee4b666eda990817dee154d51c7b89849bcc2f7520344aaf306c4ea9b0d76374e54886c45e51c39b1154807ce864a4d5bdffd78fc9349463c9b8d42b8fcdb1358e00f55bc4e81df78d100c751b90237abe0d8a5ee7f64fd951c56fc6532a72c3047f6989d2c02234122b9b914d34924288418e9ff8ebad2b695320d94ba9f375053c5e29cf1ea68b0054911f48760710a5a058dc6ef4d43e88336d5f5816d7bcf1cc3903", @ANYRES64=r2], 0x3e, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24049040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x4}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x80802, 0xf7) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r6, r6, 0x0, 0x2000000000409) syz_usb_connect(0x2, 0x48, &(0x7f0000000100)=ANY=[], 0x0) r8 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000001000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206c213128c291d08b7c2"], 0x0) syz_usb_control_io$uac1(r8, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f14a418536cbd2456014aa5eb1dd6c841300c331af30c5a8851b4e4f1ca4eacb3f4f8f464cdfccd73c24fbd8fc5f91ca1252db7ef774a5f536754af5a50aa4d45fca1a805ded5f878e452f1df6d7e70d1bee93290fcb5fa458483d7b1ca4eb43452d35dfe219bfe8e2c3ea70264432992ec8dad4842f05f6810261a2b3d6510078d8233ff039249bed2e44d854affdf755079a6d27a9417d7f9ee0d9ac17a887d7055dc62c4d9f5f95ad06dc7459b06477267d97a7aa26000d3ea3770c639696c17ef663986ec865b82e6eb8aca8afe900000000000"]}, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000280)={0x41, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.281581539s ago: executing program 3 (id=1020): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x420}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 4.269033654s ago: executing program 3 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x7, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000680)="c3ef7f670000ec6783b4241544b500"/25, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000008}, 0x50) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x109a22) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 4.198745911s ago: executing program 3 (id=1022): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d31, 0xa2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x420}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 4.043935123s ago: executing program 3 (id=1023): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) sendmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0xfffffff7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)="fbc82da01f9e9c6eb1b18edd1125887528727c0f9105af0c94fb3acf2b7170a3e63f235a2475ff7728e0a87dc1aea7f680eaa718079610a014fe33847a95c333c4faa0ede695deb47d456232fd84720878af76a72de5479a182bd1a635badfb3a2241255a8a63362c23ad51bafd2", 0x6e}, {&(0x7f0000000300)="1e3e9d805435399292326c7a2a3741e0d0af7f45e69f07b3d53b56763286d17d6163554855bd02eeb9", 0x29}, {&(0x7f0000000340)="6acc09fb0553c28e63f8974f597286b8cd901e062203e01a6a5f02d3a6464709435867fa99b2897913eb62223fda1aacb9273ce1edbe47ff762fc07ca609e4524448ba11e1f3c3a74a9d01a911a077962959b0c017880415aa1077d6edc4890828", 0x61}, {&(0x7f00000003c0)="9e403bf3c72f248b13243c70231d51fdbd99960e579ac989e88a9a7eb8a1f7c48ee329daaecdb12df78e6a89a135", 0x2e}, {&(0x7f0000000400)="a0b22017b8d09e549020ef8b5ba0268056a9458052a7ce7dfd71a36ac3c88fd025d7aed26b9db43da3cb2e669f301686a420ffa03380925911517ec54114db885e2feeaa0d1c2dfa8ab093441dbc30aff2878966f34f1ec8e2d79b79399cc93b9d748b6acaeaf6ebd7667078b79084dfb888cbfcbd582b226e298976495482b1b3a615a7dbacc78aa27df56458bd5ce81abd8073aad4ab533d1081e97325bea40fd1dda82d57d5cd56b35e642466179e82fa35867436cfa99b7ab0af1153577adbce4d41919dbdef58d81750de739e7861555cab37bf0f8a678f1c8b7a16f20aa654723ec9421a7b", 0xe8}, {&(0x7f0000000500)="ca46b262a4b5423f7f3cb2cf189d4290975a1599cccb74d97c661e8c413bd38cf59b9872dff016fea051934c999a04756e57ad01403bf52cab3931849639e33c8bd8bf91bc7044754b401c4f431ab4f0b6dbc8a392963626aeadc87bcd293cc3ee682754ffe282a5ed2235fdd6784c5f3b3a9da7d7c7fa1d9907074e524c5d6d5facfe97692883096a1e473059", 0x8d}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="7ead3bae3d8a0337f35fd2a770ad975eec5d08525964610489ab16f8ae95f7bc72be6896f3caaede3e0d20ea527ccc4e8f13ef41a2320fa3e5cc67a7ac34438a75a55f786e7356af596f783d5bfc0001d95e326d4e9cd264a1e2af9a187bea1a873285040a36a58f0c60bc388c8858de05a9cb022a72bb098111efd820cd3b1c7db3c1e0ad2ae53fb8db57b098e6e90dde2c4b131f52a0517b3369b5893e656796c82aa18a943b8fc083207546b7540875399a7a80", 0xb5}, {&(0x7f0000001680)="f4475551a00d2cade7a45dcf432673da198aa2ccf3de4cebd41e7e8e4ffba26b8fdca01e1f352b468142fdcfb8ed56e5d3f022a9833bb6827d49db6e438b2dae5f8bce541110a6e0349c63d61c0efd0d78f353466572d7ffd0431c6774dc5c637f8aa606a540e6beeadec6996f61133facaf94d2c91dc4cdf183782f458a408bcb9c126477fc7c505a8743fd6ec27c4fea0ce97e6da7b3d3b2b409c6d3dfeac50b4b7db95a592fc86eea", 0xaa}, {&(0x7f0000001740)="97084644f2a15359b2d905ceffc8ec89c7f58dc0f01e02ff236bd168afa119bfa92a1e0f3e9cbcd40a85e6ab384cf0d7da6f856d1ddf848d58304d409a744c1d7b62", 0x42}], 0xa, &(0x7f0000001880)}, 0x20000890) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000480011012abd7000fedbdf250a000000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000014000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c814) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x34000a03}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200129bd7000fbdbdf25020000000800040007e8ff000500050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x14) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r1, 0x8, r4) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001900)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001a40)={'tunl0\x00', &(0x7f0000001940)={'ip_vti0\x00', r5, 0x8, 0x700, 0x7, 0x8, {{0x2a, 0x4, 0x3, 0x19, 0xa8, 0x65, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @end, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x5, 0x8, "16a0e4c5ad56"}, {0x7, 0x4, "9e01"}, {0x2, 0x2}, {0x7, 0xf, "6fec318ffc6a7c747fb55ce5e9"}, {0x5, 0x5, "220e40"}, {0x5, 0x8, "94f8ded34e23"}, {0x5, 0xe, "6ee90b9022e1fd23e6e46ac2"}]}, @rr={0x7, 0x13, 0xab, [@local, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0x34, 0x2a, 0x1, 0x7, [{@empty, 0x9851}, {@private=0xa010100, 0x8}, {@local, 0x97f0}, {@local, 0xfffff955}, {@private=0xa010101, 0x3}, {@private=0xa010101, 0x6}]}, @lsrr={0x83, 0x7, 0x7d, [@local]}, @ra={0x94, 0x4}]}}}}}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 3.940633328s ago: executing program 4 (id=1024): syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000000835121482400001020301090286000301034007080b0002010130010904000000010130000a2401062200ff0700001324030401010103050300000081000901000004240c030009"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x93bf01) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0xd336d000) mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socketpair(0x27, 0x3, 0xff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0x3, 0xfffffffa, &(0x7f0000000100)=""/157, &(0x7f0000000200)=0x9d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r5, {0xfff3, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0x5, 0x0, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x440}, 0x800) socket$inet(0x2, 0x3, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x6, 0x4, 0x3, 0x1, 0x0, 0xd4, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x6f5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x90, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x7f, 0x3, 0x8, 0x5}, 0xf9, &(0x7f0000000300)={0x5, 0xf, 0xf9, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x0, 0x0, 0x80, [0xff3f3f, 0xff0000, 0xf, 0xff3f00, 0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xfd, 0xf8}, @generic={0x9e, 0x10, 0x2, "cac40bee4f9e8eac26676dc6c2b209070d86add21105a48c9e28b5339485328d90141e173cc0d4a73aebde306cf662954e26fd163c3e0280a077f64d83411441c6369dca756db7a3bb944e030f27a4aa6e4bd3e5e3a526d041e0585be7be306658b4f5e45b0bef278584cf0049649b65e946ad2a5a62a63c335a70ba5e8e7c1fc9b1e8f8c86a50a3fb56da6c6fa970e1120e0f93d7c5e4622dff8b"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "6c0ca5e50258908fc173433ee1934fbc"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "16d11baecb4caca142d3bd8c45289d8b"}]}, 0x8, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2837}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44f}}, {0x89, &(0x7f00000004c0)=@string={0x89, 0x3, "991a9010618104e436ab4b5ca6aa43dd4fa6e21d50120977e8745c34ebc696aa993c1fdb78e641a50db83f7bb3200007e8972dcc336ebe572ab63ec27a2ec81ffb6c4c3c2bedb5e3fd2220e73fa4b03b9c47e9333b832998b1427bca0e43cf45d74be2ca0d9e5039bd5037ce53f7ac3450171f10bbfe7ca4c302818e83e1081fcc41feec1d5796"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x827}}, {0x4a, &(0x7f00000005c0)=@string={0x4a, 0x3, "9fc9cb1ed5f9ba430270c64702224755c16c483bd336499466935e0b5d9aebb45faf58b076742eb4b1a4c3eb4c964f3958f29085298aefec08527042839cc4a8a8fababce3d3ce4b"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x404}}]}) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@local, @empty, @multicast2}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x0, 0xfffffffc}}}}}, 0x0) 3.875744199s ago: executing program 3 (id=1025): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05240300000000005900000600010000e80b0904000001030002000921fd7f0096408ae528ecd48a893605d74bb93f0a70"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000009000000070000007f00000002000000"], &(0x7f00000002c0), 0x400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x12a8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1278, 0x2, [@TCA_CGROUP_ACT={0x1274, 0x1, [@m_gact={0x104, 0x16, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7, 0x80000000, 0xffffffffffffffff, 0x8, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd60, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x3, 0x20000000, 0x9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x9991, 0x5, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x4, 0x3, 0x8, 0x5f5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfad, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0x0, 0x8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x954b, 0x3, 0x2, 0x3, 0xc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x4, 0x4, 0x5}}]}, {0x17, 0x6, "4102bb631bafd80353fad2c4c81fe5f55ea6c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_tunnel_key={0xb4, 0x1b, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x6c, 0x6, "2ec073e1f6305b8e246a3a792ce14dc10386bb7c4e3abf7d68db91a3414d663103ad13262bc516aeb570b130a988dfc116e02fdd59daf6a63feb952245cb572a898bfacbb7765482a9283e9da7c28f074da925a45db127886bd98ef0a19338ea4b2e97cc82c51882"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xf64, 0x12, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x0, 0x0, 0x5, 0xfffffff9, 0x9}, 0x8, 0xf5, [{0xfff, 0x5, 0x9, 0x8, 0x2}]}, [{0x3, 0x1c7, 0x800, 0xb, 0x1, 0x1}, {0x7fff, 0x9, 0xfffffff7, 0x4, 0x7f, 0x6}, {0x3, 0x40, 0x600000, 0x10001, 0x8, 0x3}, {0x2, 0x6, 0x7, 0x6121, 0x7, 0xfff}, {0xffff, 0xda, 0x1ff, 0xfffeffff, 0x7385507c, 0x2}, {0x7, 0xae2, 0x3, 0xfffffffd, 0xfffffffa, 0x5}, {0x3, 0x1, 0x2, 0x0, 0x8, 0xe}, {0x9, 0x812, 0x6, 0x3, 0x6, 0x1}, {0xfffffffc, 0x1, 0x0, 0x6}, {0x1ffc, 0xfffffff7, 0x1, 0x2, 0x9}, {0x509, 0x9, 0x3, 0x2, 0x401, 0x80000001}, {0x10001, 0x8, 0x3, 0x0, 0x1dd, 0xd4000}, {0x7, 0xdb5e, 0x962, 0xf, 0x4, 0x7}, {0x6, 0x0, 0xfffffff3, 0x7, 0x5, 0x5}, {0x5721, 0x1, 0x0, 0xf, 0x9, 0x2}, {0x2c8800, 0x70d, 0x200, 0x0, 0x0, 0x7f}, {0x212, 0x8, 0x9, 0x7, 0x7, 0xa9e}, {0xfffffffd, 0x6, 0x80000001, 0xc4e, 0x6, 0x10}, {0x4, 0x8, 0x4, 0xffff, 0x2, 0x1}, {0x5, 0x2, 0x3, 0x6, 0x2, 0x401}, {0x2, 0x3, 0x80, 0x5, 0xfffffff7, 0x60}, {0x3, 0xfff, 0x5, 0xfffffff4, 0x1, 0xff}, {0xfffffff7, 0x3, 0xfff, 0xc222, 0x7, 0x10000}, {0x8, 0x5, 0x1, 0x3, 0x80000001, 0x7}, {0x80, 0x4, 0x7, 0x0, 0x7, 0x2}, {0x22, 0x5, 0x0, 0x9, 0x3, 0x3ff}, {0x3, 0x10001, 0x3e23, 0x7, 0x2, 0x8001}, {0x2, 0x1ff, 0x4, 0x0, 0x8, 0x8}, {0x10000, 0x6a, 0x1, 0x6, 0x800, 0x80000001}, {0xffffffed, 0x4, 0xfffffe01, 0xe, 0x7, 0x3b7}, {0x1ff, 0x401, 0x1, 0x5, 0x9, 0x400}, {0x1, 0x5, 0x613e, 0x1ff, 0xb35, 0x1}, {0x4, 0x64, 0x1, 0x1, 0xff, 0x2}, {0x1, 0x0, 0x4, 0x46, 0x66ae, 0x2}, {0x39a2, 0x2acc, 0xfffff001, 0x80000000, 0x194, 0xc3}, {0x400, 0x8, 0x800, 0xfff, 0xad, 0xf}, {0xde, 0x80000001, 0x4, 0x8001, 0x8, 0x7}, {0x3, 0x4, 0x0, 0x80000000, 0x395, 0x80}, {0x0, 0x2, 0x80, 0xff, 0x9, 0x4}, {0x2, 0x8, 0x39, 0x4, 0x401, 0x6}, {0x2, 0x3, 0x5, 0x8cde, 0x573, 0x80}, {0x7, 0xfffffffa, 0x7, 0xc7, 0xff, 0x3}, {0x5, 0x7e, 0x0, 0x6, 0x0, 0xd}, {0x200, 0x3, 0x6, 0x4, 0x7fffffff, 0x5}, {0x2d, 0x3ff, 0x4, 0x3, 0x4, 0x2}, {0x7ff, 0x0, 0x80000000, 0x1, 0x5, 0xc243}, {0x4, 0xfffffff3, 0x3, 0x6, 0xfffffffa, 0xffff}, {0x0, 0xdac9, 0x0, 0x2, 0x3, 0x74a1}, {0x3, 0x7, 0x2, 0x7a, 0x0, 0xff}, {0x6, 0x8, 0x100, 0x101, 0x320, 0x2}, {0x2, 0x200, 0xe7e, 0x100, 0xffff0001, 0x8393}, {0xc, 0xfffffffe, 0x4, 0x7fffffff, 0x9, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x3, 0xd}, {0xf, 0x4d9, 0x0, 0x2, 0xfffffffb, 0x59d}, {0x2, 0x4, 0x8, 0x2, 0x9, 0x2}, {0x7, 0x8, 0xf5c, 0x0, 0x2, 0x4}, {0x3ff, 0x8000, 0x4f, 0x7, 0x1, 0x5}, {0x7, 0xfff, 0x2, 0x200, 0x8, 0x2}, {0xa3df, 0x10001, 0x7, 0x5, 0x2, 0x3}, {0xe513, 0xc, 0x4, 0x9, 0xffffffff, 0x401}, {0xc9, 0x9, 0x1, 0x3, 0xfffffffd, 0x7}, {0x7, 0x10000, 0x29, 0x1, 0x3, 0x7}, {0x3, 0x9, 0x7, 0xfffffff8, 0x2, 0x1}, {0x2f4, 0x2, 0x7, 0x9, 0x4, 0x1}, {0x10001, 0x0, 0x9, 0x1, 0x400, 0xff}, {0x1ff, 0x8, 0x7ff, 0x1ff, 0x71e26a3a, 0x9}, {0x5, 0x2, 0xafc, 0x8001, 0x7, 0x5}, {0x9, 0x5, 0x7, 0x7263, 0x3, 0x5}, {0x5, 0x3ff, 0x9, 0x400, 0x3, 0x4}, {0x2, 0xc, 0xd, 0x4, 0x2e57, 0xfa}, {0x3, 0x1, 0xfffffe00, 0x1, 0x7, 0x6}, {0x40, 0x5, 0x5, 0x8, 0x6, 0xfffffff9}, {0x9, 0x7fff, 0x57888e72, 0x3, 0x8}, {0x7f, 0xbaa, 0x9, 0x678f, 0x4, 0xcce}, {0xfffff46a, 0x2, 0x401, 0xf094, 0x4, 0x7}, {0x100, 0x7, 0xffff, 0xcf4f, 0x7, 0x8}, {0x7ff, 0x8001, 0x40, 0x5, 0x1, 0x4}, {0x80000000, 0x4, 0xffffa800, 0x6, 0x74, 0x5}, {0xffff, 0x4f, 0x2, 0x3, 0x3, 0x5}, {0x9, 0xe, 0x8, 0xd0c1, 0x8000, 0x3ff}, {0x7, 0x6, 0x6, 0x3, 0x700, 0x100}, {0x800, 0xad, 0x4, 0x80b, 0x2, 0x6}, {0x60c, 0x7f, 0xb, 0x8, 0xd2bd, 0x6}, {0x8, 0x4, 0x7b35, 0xb7, 0x7, 0x4}, {0xf3, 0x2, 0x9, 0x6, 0x90, 0x100}, {0x2, 0xb57, 0x1, 0xfffffffa, 0x9, 0x7}, {0x7, 0x7ff, 0x1, 0x7, 0x80a0, 0x10001}, {0x7fff, 0x4, 0x3, 0x601e, 0x2, 0x1}, {0x2, 0x9c, 0x7fffffff, 0x6, 0x10, 0x81}, {0x0, 0xc, 0x4be, 0x18f0c2a2, 0x10000, 0x8}, {0x7fffffff, 0x7ff, 0xa, 0x340, 0xae8, 0x7f}, {0xfffffffe, 0x8ab2, 0x8, 0x2, 0x1, 0x5f8}, {0x5, 0xfffffffd, 0x7, 0xffff, 0x1, 0x24}, {0x9, 0x3, 0x8790, 0xa8, 0x7, 0x4}, {0x1be4, 0x2, 0x3, 0x32, 0x41d, 0xc0}, {0x6, 0x8, 0xffa7, 0x7, 0xc104, 0x6dfd374b}, {0x9, 0x4, 0x81, 0x200, 0x6, 0x5}, {0xe638, 0x1, 0x9, 0xf, 0x5, 0x9}, {0x6, 0xfffffff9, 0xb54, 0x0, 0x80000000, 0x9ae4}, {0xd, 0x2df8, 0x6, 0xce, 0x7, 0xfa}, {0x400, 0x0, 0x9, 0x5, 0x0, 0x3}, {0x3ff, 0x9, 0x0, 0x3, 0x2, 0x9}, {0x14ae62c8, 0x1, 0x22, 0xffffffff, 0xc0, 0x5b58}, {0xfffff231, 0x78, 0x8, 0x8000, 0x80000001, 0x80000001}, {0x36, 0x3, 0x7f, 0x3, 0x6, 0x7}, {0x1, 0x3aba93b5, 0x1, 0xffffffff, 0x3, 0x5}, {0x7, 0xd, 0xfffffffc, 0x4, 0x8, 0x2}, {0xfffffff8, 0x8001, 0x10001, 0x5, 0xff, 0x9}, {0x1ff, 0xa2, 0xe2f, 0x401, 0x7, 0x20000000}, {0x3, 0x3, 0xfffffff9, 0x7, 0xfffffff7, 0x6}, {0x3b12, 0x8, 0x0, 0xf8, 0x3, 0x7}, {0x9, 0x1, 0x80000001, 0x7ff, 0x8d6, 0x6}, {0x9, 0x0, 0x2, 0x8, 0x3, 0x3f81}, {0x1, 0x72, 0x3, 0x300, 0x2, 0x5}, {0xb, 0xe4, 0x0, 0x7fffffff, 0x10001, 0x7}, {0xfffffff7, 0x8, 0x7, 0x9, 0xe61a, 0x1}, {0x8, 0x7, 0xf, 0x0, 0x212a}, {0x7, 0x0, 0x21, 0x6, 0x8, 0x8}, {0x8, 0x5, 0xb, 0xfffffffc, 0xc965d33, 0xfffffff9}, {0x3, 0x9, 0x0, 0x53d, 0x5, 0x37}, {0x10000, 0x6, 0x40, 0xfe1, 0x9, 0x6}, {0x3, 0x5, 0x2, 0x8, 0x47859b75, 0x3}, {0x4, 0x4, 0x7, 0x8, 0x9, 0x5}, {0x9, 0x15f9, 0x3, 0x2, 0x9, 0x8}, {0x9, 0xbf2, 0x4, 0x6b6f, 0x7, 0x1ff}, {0x2, 0x1, 0x993d, 0x0, 0x0, 0xfffff0c8}, {0x7, 0x758, 0x6, 0xca, 0xf5dc, 0x2}, {0x7, 0x7d, 0xba8, 0xa5dd, 0x1, 0x1}], [{0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x1, 0x3}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0xc6b674c1d8f382f9, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0xb2006bf72eafb894}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x47ef0285f0954f4f}, {0x5}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0xdc1bd2886fcfadac, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x80, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x6e, 0x1, 0x4, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff, 0x10, 0x6, 0xfffffffb, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x9, 0x6, "fd4131f1be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xd4, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4315, 0x6, 0x8, 0x8}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x4, 0x40, 0x4}, 0x3}}]}, {0x58, 0x6, "e22d022136243bb180b2aa9cf8749a2a2d3bb58424f2b16c6ff3dde8610f5f413ef2fdc2eb0beed96b4fe86146241a43c8fe1faaa73437402ffef9014c2c73449f956bcf98d7f14a638277164f144069247d1bc1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r7, &(0x7f0000000000)=""/35, 0x23) recvmsg$qrtr(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2000}, 0x1c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x20, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x10000, 0x20000000, 0xffffffff, 0x3}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x80}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.297697821s ago: executing program 2 (id=1026): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x1c, &(0x7f0000002d40), &(0x7f0000000180)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007", 0x29}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0x3, 0x3118, 0x3, 0xe, 0xfffffffe, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) userfaultfd(0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) 2.578031068s ago: executing program 0 (id=1027): madvise(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x20) mlock(&(0x7f0000fe9000/0x3000)=nil, 0x3000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) mremap(&(0x7f0000c58000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x7, &(0x7f0000000000)=0x103) 2.431607316s ago: executing program 4 (id=1028): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000004, 0x7}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) unshare(0x22020400) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0xe, 0x3) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000280)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 2.135026116s ago: executing program 4 (id=1029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x59) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400e800}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="66b9800000c00f326635000800000f30b8f7078ee066b9800000c00f326635000800000f300f1ab06b23640f177e1ff30f7ebead640f017f0b3e0f78f00f009a1f630f06", 0x44}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = getpid() process_vm_readv(r8, &(0x7f0000000700), 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000600)=""/249, 0xf9}], 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100), 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a440000000010109024400010100000009040000120206"], 0x0) 1.880430247s ago: executing program 1 (id=1030): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@generic="86078716c65640d224653afd83aaed4896f212e89f2cb487cfb11fa9cf9c957fc30542246b"]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 594.931807ms ago: executing program 2 (id=1031): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x420}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 594.306647ms ago: executing program 2 (id=1032): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd514000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r4, 0x200, 0x70bd26, 0x3, {{}, {}, {0x18, 0x17, {0x5, 0x800003, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x400c004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r1) r7 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x2, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) getsockname$packet(r8, 0x0, &(0x7f0000000100)) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 593.92243ms ago: executing program 0 (id=1033): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d31, 0xa2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x420}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 593.692733ms ago: executing program 0 (id=1034): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x840) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0815dbcb5f31a3c001280110001006272b1eb67655f736c617665000000002400058005001c0000000000050006000100000005000a000100000005001e0000000000140003006272696467655f736c6176655f30"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) pread64(r2, &(0x7f0000000080)=""/220, 0xdc, 0x5) lseek(r2, 0x7ff, 0x1) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002540)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x794, 0xdc9325a76811364e, 0x0, 0x0}], 0x2}) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x48854) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000b83b004820bea1c1dafde31c361c8787eb00379af02539edfda41d2982ff90fa68ced9139cb692a9d9a520f810095a16fc50dc1798c831cf08e2f53fcce7df53cd86274d1aea8bebef5a07cf94178f7af90439a1a201ee5a8e36c2cec8217de08ef302f10552613dcba6311ce1a8ec151707d4098b99307990343be0e459703dcf02758b8848ca06281401e1d737d50f1d21bccdd0a7adedf01267ff7372b416c4912fd88e245a454bc17a432af0719b77d6c0abe14673975ac1309227600e7af551df2131054ab6b585158003e686d80c5fdd282f"], 0x6) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 592.955409ms ago: executing program 2 (id=1035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x44000) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x1000000) 592.53692ms ago: executing program 3 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) (async) timer_create(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000440)=""/84) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6400000006b3930400000000000000000a0000010900010073797a310000000038000480340001800c0001007061796c6f616400240002800800014000000009feff02400000004f08000440000000a508000240000000020900020073797a3200000000140000001100010000000000000000000500000a"], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000029004319473ee5db6c5d95520701"], 0x1c}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000700000000000000000000fe6efcde8a00", @ANYRES32=0x0, @ANYBLOB="000000051400030000f8ffff08000000190a0000050000000a0002000180c20000000000140003000d00000007000000070000000900000008000a000700000008000f0001000000"], 0x60}}, 0x2000c0c4) 531.920035ms ago: executing program 4 (id=1037): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, 0x0, 0x0, 0xfe44, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) pselect6(0x40, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x7fff, 0x1, 0xc, 0xc, 0x5}, 0x0, &(0x7f0000000100)={0x52, 0x7f, 0x800, 0x9, 0x9, 0x2, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="fc", 0x1}, {0x0}], 0x2, 0xfffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) 519.067081ms ago: executing program 0 (id=1038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x400}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6708) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000640)={0x14, &(0x7f0000000480)={0x40, 0xc, 0xdb, {0xdb, 0x4, "0ea1f4df485ed60c287bcba6e3603115813680cccbf18a5ca7be822b2709d5cb3664d0cfac6ca9ae943339bca70e7a31c9ab454c9c30d143c33a56f5beff69b1f39daf1fd62f0a18a44520a6e67eefa9da5bd33aa5d91179745d777751f72793fc25fb7c0738f241273739c58e0ee6ee09549b40c00d14cbc2f61221f6c158a5079aa9663ad663ccc8962493480079bcb788d852c1bb869d9aacaddac4f4039bf59c5b838bfe499652a6647e0a0b1dacb3d4e949dff0873291a1ef5de7648148fed38f64dfd39d3e6133ed2248b3b11d5b70aaacf74c5e5a92"}}, &(0x7f0000000580)={0x0, 0x3, 0x34, @string={0x34, 0x3, "9ef7a5f52100cc48fc0b7f54e5682eb2a54dd2f60d3db9b8e3aa32d34fee370f8611fff23a4ea95f2f5417a0f79a36cfa102"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x20, 0x0, 0x28, "4023e0e200a6060307fa1cc33f2381c4ef32299fe3cb24b6d67c31d6850e7ce770134922aa6406c0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x1, "0f"}, &(0x7f0000000780)={0x20, 0x82, 0x1, "e1"}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20830200000044e2f6293ed29a382478c6c7d1fdbe8ac1"], &(0x7f0000000800)={0x20, 0x84, 0x4, "c56e7b03"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "ee1cd9"}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="8523020000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r7], 0x48}}, 0x4000010) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x684041) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r8, 0x40026f33, &(0x7f0000000780)) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r8, 0x40026f34, &(0x7f0000000040)=0x1) r9 = socket$kcm(0xa, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x10, 0x0, 0x1300) syz_usb_control_io$printer(r4, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @dev}, &(0x7f0000000380)=0xc) syz_usb_control_io$rtl8150(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x5, 0xa, {0xa, 0x23, "f440ec9fcdb12b5c"}}, &(0x7f0000000080)={0x0, 0x3, 0x27, @string={0x27, 0x3, "86373c0992669865fe99c82954d4ad6653e7290f8828f1db432ac805cef0e1b8c074db4639"}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x14, 0xba, "554c15c820f4170eeb7f43e3419ff233d52a491797e876a487c646a9a63235dc7230d85eeee242b9bec22a4dc5606194e75e3ca55416afdf83b966e5b9a2a6a4216d7e2a60a7ad06f024ff0910a43f2d4fab9c7cd61433a71625fad0195d79d1e130742a43854dcb2b566a3c9e5a1e29f2af95df0ce8e962d14ed03a99eb6b82a88c7561a78683e8c4b73f71e8c7332b09f4d9264ba3f581a9d65d7d76b3d49f56421df7513a65cffc164ff8744670344e7c5d8aedaf95c6b46a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0xc0, 0x5, 0x6, "b7c56e295233"}, &(0x7f00000002c0)}) 454.76313ms ago: executing program 2 (id=1039): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000004, 0x7}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) unshare(0x22020400) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0xe, 0x3) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000280)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600), &(0x7f0000000040)=0x20) 0s ago: executing program 2 (id=1040): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8004, 0xfffe, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = syz_open_dev$video(0x0, 0x0, 0x82341) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0xdf9f, 0x12) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x140040d8, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7fff, 0xfff, 0xfffffffb, 0x5, 0x2}, &(0x7f0000000040)=0x98) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000e000207368a2103ea5648d9000003002807"], 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x70, 0x101, 0x0, 0x595f314c, 0x19, "00e47903e5951edc064af900"}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000001c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000540)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000600)={&(0x7f0000000580)=[0x0, 0x0, r5, r6, r7, r8, r9, r10, r11], 0x9}) kernel console output (not intermixed with test programs): evice found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 227.000783][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.017459][ T8414] netlink: 44 bytes leftover after parsing attributes in process `syz.3.667'. [ 227.032367][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.667'. [ 227.042699][ T803] usb 1-1: config 0 descriptor?? [ 227.197520][ T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 227.231330][ T8402] usb usb9: usbfs: process 8402 (syz.1.662) did not claim interface 0 before use [ 227.245262][ T9] chicony 0003:04F2:1421.0007: unknown main item tag 0x3 [ 227.252972][ T9] chicony 0003:04F2:1421.0007: report_id 2141495278 is invalid [ 227.258424][ T803] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 227.260814][ T9] chicony 0003:04F2:1421.0007: item 0 4 1 8 parsing failed [ 227.276295][ T9] chicony 0003:04F2:1421.0007: Chicony hid parse failed: -22 [ 227.285090][ T9] chicony 0003:04F2:1421.0007: probe with driver chicony failed with error -22 [ 227.287439][ T5887] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 227.307520][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 227.360931][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.372101][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.381935][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.395781][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.406217][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.416927][ T10] usb 3-1: config 0 descriptor?? [ 227.447619][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 227.454345][ T9] usb 2-1: USB disconnect, device number 32 [ 227.459333][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 227.465667][ T5887] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 227.484322][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 227.498410][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 227.498702][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.523975][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 227.537962][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.555019][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.565076][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.579530][ T5887] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.590925][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 227.607353][ T5887] usb 4-1: Manufacturer: syz [ 227.613971][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.632122][ T5887] usb 4-1: config 0 descriptor?? [ 227.641617][ T803] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 227.649491][ T8414] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 227.650505][ T803] [drm] Initialized udl on minor 2 [ 227.664428][ T24] usb 5-1: config 0 descriptor?? [ 227.816063][ T803] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.834945][ T803] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 227.848502][ T10] plantronics 0003:047F:FFFF.0008: invalid report_count -1914867670 [ 227.860984][ T5887] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.875545][ T10] plantronics 0003:047F:FFFF.0008: item 0 4 1 9 parsing failed [ 227.879363][ T803] usb 1-1: USB disconnect, device number 32 [ 227.891024][ T10] plantronics 0003:047F:FFFF.0008: parse failed [ 227.895951][ T5887] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 227.911484][ T5825] usb 4-1: USB disconnect, device number 39 [ 227.920907][ T10] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 227.965787][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 227.982830][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 228.027579][ T24] usb 5-1: USB disconnect, device number 47 [ 228.055419][ T10] usb 3-1: USB disconnect, device number 35 [ 228.399097][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 228.467377][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 228.558994][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 228.565673][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 228.574392][ T9] usb 2-1: config 0 has no interface number 0 [ 228.580930][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 228.593776][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 228.613704][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.619891][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 228.623509][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 228.641956][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 228.642295][ T9] usb 2-1: Product: syz [ 228.658205][ T24] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.661812][ T9] usb 2-1: Manufacturer: syz [ 228.675034][ T9] usb 2-1: SerialNumber: syz [ 228.676897][ T24] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.690566][ T24] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 228.704150][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.711177][ T9] usb 2-1: config 0 descriptor?? [ 228.711925][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 228.717912][ T8425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.734019][ T8436] loop7: detected capacity change from 0 to 7 [ 228.746639][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.756271][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.770366][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.779719][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.794188][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.804037][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.813342][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.824261][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.834352][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.843685][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.845182][ T24] usb 5-1: config 0 descriptor?? [ 228.852965][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.867444][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.876626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.886397][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.895639][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.903732][ T8436] ldm_validate_partition_table(): Disk read failed. [ 228.911682][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.920967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.921304][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 228.943606][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.944221][ T8423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.952985][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.967854][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.977109][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.989892][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.997834][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 228.999262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.021649][ T8436] Dev loop7: unable to read RDB block 0 [ 229.031532][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.031949][ T8436] loop7: unable to read partition table [ 229.051988][ T8436] loop7: partition table beyond EOD, truncated [ 229.058631][ T8436] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 229.074918][ T9] asix 2-1:0.188: probe with driver asix failed with error -61 [ 229.089455][ T10] usb 1-1: Product: syz [ 229.098978][ T10] usb 1-1: Manufacturer: syz [ 229.121629][ T10] usb 1-1: SerialNumber: syz [ 229.140815][ T10] usb 1-1: config 0 descriptor?? [ 229.161131][ T10] usb 1-1: selecting invalid altsetting 0 [ 229.342553][ T9] usb 2-1: USB disconnect, device number 33 [ 229.381742][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 229.400443][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.415227][ T5887] usb 1-1: USB disconnect, device number 33 [ 229.428872][ T24] usb 5-1: USB disconnect, device number 48 [ 229.436282][ T8439] syzkaller0: entered promiscuous mode [ 229.450442][ T8439] syzkaller0: entered allmulticast mode [ 229.488649][ T8439] tipc: Enabled bearer , priority 0 [ 229.528879][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.554680][ T8441] tipc: Resetting bearer [ 229.613575][ T8438] tipc: Resetting bearer [ 229.644323][ T8438] tipc: Disabling bearer [ 230.149774][ T8458] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 230.678086][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 230.797983][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 230.857400][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 230.874629][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.904675][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.931037][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 230.952177][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.960366][ T10] usb 2-1: device descriptor read/64, error -71 [ 230.977899][ T9] usb 3-1: config 0 descriptor?? [ 231.207445][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 231.257100][ T29] audit: type=1326 audit(1776546686.012:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.279994][ T29] audit: type=1326 audit(1776546686.012:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.311921][ T29] audit: type=1326 audit(1776546686.042:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.336768][ T29] audit: type=1326 audit(1776546686.042:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.366998][ T29] audit: type=1326 audit(1776546686.042:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.393605][ T29] audit: type=1326 audit(1776546686.062:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.397472][ T10] usb 2-1: device descriptor read/64, error -71 [ 231.424653][ T29] audit: type=1326 audit(1776546686.062:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.443224][ T9] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 231.460090][ T9] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 231.473545][ T29] audit: type=1326 audit(1776546686.062:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.500207][ T29] audit: type=1326 audit(1776546686.062:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.523751][ T29] audit: type=1326 audit(1776546686.062:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 231.558012][ T5887] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 231.570377][ T10] usb usb2-port1: attempt power cycle [ 231.624233][ T9] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 231.688613][ T5887] usb 5-1: device descriptor read/64, error -71 [ 231.834135][ T9] ft260 0003:0403:6030.0009: failed to retrieve system status [ 231.842125][ T9] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -5 [ 231.917441][ T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 231.937987][ T5887] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 231.939074][ T10] usb 2-1: device descriptor read/8, error -71 [ 232.037498][ T803] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 232.087368][ T5887] usb 5-1: device descriptor read/64, error -71 [ 232.187332][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 232.194047][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.204733][ T803] usb 1-1: config 0 has no interfaces? [ 232.207453][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 232.211994][ T5887] usb usb5-port1: attempt power cycle [ 232.226216][ T803] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 232.236260][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.244345][ T803] usb 1-1: Product: syz [ 232.248112][ T10] usb 2-1: device descriptor read/8, error -71 [ 232.248780][ T803] usb 1-1: Manufacturer: syz [ 232.259527][ T803] usb 1-1: SerialNumber: syz [ 232.268025][ T803] usb 1-1: config 0 descriptor?? [ 232.358233][ T10] usb usb2-port1: unable to enumerate USB device [ 232.567368][ T5887] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 232.588073][ T5887] usb 5-1: device descriptor read/8, error -71 [ 232.827697][ T5887] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 232.859082][ T5887] usb 5-1: device descriptor read/8, error -71 [ 232.977867][ T5887] usb usb5-port1: unable to enumerate USB device [ 233.387375][ T5887] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 233.449934][ T24] usb 3-1: USB disconnect, device number 36 [ 233.537409][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 233.555959][ T5887] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.582720][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.598666][ T5887] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 233.610125][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.702'. [ 233.620434][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.635840][ T5887] usb 4-1: config 0 descriptor?? [ 234.091103][ T5887] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 234.111969][ T803] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 234.114518][ T8538] nftables ruleset with unbound set [ 234.140525][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 234.150703][ T8538] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 234.160930][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'. [ 234.250124][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 234.280939][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 234.308459][ T803] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.333911][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.352286][ T803] usb 3-1: Product: syz [ 234.356616][ T803] usb 3-1: Manufacturer: syz [ 234.363543][ T803] usb 3-1: SerialNumber: syz [ 234.381017][ T803] r8152-cfgselector 3-1: Unknown version 0x0000 [ 234.400551][ T803] r8152-cfgselector 3-1: config 0 descriptor?? [ 234.525202][ T8521] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 234.535414][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 234.558315][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.585997][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.610612][ T8551] program syz.1.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.639585][ T9] usb 4-1: USB disconnect, device number 40 [ 234.805351][ T803] usb 1-1: USB disconnect, device number 34 [ 234.972643][ T8550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.339016][ T803] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 236.026093][ T8581] random: crng reseeded on system resumption [ 236.067466][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 236.078383][ T803] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 236.219191][ T24] usb 2-1: config 0 has an invalid interface number: 206 but max is 0 [ 236.227769][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 236.234955][ T24] usb 2-1: config 0 has no interface number 0 [ 236.243686][ T803] usb 1-1: config index 0 descriptor too short (expected 96, got 85) [ 236.257085][ T803] usb 1-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 236.269209][ T24] usb 2-1: config 0 interface 206 has no altsetting 0 [ 236.285103][ T24] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=80.21 [ 236.298494][ T803] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 236.317296][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.334345][ T8585] xt_hashlimit: size too large, truncated to 1048576 [ 236.342969][ T24] usb 2-1: Product: syz [ 236.351738][ T24] usb 2-1: Manufacturer: syz [ 236.368374][ T24] usb 2-1: SerialNumber: syz [ 236.375311][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.403164][ T24] usb 2-1: config 0 descriptor?? [ 236.414937][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 236.438447][ T803] usb 1-1: Product: syz [ 236.449628][ T803] usb 1-1: Manufacturer: syz [ 236.460254][ T803] usb 1-1: SerialNumber: syz [ 236.645513][ T24] usb 2-1: USB disconnect, device number 38 [ 236.689553][ T803] usb 1-1: USB disconnect, device number 35 [ 236.723115][ T6316] udevd[6316]: setting owner of /dev/bus/usb/001/035 to uid=0, gid=0 failed: No such file or directory [ 237.177441][ T9] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 237.341788][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.377992][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.397151][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 237.427604][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.449619][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 237.463471][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.498721][ T8590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.513128][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 237.548614][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 237.590849][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 237.606285][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 237.641427][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 237.669688][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 237.679556][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.691147][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 237.697121][ T10] usb 4-1: config 0 has no interfaces? [ 237.708182][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 237.719749][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.730882][ T10] usb 4-1: Product: syz [ 237.735094][ T10] usb 4-1: Manufacturer: syz [ 237.752480][ T10] usb 4-1: SerialNumber: syz [ 237.765525][ T10] usb 4-1: config 0 descriptor?? [ 237.835354][ T8608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.853474][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 237.865372][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 237.872156][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 237.879323][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 237.885916][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 237.892322][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 237.898962][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 237.905167][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 237.936823][ T8596] geneve0: entered allmulticast mode [ 238.037945][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.057460][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 238.070664][ T24] usb 2-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 238.090041][ T24] usb 2-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 238.099555][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.119215][ T24] usb 2-1: config 157 has no interface number 0 [ 238.132703][ T24] usb 2-1: config 157 interface 224 has no altsetting 0 [ 238.163922][ T24] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 238.165502][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.179628][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.186566][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.193213][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.200181][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.206783][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.213479][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.220080][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.226523][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.233124][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.239714][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.246331][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.253169][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 238.259787][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 238.315196][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.377077][ T24] usb 2-1: Product: syz [ 238.388453][ T24] usb 2-1: Manufacturer: syz [ 238.400861][ T24] usb 2-1: SerialNumber: syz [ 238.587995][ T8618] netlink: 'syz.0.727': attribute type 11 has an invalid length. [ 238.689550][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.708224][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.741320][ T24] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 238.943249][ T8621] sctp: [Deprecated]: syz.0.728 (pid 8621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.943249][ T8621] Use struct sctp_sack_info instead [ 239.470271][ T24] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 239.667418][ T5895] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 239.807641][ T5895] usb 1-1: device descriptor read/64, error -71 [ 239.866876][ T24] usb 2-1: failed to restore interface 224 altsetting 169 (error=-71) [ 239.899997][ T24] ueagle-atm 2-1:157.224: usbatm_usb_probe: bind failed: -19! [ 239.924950][ T24] usb 2-1: USB disconnect, device number 39 [ 239.955871][ T5887] usb 5-1: USB disconnect, device number 53 [ 240.067344][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 240.092410][ T8631] xt_policy: too many policy elements [ 240.101339][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 240.125311][ T8631] xt_policy: too many policy elements [ 240.193262][ T24] usb 4-1: USB disconnect, device number 41 [ 240.207357][ T5895] usb 1-1: device descriptor read/64, error -71 [ 240.318529][ T5895] usb usb1-port1: attempt power cycle [ 240.417937][ T10] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 240.589483][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.616492][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.635634][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.649805][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.661629][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.667835][ T5895] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 240.676465][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.692080][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.703303][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.717429][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.729464][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.742882][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.750704][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.770075][ T5895] usb 1-1: device descriptor read/8, error -71 [ 240.774818][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.792374][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.807644][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.824702][ T10] usb 5-1: string descriptor 0 read error: -22 [ 240.831463][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.842201][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.856717][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 241.027945][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 241.050491][ T5895] usb 1-1: device descriptor read/8, error -71 [ 241.179045][ T5895] usb usb1-port1: unable to enumerate USB device [ 241.188622][ T8659] netlink: 'syz.4.732': attribute type 64 has an invalid length. [ 241.233498][ T8659] netlink: 5 bytes leftover after parsing attributes in process `syz.4.732'. [ 241.354530][ T8662] fuse: Bad value for 'fd' [ 241.477858][ T5895] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 241.571692][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 241.617407][ T5895] usb 2-1: device descriptor read/64, error -71 [ 241.868645][ T5895] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 242.007426][ T5895] usb 2-1: device descriptor read/64, error -71 [ 242.127718][ T5895] usb usb2-port1: attempt power cycle [ 242.444541][ T8627] delete_channel: no stack [ 242.479073][ T5895] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 242.520125][ T5895] usb 2-1: device descriptor read/8, error -71 [ 242.777402][ T5895] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 242.818268][ T5895] usb 2-1: device descriptor read/8, error -71 [ 242.847350][ T803] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 242.927455][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 242.938338][ T5895] usb usb2-port1: unable to enumerate USB device [ 243.018583][ T803] usb 1-1: Using ep0 maxpacket: 16 [ 243.033870][ T803] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.063403][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.086257][ T803] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.095672][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.104121][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 243.111924][ T803] usb 1-1: Product: syz [ 243.117120][ T803] usb 1-1: Manufacturer: syz [ 243.130545][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.150673][ T24] usb 3-1: config 0 has no interfaces? [ 243.159061][ T803] usb 1-1: SerialNumber: syz [ 243.166133][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.180238][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.190746][ T803] usb 1-1: config 0 descriptor?? [ 243.196418][ T24] usb 3-1: Product: syz [ 243.202300][ T24] usb 3-1: Manufacturer: syz [ 243.207100][ T24] usb 3-1: SerialNumber: syz [ 243.215666][ T803] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.224801][ T10] usb 5-1: USB disconnect, device number 54 [ 243.239525][ T803] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 243.274309][ T24] usb 3-1: config 0 descriptor?? [ 243.284528][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 243.490550][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 243.599575][ T8685] syz.3.744 (8685): drop_caches: 2 [ 243.670193][ T803] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 243.693948][ T803] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 243.714659][ T803] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 243.730161][ T803] em28xx 1-1:0.0: No AC97 audio processor [ 243.753221][ T803] usb 1-1: USB disconnect, device number 40 [ 243.773802][ T803] em28xx 1-1:0.0: Disconnecting em28xx [ 243.812600][ T803] em28xx 1-1:0.0: Freeing device [ 243.864934][ T8704] netlink: 676 bytes leftover after parsing attributes in process `syz.2.743'. [ 243.874281][ T8703] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.140523][ T803] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 244.167462][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 244.312117][ T803] usb 1-1: string descriptor 0 read error: -22 [ 244.333439][ T803] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 244.349466][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 244.362897][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.364285][ T10] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 244.391145][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.419068][ T803] usb 1-1: config 0 descriptor?? [ 244.421763][ T10] usb 5-1: config 0 has no interface number 0 [ 244.444307][ T803] usbtest 1-1:0.0: FX2 device [ 244.458950][ T803] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 244.483105][ T10] usb 5-1: config 0 interface 113 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 244.513610][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 244.523262][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.532947][ T10] usb 5-1: Product: syz [ 244.538950][ T10] usb 5-1: Manufacturer: syz [ 244.543832][ T10] usb 5-1: SerialNumber: syz [ 244.576341][ T10] usb 5-1: config 0 descriptor?? [ 244.603825][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 244.623841][ T10] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -22 [ 244.646150][ T9] usb 1-1: USB disconnect, device number 41 [ 244.660123][ T10] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 244.810599][ T10] usb 5-1: USB disconnect, device number 55 [ 245.652088][ T24] usb 3-1: USB disconnect, device number 38 [ 245.688557][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 245.760664][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'. [ 245.885156][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 245.893186][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 245.904059][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.914472][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.927032][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.940734][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.951004][ T10] usb 5-1: Product: syz [ 245.955225][ T10] usb 5-1: Manufacturer: syz [ 245.962445][ T10] usb 5-1: SerialNumber: syz [ 245.980520][ T10] usb 5-1: 0:2 : does not exist [ 246.047617][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 246.181222][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.208199][ T9] usb 1-1: device descriptor read/64, error -71 [ 246.236773][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.487348][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 246.678425][ T9] usb 1-1: device descriptor read/64, error -71 [ 246.734275][ T8756] team0: Device gtp0 is of different type [ 246.808779][ T9] usb usb1-port1: attempt power cycle [ 246.951249][ T10] usb 5-1: USB disconnect, device number 56 [ 247.157937][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 247.244514][ T9] usb 1-1: device descriptor read/8, error -71 [ 247.364108][ T8761] bond1: (slave bond_slave_1): Device is not our slave [ 247.390538][ T8761] bond1: option active_slave: invalid value (bond_slave_1) [ 247.469761][ T8761] bond1 (unregistering): Released all slaves [ 247.497989][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 247.552169][ T9] usb 1-1: device descriptor read/8, error -71 [ 247.720868][ T9] usb usb1-port1: unable to enumerate USB device [ 247.907388][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 248.068366][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 248.091157][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.123429][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.140766][ T8773] netlink: 'syz.2.765': attribute type 11 has an invalid length. [ 248.148861][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.170874][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.186152][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.210444][ T24] usb 5-1: config 0 descriptor?? [ 248.217415][ T803] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 248.379607][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.396050][ T803] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 248.411644][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.431132][ T803] usb 4-1: config 0 descriptor?? [ 248.451828][ T803] option 4-1:0.0: GSM modem (1-port) converter detected [ 248.636577][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.646025][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.659731][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.674286][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.927882][ T8781] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 248.983189][ T8781] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 249.038845][ T8781] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 249.068531][ T9] usb 4-1: USB disconnect, device number 42 [ 249.129057][ T9] option 4-1:0.0: device disconnected [ 249.558031][ T5918] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 249.738781][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 249.758294][ T5918] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.772602][ T5918] usb 3-1: config 0 has no interface number 0 [ 249.784127][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 249.785227][ T5918] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.800699][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 249.847616][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.851332][ T24] usb 5-1: USB disconnect, device number 57 [ 249.876848][ T5918] usb 3-1: Product: syz [ 249.892775][ T5918] usb 3-1: Manufacturer: syz [ 249.902259][ T5918] usb 3-1: SerialNumber: syz [ 249.924630][ T5918] usb 3-1: config 0 descriptor?? [ 249.948487][ T803] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 249.958851][ T5918] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.982808][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 250.122033][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.154285][ T803] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.183179][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.207721][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.256731][ T803] usb 4-1: config 0 descriptor?? [ 250.268600][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.300264][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 250.556972][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 250.584633][ T8824] random: crng reseeded on system resumption [ 250.719888][ T803] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.756925][ T803] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.797935][ T803] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.877372][ T803] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.915422][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 250.929503][ T803] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.938851][ T803] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.946838][ T803] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.960182][ T803] pwc: recv_control_msg error -32 req 02 val 2100 [ 250.973653][ T803] pwc: recv_control_msg error -32 req 04 val 1500 [ 250.983292][ T803] pwc: recv_control_msg error -32 req 02 val 2500 [ 251.008854][ T803] pwc: recv_control_msg error -32 req 02 val 2400 [ 251.032409][ T803] pwc: recv_control_msg error -32 req 02 val 2600 [ 251.043533][ T803] pwc: recv_control_msg error -32 req 02 val 2900 [ 251.055434][ T803] pwc: recv_control_msg error -32 req 02 val 2800 [ 251.068522][ T803] pwc: recv_control_msg error -32 req 04 val 1100 [ 251.083320][ T803] pwc: recv_control_msg error -32 req 04 val 1200 [ 251.092029][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 251.114608][ T803] pwc: Registered as video103. [ 251.189849][ T803] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 251.790216][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.810254][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.227347][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 252.326817][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 252.368040][ T5918] usb 3-1: USB disconnect, device number 39 [ 252.397673][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 252.413351][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 252.453166][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 252.472566][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 252.487356][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.500248][ T5918] quatech2 3-1:0.51: device disconnected [ 252.512213][ T10] usb 2-1: Product: syz [ 252.522061][ T10] usb 2-1: Manufacturer: syz [ 252.539943][ T10] usb 2-1: SerialNumber: syz [ 252.569831][ T10] usb 2-1: config 0 descriptor?? [ 252.634548][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 252.696256][ T8846] vlan3: entered promiscuous mode [ 252.873712][ T803] usb 4-1: USB disconnect, device number 43 [ 253.138288][ T8843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.182449][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 253.224304][ T10] airspy 2-1:0.0: Board ID: 00 [ 253.242506][ T10] airspy 2-1:0.0: Firmware version: 붍:PHybz]#G/$  Kyb%ҌȫiF<;qa [ 253.242506][ T10] $|P7)\j^s`tTDWԭ"Ml*KaxFK0s [ 253.431544][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 253.458732][ T10] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 253.496885][ T10] airspy 2-1:0.0: Registered as swradio24 [ 253.505363][ T10] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 253.543635][ T10] usb 2-1: USB disconnect, device number 44 [ 253.673166][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.786'. [ 254.183154][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 254.397385][ T24] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 254.569442][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.602583][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.613900][ T24] usb 5-1: New USB device strings: Mfr=172, Product=0, SerialNumber=0 [ 254.635632][ T24] usb 5-1: Manufacturer: syz [ 254.660480][ T24] usb 5-1: config 0 descriptor?? [ 254.682649][ T24] hub 5-1:0.0: USB hub found [ 254.883664][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 255.037352][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 255.077549][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 255.095331][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 255.095350][ T29] audit: type=1326 audit(1776546709.852:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.146051][ T29] audit: type=1326 audit(1776546709.882:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.188921][ T29] audit: type=1326 audit(1776546709.882:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.224500][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 255.232847][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 255.244559][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 255.254057][ T9] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 255.259119][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 255.267753][ T10] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 255.281154][ T29] audit: type=1326 audit(1776546709.892:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.311378][ T29] audit: type=1326 audit(1776546709.902:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.340114][ T24] usb 5-1: USB disconnect, device number 58 [ 255.358516][ T9] usb 4-1: config 179 has no interface number 0 [ 255.379552][ T10] usb 1-1: config 0 has no interface number 0 [ 255.386951][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 255.421765][ T10] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 255.438045][ T29] audit: type=1326 audit(1776546709.902:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.479560][ T29] audit: type=1326 audit(1776546709.902:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.479589][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 255.479625][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.520231][ T10] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.528552][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 255.546704][ T29] audit: type=1326 audit(1776546709.902:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.560038][ T10] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 255.579982][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.605950][ T29] audit: type=1326 audit(1776546709.902:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.608986][ T10] usb 1-1: Product: syz [ 255.637015][ T10] usb 1-1: Manufacturer: syz [ 255.641841][ T10] usb 1-1: SerialNumber: syz [ 255.652270][ T10] usb 1-1: config 0 descriptor?? [ 255.658421][ T8901] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 255.668536][ T10] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 255.683117][ T10] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 255.745091][ T29] audit: type=1326 audit(1776546709.902:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.4.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb646b9c819 code=0x7ffc0000 [ 255.922243][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 255.934801][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.943783][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.971066][ T9] usb 4-1: USB disconnect, device number 44 [ 256.107433][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 256.132005][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.140240][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.157493][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 256.202474][ T9] usb 1-1: USB disconnect, device number 47 [ 256.230945][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 256.259047][ T9] cyberjack 1-1:0.69: device disconnected [ 256.289349][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.306874][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.317515][ T10] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 256.320534][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.326685][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.352361][ T10] usb 3-1: config 0 descriptor?? [ 256.359594][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.373828][ T24] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 256.385976][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.397436][ T24] usb 5-1: config 0 descriptor?? [ 256.481586][ T8921] Cannot find add_set index 0 as target [ 256.826485][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.834358][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.841899][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 256.850724][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.870343][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.887457][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.905747][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.917003][ T24] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 256.937066][ T24] holtek_kbd 0003:04D9:A055.000C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 256.965878][ T24] usb 5-1: USB disconnect, device number 59 [ 257.016011][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 257.027097][ T5915] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 257.048794][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.067065][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.099216][ T9] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 257.100777][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 257.112569][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.121819][ T8934] fido_id[8934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 257.142648][ T9] usb 4-1: Product: syz [ 257.158024][ T9] usb 4-1: Manufacturer: syz [ 257.168565][ T9] usb 4-1: SerialNumber: syz [ 257.220783][ T9] usb 4-1: config 0 descriptor?? [ 257.233126][ T5915] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 257.261678][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.271436][ T9] radioshark 4-1:0.0: Invalid radioSHARK device [ 257.277795][ T9] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 257.289988][ T5915] usb 1-1: config 0 descriptor?? [ 257.295475][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 257.310383][ T5915] gspca_main: spca508-2.14.0 probing 8086:0110 [ 257.462813][ T9] usb 4-1: USB disconnect, device number 45 [ 257.602985][ T10] hid-led 0003:1D34:000A.000B: probe with driver hid-led failed with error -71 [ 257.609770][ T8948] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 257.619923][ T8948] netlink: 'syz.1.807': attribute type 8 has an invalid length. [ 257.627736][ T8948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.807'. [ 257.667909][ T10] usb 3-1: USB disconnect, device number 40 [ 257.837658][ T5915] gspca_spca508: reg_read err -110 [ 257.850844][ T5915] gspca_spca508: reg_read err -32 [ 257.869121][ T5915] gspca_spca508: reg_read err -32 [ 257.878943][ T5915] gspca_spca508: reg_read err -32 [ 257.887708][ T5915] gspca_spca508: reg_read err -32 [ 257.896359][ T5915] gspca_spca508: reg write: error -32 [ 257.915603][ T5915] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 258.169651][ T8958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.330824][ T8960] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 258.360038][ T8960] netlink: 2 bytes leftover after parsing attributes in process `syz.2.811'. [ 258.372822][ T8960] bond0: entered promiscuous mode [ 258.379841][ T8960] bond_slave_0: entered promiscuous mode [ 258.385963][ T8960] bond_slave_1: entered promiscuous mode [ 258.395179][ T8960] bridge0: port 3(bond0) entered blocking state [ 258.403995][ T8960] bridge0: port 3(bond0) entered disabled state [ 258.449321][ T8960] bond0: entered allmulticast mode [ 258.467775][ T8960] bond_slave_0: entered allmulticast mode [ 258.480049][ T8960] bond_slave_1: entered allmulticast mode [ 258.516036][ T8960] bridge0: port 3(bond0) entered blocking state [ 258.522478][ T8960] bridge0: port 3(bond0) entered forwarding state [ 258.667901][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 258.838898][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 258.861315][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.879781][ T10] usb 3-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 258.900490][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.930456][ T10] usb 3-1: string descriptor 0 read error: -22 [ 258.947558][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.963741][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.007099][ T10] usb 3-1: invalid UAC_HEADER (v1) [ 259.107191][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 259.226762][ T10] usb 3-1: USB disconnect, device number 41 [ 259.268635][ T5825] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 259.428985][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.451552][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.494334][ T5825] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.512711][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.544481][ T5825] usb 2-1: SerialNumber: syz [ 259.784914][ T5825] usb 2-1: 0:2 : does not exist [ 259.820766][ T5825] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 259.906042][ T24] usb 1-1: USB disconnect, device number 48 [ 260.108302][ T5825] usb 2-1: USB disconnect, device number 45 [ 260.519057][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 260.709167][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 260.715141][ T10] usb 1-1: config 0 has no interfaces? [ 260.715166][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.715181][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.717030][ T10] usb 1-1: config 0 descriptor?? [ 260.778875][ T8984] netlink: 'syz.4.819': attribute type 15 has an invalid length. [ 260.952805][ T10] usb 1-1: USB disconnect, device number 49 [ 261.557479][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 261.667568][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 261.713978][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.732755][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.770859][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.819180][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 261.860124][ T10] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 261.887127][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.917018][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 261.936992][ T24] usb 4-1: Product: syz [ 261.950308][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 261.970045][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.973550][ T24] usb 4-1: Manufacturer: syz [ 262.000320][ T10] usb 3-1: Product: syz [ 262.022312][ T24] usb 4-1: SerialNumber: syz [ 262.024038][ T10] usb 3-1: Manufacturer: syz [ 262.071178][ T10] usb 3-1: SerialNumber: syz [ 262.120486][ T24] usb 4-1: selecting invalid altsetting 1 [ 262.138958][ T24] usb 4-1: unit 6 not found! [ 262.150491][ T10] usb 3-1: config 0 descriptor?? [ 262.206900][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 262.310316][ T9007] fuse: Unknown parameter '' [ 262.414174][ T9024] trusted_key: syz.3.825 sent an empty control message without MSG_MORE. [ 262.458480][ T5915] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 262.495659][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.527191][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.569826][ T9007] kvm: kvm [9005]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 262.589001][ T9007] kvm: kvm [9005]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 262.633444][ T5915] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 262.657548][ T5915] usb 1-1: config 1 has no interface number 0 [ 262.675832][ T5915] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 262.708322][ T5915] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 262.738454][ T5915] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.795738][ T5915] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 262.812213][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.836584][ T5915] usb 1-1: Product: syz [ 262.838069][ T803] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 262.876075][ T5915] usb 1-1: Manufacturer: syz [ 262.890138][ T5915] usb 1-1: SerialNumber: syz [ 262.915369][ T9023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 263.017424][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 263.044366][ T803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.071567][ T803] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 263.090946][ T803] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 263.100807][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.109053][ T803] usb 2-1: Product: syz [ 263.114073][ T803] usb 2-1: Manufacturer: syz [ 263.118974][ T803] usb 2-1: SerialNumber: syz [ 263.132607][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 263.155905][ T9023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 263.170099][ T9041] loop4: detected capacity change from 0 to 1 [ 263.183202][ T9041] Dev loop4: unable to read RDB block 1 [ 263.189786][ T9041] loop4: unable to read partition table [ 263.248595][ T9041] loop4: partition table beyond EOD, truncated [ 263.268517][ T9041] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 263.335047][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.352483][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.366814][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.378578][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.453855][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.473990][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.547655][ T5915] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 263.596889][ C0] sierra_net 1-1:1.7 wwan0: : unexpected notification bd! [ 263.604432][ C0] sierra_net 1-1:1.7 wwan0: : unexpected notification 88! [ 263.611794][ C0] sierra_net 1-1:1.7 wwan0: : unexpected notification 51! [ 263.833992][ T5915] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 263.877200][ T5915] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 263.955402][ T5915] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 263.995195][ T5915] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 264.038942][ T5915] usb 1-1: USB disconnect, device number 50 [ 264.071190][ T5915] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 264.107270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 264.248324][ T10] gspca_sunplus: reg_r err -110 [ 264.267950][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 264.338543][ T5915] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 264.800668][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.857594][ T24] usb 4-1: USB disconnect, device number 46 [ 265.011673][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.365442][ T10] usb 3-1: USB disconnect, device number 42 [ 265.407976][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 265.438111][ T5825] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 265.600373][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.633298][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.648556][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.666073][ T5825] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 265.690320][ T5825] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 265.704306][ T24] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 265.724077][ T5825] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 265.737447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.765821][ T24] usb 4-1: Product: syz [ 265.771639][ T5825] usb 1-1: config 129 has no interface number 0 [ 265.791129][ T24] usb 4-1: Manufacturer: syz [ 265.804716][ T5825] usb 1-1: config 129 has no interface number 1 [ 265.821186][ T24] usb 4-1: SerialNumber: syz [ 265.831626][ T5825] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 265.865154][ T24] usb 4-1: config 0 descriptor?? [ 265.879014][ T803] usb 2-1: interface 3 not found [ 265.886961][ T5825] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 265.926583][ T24] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 265.940602][ T5825] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 265.961334][ T9081] syzkaller0: entered promiscuous mode [ 265.970295][ T803] usb 2-1: USB disconnect, device number 46 [ 265.988928][ T5825] usb 1-1: config 129 interface 135 has no altsetting 0 [ 265.992141][ T9081] syzkaller0: entered allmulticast mode [ 266.001551][ T5825] usb 1-1: config 129 interface 5 has no altsetting 0 [ 266.007571][ T5825] usb 1-1: string descriptor 0 read error: -22 [ 266.015078][ T5825] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 266.043444][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.108399][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.130600][ T24] usb 4-1: USB disconnect, device number 47 [ 266.146647][ T5825] usb 1-1: MIDIStreaming interface descriptor not found [ 266.285975][ T9095] veth0: entered promiscuous mode [ 266.330798][ T9095] veth0: left promiscuous mode [ 266.445486][ T5825] usb 1-1: USB disconnect, device number 51 [ 266.508177][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 266.553179][ T9101] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.844'. [ 266.576253][ T9101] netlink: Unknown conntrack attr (0) [ 266.601860][ T9101] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.844'. [ 266.623312][ T9101] netlink: Unknown conntrack attr (0) [ 266.679531][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 266.704936][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.752166][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.777353][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 266.797587][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 266.820947][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 266.856933][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 266.901493][ T24] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 266.931951][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 266.951441][ T24] usb 2-1: Product: syz [ 266.965120][ T24] usb 2-1: Manufacturer: syz [ 266.972030][ T24] usb 2-1: SerialNumber: syz [ 267.021074][ T24] usb 2-1: config 0 descriptor?? [ 267.042746][ T24] usb 2-1: no audio or video endpoints found [ 267.104872][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 267.269155][ T803] usb 2-1: USB disconnect, device number 47 [ 267.446258][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 267.497441][ T5915] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 267.673550][ T5915] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.694700][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.728507][ T5915] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.740006][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.758967][ T803] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 267.776656][ T5915] usb 5-1: Product: syz [ 267.784475][ T5915] usb 5-1: Manufacturer: syz [ 267.793346][ T5915] usb 5-1: SerialNumber: syz [ 267.813492][ T5915] usb 5-1: config 0 descriptor?? [ 267.841250][ T5915] usb 5-1: selecting invalid altsetting 0 [ 267.917319][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 267.938509][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.000101][ T803] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 268.054052][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.098225][ T803] usb 3-1: config 0 descriptor?? [ 268.125111][ T803] gspca_main: spca501-2.14.0 probing 0000:0000 [ 268.208124][ T5915] usb 5-1: USB disconnect, device number 60 [ 268.229507][ T9112] netlink: 'syz.4.845': attribute type 23 has an invalid length. [ 268.347462][ T5825] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 268.502293][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.525751][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.564063][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.593444][ T5825] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.615853][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.640022][ T5825] usb 2-1: config 0 descriptor?? [ 268.841178][ T803] gspca_spca501: reg write: error -110 [ 268.848271][ T803] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 268.857772][ T803] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 269.078914][ T5825] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 269.174570][ T5825] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 269.385756][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.410647][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.695819][ T9132] m1Ie5n: entered promiscuous mode [ 269.750753][ T5825] usb 2-1: USB disconnect, device number 48 [ 270.135651][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.148604][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.358886][ T5915] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 270.391070][ T5825] usb 3-1: USB disconnect, device number 43 [ 270.529729][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.552128][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.579357][ T5915] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 270.610927][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.649734][ T5915] usb 5-1: config 0 descriptor?? [ 270.875021][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 270.885419][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.904524][ T5915] usb 5-1: USB disconnect, device number 61 [ 270.910768][ T5825] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 271.089286][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 271.098546][ T5825] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 271.106953][ T5825] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.121411][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'. [ 271.133156][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.143404][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.158654][ T5825] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.172039][ T5825] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.183081][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.217418][ T5915] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 271.302149][ T9186] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff0000000000000000000000000000000000000000' [ 271.377530][ T5918] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 271.385275][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 271.393977][ T5915] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.406161][ T5915] usb 3-1: config 0 has no interface number 0 [ 271.413539][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.424846][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.450738][ T5915] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.476860][ T10] usb 2-1: USB disconnect, device number 49 [ 271.483155][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.500943][ T5915] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.510930][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.547523][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 271.554486][ T5918] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 271.574928][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.574961][ T5918] usb 1-1: Product: syz [ 271.574977][ T5918] usb 1-1: Manufacturer: syz [ 271.574991][ T5918] usb 1-1: SerialNumber: syz [ 271.576507][ T5915] usb 3-1: config 0 descriptor?? [ 271.598483][ T9192] ip6gre1: entered promiscuous mode [ 271.598533][ T9192] ip6gre1: entered allmulticast mode [ 271.598819][ T5918] usb 1-1: config 0 descriptor?? [ 271.604529][ T5915] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.609804][ T5918] gspca_main: se401-2.14.0 probing 047d:5003 [ 271.618335][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.618650][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.647773][ T5825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.863890][ T5825] usb 3-1: USB disconnect, device number 44 [ 271.889556][ T5825] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 271.926832][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.117533][ T803] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 272.284485][ T803] usb 2-1: config 227 has an invalid interface number: 20 but max is 0 [ 272.303569][ T803] usb 2-1: config 227 has no interface number 0 [ 272.324950][ T803] usb 2-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 272.356834][ T803] usb 2-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024 [ 272.390111][ T803] usb 2-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024 [ 272.419054][ T803] usb 2-1: config 227 interface 20 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 272.461310][ T803] usb 2-1: config 227 interface 20 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 272.466269][ T5918] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 272.527653][ T803] usb 2-1: config 227 interface 20 altsetting 5 bulk endpoint 0xA has invalid maxpacket 32 [ 272.560299][ T803] usb 2-1: config 227 interface 20 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 272.615017][ T803] usb 2-1: config 227 interface 20 has no altsetting 0 [ 272.657340][ T803] usb 2-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 272.692904][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.732623][ T803] usb 2-1: Product: syz [ 272.756075][ T803] usb 2-1: Manufacturer: syz [ 272.762744][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.800091][ T803] usb 2-1: SerialNumber: syz [ 272.843050][ T9197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.874870][ T9197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.984401][ T9215] could not allocate digest TFM handle sha1-neon [ 273.194849][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.236841][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 273.249983][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.323844][ T803] ipaq 2-1:227.20: PocketPC PDA converter detected [ 273.361858][ T803] usb 2-1: active config #227 != 1 ?? [ 273.412076][ T803] usb 2-1: USB disconnect, device number 50 [ 273.715628][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 274.325553][ T5915] usb 1-1: USB disconnect, device number 52 [ 274.518942][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.881'. [ 274.558956][ T5825] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 274.758799][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 274.771210][ T5825] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 274.794964][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.819571][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.882'. [ 274.838965][ T5825] usb 2-1: Product: syz [ 274.850454][ T5825] usb 2-1: Manufacturer: syz [ 274.865365][ T5825] usb 2-1: SerialNumber: syz [ 274.909575][ T5825] usb 2-1: config 0 descriptor?? [ 274.971453][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 275.164748][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 275.194397][ T803] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 275.362886][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.393021][ T803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.433945][ T803] usb 3-1: string descriptor 0 read error: -22 [ 275.449908][ T803] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.469168][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.518511][ T803] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.530584][ T803] usb 3-1: MIDIStreaming interface descriptor not found [ 275.713734][ T5825] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 275.877462][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.160777][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 276.224273][ T9276] veth1_macvtap: left promiscuous mode [ 276.493451][ T9284] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 276.578531][ T9285] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 276.631619][ T9285] netlink: 666 bytes leftover after parsing attributes in process `syz.4.888'. [ 276.863476][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 276.975786][ T9298] fuse: Bad value for 'user_id' [ 276.991110][ T9298] fuse: Bad value for 'user_id' [ 277.197865][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 277.267426][ T5915] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 277.357402][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 277.364015][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.377433][ T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 277.378074][ T24] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 277.394437][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.402541][ T24] usb 5-1: Product: syz [ 277.406749][ T24] usb 5-1: Manufacturer: syz [ 277.411523][ T24] usb 5-1: SerialNumber: syz [ 277.419037][ T803] usb 2-1: USB disconnect, device number 51 [ 277.431862][ T24] usb 5-1: config 0 descriptor?? [ 277.437455][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 277.454054][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.465358][ T24] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 277.482618][ T24] usb 5-1: selecting invalid altsetting 1 [ 277.485949][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.516246][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.527520][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.535953][ T5915] usb 4-1: Product: syz [ 277.549339][ T5915] usb 4-1: Manufacturer: syz [ 277.556598][ T5915] usb 4-1: SerialNumber: syz [ 277.564150][ T10] usb 1-1: config 251 has an invalid interface number: 33 but max is 0 [ 277.572652][ T10] usb 1-1: config 251 has no interface number 0 [ 277.588159][ T5915] usb 4-1: 0:2 : does not exist [ 277.594785][ T10] usb 1-1: config 251 interface 33 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 277.608502][ T5915] usb 4-1: unit 9 not found! [ 277.619378][ T10] usb 1-1: config 251 interface 33 has no altsetting 0 [ 277.640775][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=94.85 [ 277.641044][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 277.650791][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.674210][ T10] usb 1-1: Product: syz [ 277.678978][ T24] gspca_stk014: reg_r err -71 [ 277.679069][ T24] stk014 5-1:0.0: probe with driver stk014 failed with error -71 [ 277.695179][ T10] usb 1-1: Manufacturer: syz [ 277.700758][ T10] usb 1-1: SerialNumber: syz [ 277.706777][ T24] usb 5-1: USB disconnect, device number 62 [ 277.737030][ T9304] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 277.803059][ T5915] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 277.818479][ T5915] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 277.853340][ T5915] usb 4-1: USB disconnect, device number 48 [ 277.885215][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 278.439185][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'. [ 278.456120][ T803] usb 3-1: USB disconnect, device number 45 [ 278.492419][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 278.650954][ T9319] fuse: Bad value for 'fd' [ 278.743240][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 278.743258][ T29] audit: type=1326 audit(1776546733.502:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 278.772119][ T29] audit: type=1326 audit(1776546733.512:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 278.798409][ T5915] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 278.810107][ T29] audit: type=1326 audit(1776546733.512:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 278.819347][ T9325] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 278.872082][ T29] audit: type=1326 audit(1776546733.512:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 278.955436][ T29] audit: type=1326 audit(1776546733.512:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.005817][ T29] audit: type=1326 audit(1776546733.512:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.046841][ T5915] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 279.067517][ T5915] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 279.085465][ T5915] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 279.114495][ T5915] usb 4-1: config 150 has no interface number 0 [ 279.126409][ T29] audit: type=1326 audit(1776546733.512:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.185374][ T5915] usb 4-1: config 150 interface 204 has no altsetting 0 [ 279.202573][ T5915] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 279.216470][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.233695][ T5915] usb 4-1: Product: syz [ 279.247371][ T5915] usb 4-1: Manufacturer: syz [ 279.263286][ T29] audit: type=1326 audit(1776546733.512:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.289032][ T5915] usb 4-1: SerialNumber: syz [ 279.357454][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 279.392411][ T29] audit: type=1326 audit(1776546733.512:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.480440][ T29] audit: type=1326 audit(1776546733.512:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d9099c819 code=0x7ffc0000 [ 279.553663][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 279.596318][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.639822][ T24] usb 2-1: config 0 descriptor?? [ 279.962501][ T10] smsc95xx 1-1:251.33 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 280.006689][ T10] smsc95xx 1-1:251.33: probe with driver smsc95xx failed with error -22 [ 280.071468][ T10] usb 1-1: USB disconnect, device number 53 [ 280.527451][ T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 280.719587][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 280.739082][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.766558][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 280.965457][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.978955][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.137445][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 281.261744][ T10] gspca_sn9c20x: Write register 1001 failed -71 [ 281.275846][ T10] gspca_sn9c20x: Device initialization failed [ 281.286770][ T10] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 281.298597][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 281.311736][ T10] usb 1-1: USB disconnect, device number 54 [ 281.325060][ T9] usb 5-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 281.353229][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 281.372269][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 281.382757][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.391123][ T9] usb 5-1: Product: syz [ 281.395556][ T9] usb 5-1: Manufacturer: syz [ 281.406296][ T9] usb 5-1: SerialNumber: syz [ 281.546965][ T5915] usb 4-1: USB disconnect, device number 49 [ 281.573174][ T9351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.636699][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 281.649598][ T9] usb 5-1: unit 5 not found! [ 281.789450][ T9] usb 5-1: USB disconnect, device number 63 [ 282.299595][ T803] IPVS: starting estimator thread 0... [ 282.322192][ T9] usb 2-1: USB disconnect, device number 52 [ 282.418870][ T9370] IPVS: using max 56 ests per chain, 134400 per kthread [ 282.487457][ T5887] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 282.650578][ T5887] usb 5-1: device descriptor read/64, error -71 [ 282.930556][ T5887] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 282.949595][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 283.077469][ T5915] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 283.098423][ T5887] usb 5-1: device descriptor read/64, error -71 [ 283.117530][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 283.127728][ T9] usb 4-1: config 7 has an invalid interface number: 208 but max is 0 [ 283.140716][ T9] usb 4-1: config 7 has no interface number 0 [ 283.150015][ T9] usb 4-1: config 7 interface 208 altsetting 0 endpoint 0xD has an invalid bInterval 252, changing to 7 [ 283.171973][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 283.181666][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.189879][ T9] usb 4-1: Product: syz [ 283.194228][ T9] usb 4-1: Manufacturer: syz [ 283.199183][ T9] usb 4-1: SerialNumber: syz [ 283.218543][ T5887] usb usb5-port1: attempt power cycle [ 283.227367][ T5918] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 283.247396][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 283.254541][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.267137][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.290917][ T5915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.301579][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.314069][ T5915] usb 3-1: Product: syz [ 283.320837][ T5915] usb 3-1: Manufacturer: syz [ 283.327287][ T5915] usb 3-1: SerialNumber: syz [ 283.345066][ T5915] usb 3-1: 0:192 : does not exist [ 283.389158][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 283.412914][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.438541][ T9] appletouch 4-1:7.208: Could not find int-in endpoint [ 283.445806][ T5918] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 283.455912][ T9] appletouch 4-1:7.208: probe with driver appletouch failed with error -5 [ 283.466894][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.475701][ T9] usbhid 4-1:7.208: couldn't find an input interrupt endpoint [ 283.495862][ T5918] usb 1-1: config 0 descriptor?? [ 283.505858][ T9] usb 4-1: USB disconnect, device number 50 [ 283.531279][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 283.555594][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.577396][ T5887] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 283.581087][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.620878][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.669557][ T5887] usb 5-1: device descriptor read/8, error -71 [ 283.715916][ T5918] usb 3-1: USB disconnect, device number 46 [ 283.917366][ T5887] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 283.969620][ T5887] usb 5-1: device descriptor read/8, error -71 [ 283.985176][ T5184] bcm5974 1-1:0.0: could not read from device [ 283.998590][ T24] usb 1-1: USB disconnect, device number 55 [ 284.042149][ T5968] bcm5974 1-1:0.0: could not read from device [ 284.085416][ T9394] program syz.3.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.095705][ T5887] usb usb5-port1: unable to enumerate USB device [ 284.277440][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.590168][ T9410] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 284.847550][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 285.017467][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 285.026822][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 285.042570][ T24] usb 1-1: config 179 has no interface number 0 [ 285.050802][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 285.062294][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 285.074040][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 285.085607][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 285.097661][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 285.111176][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 285.118373][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 285.127673][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.179243][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34 [ 285.248275][ T5184] input input34: unable to receive magic message: -110 [ 285.278103][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 285.314004][ T6316] input input34: unable to receive magic message: -32 [ 285.346904][ T5184] input input34: unable to receive magic message: -32 [ 285.374787][ T5184] input input34: unable to receive magic message: -32 [ 285.408378][ T5184] input input34: unable to receive magic message: -32 [ 285.431442][ T5184] input input34: unable to receive magic message: -32 [ 285.462084][ T9] usb 3-1: config 4 has an invalid interface number: 100 but max is 0 [ 285.471758][ T9] usb 3-1: config 4 has no interface number 0 [ 285.481870][ T9] usb 3-1: config 4 interface 100 has no altsetting 0 [ 285.496306][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=2d.5b [ 285.508675][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.536037][ T9] usb 3-1: Product: syz [ 285.543031][ T9] usb 3-1: Manufacturer: syz [ 285.567329][ T9] usb 3-1: SerialNumber: syz [ 285.707429][ T5915] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 285.758914][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.931'. [ 285.799137][ T9] hub 3-1:4.100: bad descriptor, ignoring hub [ 285.816648][ T9] hub 3-1:4.100: probe with driver hub failed with error -5 [ 285.826374][ T9] ftdi_sio 3-1:4.100: FTDI USB Serial Device converter detected [ 285.840570][ T9] ftdi_sio ttyUSB0: unknown device type: 0x2d5b [ 285.867462][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 285.874226][ T9] usb 3-1: USB disconnect, device number 47 [ 285.887659][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.901890][ T9] ftdi_sio 3-1:4.100: device disconnected [ 285.916722][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.946818][ T5915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.967495][ T5915] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 285.979021][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.987192][ T5915] usb 5-1: Product: syz [ 285.991705][ T5915] usb 5-1: Manufacturer: syz [ 285.996432][ T5915] usb 5-1: SerialNumber: syz [ 286.297483][ T5887] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 286.383963][ T9449] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 286.403710][ T9449] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.413087][ T9449] team0: entered promiscuous mode [ 286.418719][ T9449] team_slave_0: entered promiscuous mode [ 286.419844][ T5915] usb 5-1: 0:2 : does not exist [ 286.424864][ T9449] team_slave_1: entered promiscuous mode [ 286.440234][ T9449] team0: entered allmulticast mode [ 286.451220][ T9449] team_slave_0: entered allmulticast mode [ 286.457137][ T9449] team_slave_1: entered allmulticast mode [ 286.469663][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 286.481955][ T9449] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.492716][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.515822][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 286.526808][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.538258][ T5915] usb 5-1: USB disconnect, device number 68 [ 286.554677][ T5887] usb 2-1: config 0 descriptor?? [ 286.673698][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 286.846349][ T5184] bcm5974 2-1:0.0: could not read from device [ 286.879401][ T5184] bcm5974 2-1:0.0: could not read from device [ 286.895486][ T5184] bcm5974 2-1:0.0: could not read from device [ 286.895939][ T5887] usb 2-1: USB disconnect, device number 53 [ 286.916138][ T5184] bcm5974 2-1:0.0: could not read from device [ 287.694657][ T5887] usb 1-1: USB disconnect, device number 56 [ 287.700928][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 287.917712][ T803] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 288.082083][ T803] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 288.101522][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.110849][ T803] usb 2-1: Product: syz [ 288.115190][ T803] usb 2-1: Manufacturer: syz [ 288.127382][ T5915] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 288.127464][ T803] usb 2-1: SerialNumber: syz [ 288.161635][ T803] usb 2-1: config 0 descriptor?? [ 288.168283][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 288.182013][ T803] ch341 2-1:0.0: ch341-uart converter detected [ 288.307393][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 288.321737][ T5915] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 288.337465][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 288.345204][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 288.365516][ T24] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 288.388950][ T5915] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 288.402111][ T803] usb 2-1: failed to receive control message: -121 [ 288.432121][ T803] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 288.455091][ T5915] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 288.518595][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.553495][ T5915] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 288.575108][ T5915] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 288.602500][ T5915] usb 4-1: Product: syz [ 288.624806][ T5915] usb 4-1: Manufacturer: syz [ 288.643496][ T5915] usb 4-1: SerialNumber: syz [ 288.669119][ T5915] usb 4-1: config 0 descriptor?? [ 288.697206][ T5915] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 288.729460][ T5915] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 288.904257][ T803] usb 4-1: USB disconnect, device number 51 [ 288.910309][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 288.956504][ T803] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 289.000975][ T9488] ======================================================= [ 289.000975][ T9488] WARNING: The mand mount option has been deprecated and [ 289.000975][ T9488] and is ignored by this kernel. Remove the mand [ 289.000975][ T9488] option from the mount to silence this warning. [ 289.000975][ T9488] ======================================================= [ 289.136398][ T9493] loop5: detected capacity change from 0 to 7 [ 289.178710][ C0] blk_print_req_error: 10 callbacks suppressed [ 289.178733][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.194283][ C0] buffer_io_error: 10 callbacks suppressed [ 289.194304][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.213247][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.222507][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.234528][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.243835][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.253269][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.262523][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.272423][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.281646][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.294325][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.303619][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.313024][ T9493] ldm_validate_partition_table(): Disk read failed. [ 289.319825][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.319865][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.371861][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.381132][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.395075][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.404382][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.418797][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.428039][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 289.436060][ T9493] Dev loop5: unable to read RDB block 0 [ 289.455438][ T9493] loop5: unable to read partition table [ 289.467436][ T9493] loop5: partition table beyond EOD, truncated [ 289.492056][ T9493] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 289.736781][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 289.845774][ T9503] team0: Port device batadv1 added [ 290.365920][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 290.378495][ T803] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 290.495967][ T24] usb 3-1: string descriptor 0 read error: -71 [ 290.519589][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 290.531475][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.557774][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 290.563759][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 290.603203][ T803] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 290.612622][ T24] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 290.709381][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.718097][ T24] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 290.726276][ T803] usb 1-1: Product: syz [ 290.737883][ T24] r8152-cfgselector 3-1: USB disconnect, device number 48 [ 290.745209][ T803] usb 1-1: Manufacturer: syz [ 290.750648][ T803] usb 1-1: SerialNumber: syz [ 290.764546][ T803] usb 1-1: config 0 descriptor?? [ 290.782736][ T803] gspca_main: se401-2.14.0 probing 047d:5003 [ 290.838653][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 291.008091][ T9] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 291.047175][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.069963][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.093165][ T9] usb 5-1: Product: syz [ 291.105280][ T9] usb 5-1: Manufacturer: syz [ 291.112683][ T9522] fuse: Bad value for 'fd' [ 291.122047][ T9] usb 5-1: SerialNumber: syz [ 291.145163][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.168951][ T990] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.321450][ T803] gspca_se401: Wrong descriptor type [ 291.477040][ T24] usb 2-1: USB disconnect, device number 54 [ 291.505580][ T24] ch341 2-1:0.0: device disconnected [ 291.586559][ T9517] random: crng reseeded on system resumption [ 291.654401][ T9] usb 5-1: USB disconnect, device number 69 [ 291.684467][ T9528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 291.691371][ T9528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.707979][ T9526] loop5: detected capacity change from 0 to 7 [ 291.753021][ T9528] vhci_hcd vhci_hcd.0: Device attached [ 291.773811][ T9529] vhci_hcd: connection closed [ 291.800420][ T142] vhci_hcd vhci_hcd.1: stop threads [ 291.855511][ T142] vhci_hcd vhci_hcd.1: release socket [ 291.884024][ T142] vhci_hcd vhci_hcd.1: disconnect device [ 291.918034][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 292.139086][ T9526] Dev loop5: unable to read RDB block 7 [ 292.149185][ T9531] Invalid logical block size (-1) [ 292.149325][ T9526] loop5: unable to read partition table [ 292.197404][ T990] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 292.204478][ T990] ath9k_htc: Failed to initialize the device [ 292.213907][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 292.235206][ T9526] loop5: partition table beyond EOD, truncated [ 292.270548][ T9526] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 292.626043][ T9543] netlink: 'syz.2.958': attribute type 7 has an invalid length. [ 292.666151][ T9543] netlink: 'syz.2.958': attribute type 7 has an invalid length. [ 292.666699][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.685896][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.696155][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.710832][ T5840] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 292.718107][ T803] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 292.741167][ T111] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.796134][ T9549] netlink: 'syz.3.961': attribute type 4 has an invalid length. [ 292.853932][ T9549] netlink: 794 bytes leftover after parsing attributes in process `syz.3.961'. [ 292.880384][ T9549] netlink: 'syz.3.961': attribute type 4 has an invalid length. [ 292.887370][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 292.901872][ T803] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 292.935682][ T803] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 292.956542][ T803] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 292.967112][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.975560][ T803] usb 5-1: Product: syz [ 292.981028][ T803] usb 5-1: Manufacturer: syz [ 292.985764][ T803] usb 5-1: SerialNumber: syz [ 293.095855][ T9558] sctp: [Deprecated]: syz.1.962 (pid 9558) Use of int in max_burst socket option. [ 293.095855][ T9558] Use struct sctp_assoc_value instead [ 293.154044][ T803] usb 1-1: USB disconnect, device number 57 [ 293.927446][ T5825] usb 5-1: USB disconnect, device number 70 [ 294.227503][ T5918] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 294.357522][ T5825] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 294.444044][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 294.504126][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.551438][ T5918] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 294.552692][ T5825] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 294.595193][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.621111][ T5918] usb 1-1: Product: syz [ 294.640177][ T5918] usb 1-1: Manufacturer: syz [ 294.653786][ T5918] usb 1-1: SerialNumber: syz [ 294.659919][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.697207][ T5918] usb 1-1: config 0 descriptor?? [ 294.698691][ T5825] usb 5-1: config 0 descriptor?? [ 294.739893][ T5918] cdc_ether 1-1:0.0: Descriptor too short [ 294.759472][ T5918] usb 1-1: unsupported MDLM descriptors [ 294.849819][ T5825] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 294.959059][ T9565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.964'. [ 295.047435][ T803] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 295.197636][ T803] usb 4-1: device descriptor read/64, error -71 [ 295.292249][ T5825] gspca_cpia1: usb_control_msg 03, error -71 [ 295.309068][ T5825] gspca_cpia1: usb_control_msg 01, error -71 [ 295.336126][ T5825] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 295.364808][ T5825] usb 5-1: USB disconnect, device number 71 [ 295.457520][ T803] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 295.607342][ T803] usb 4-1: device descriptor read/64, error -71 [ 295.727874][ T803] usb usb4-port1: attempt power cycle [ 296.087450][ T803] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 296.150488][ T803] usb 4-1: device descriptor read/8, error -71 [ 296.330168][ T9581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.420014][ T803] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 296.468320][ T803] usb 4-1: device descriptor read/8, error -71 [ 296.597720][ T803] usb usb4-port1: unable to enumerate USB device [ 296.642221][ T5825] IPVS: starting estimator thread 0... [ 296.728307][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 296.739415][ T9590] IPVS: using max 55 ests per chain, 132000 per kthread [ 296.816930][ T5918] usb 1-1: USB disconnect, device number 58 [ 297.063230][ T5918] IPVS: starting estimator thread 0... [ 297.149861][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 297.168566][ T9610] IPVS: using max 56 ests per chain, 134400 per kthread [ 297.261874][ T9617] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 297.327368][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 297.332538][ T9617] bond1: (slave geneve2): making interface the new active one [ 297.344128][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 297.356628][ T9617] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 297.359253][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.374638][ T24] usb 5-1: Product: syz [ 297.375023][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.378953][ T24] usb 5-1: Manufacturer: syz [ 297.378971][ T24] usb 5-1: SerialNumber: syz [ 297.384571][ T24] usb 5-1: config 0 descriptor?? [ 297.409975][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'. [ 297.410161][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 297.430135][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.462919][ T9617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.473042][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.495567][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.153414][ T24] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 298.257384][ T5825] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 298.428646][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 298.469145][ T5825] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 298.484018][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.502609][ T5825] usb 1-1: Product: syz [ 298.514638][ T5825] usb 1-1: Manufacturer: syz [ 298.526878][ T5825] usb 1-1: SerialNumber: syz [ 298.558794][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.755434][ T9633] netlink: 180 bytes leftover after parsing attributes in process `syz.0.985'. [ 298.956378][ T5825] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 299.004055][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.055628][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.099889][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.146038][ T5918] usb 1-1: USB disconnect, device number 59 [ 299.340333][ T9652] netlink: zone id is out of range [ 299.358187][ T9652] netlink: zone id is out of range [ 299.517916][ T9652] netlink: zone id is out of range [ 299.562441][ T9652] netlink: zone id is out of range [ 299.610400][ T9652] netlink: set zone limit has 4 unknown bytes [ 300.022442][ T5918] usb 5-1: USB disconnect, device number 72 [ 300.245068][ T9676] fuse: fd is not a fuse device [ 300.398345][ T9682] fuse: Unknown parameter '0x00000000000000030x000000000000000300000000000000000000005' [ 300.688429][ T9692] binder: 9689:9692 ioctl c0306201 0 returned -14 [ 300.904595][ T9703] bridge0: port 1(macsec2) entered blocking state [ 300.925123][ T9703] bridge0: port 1(macsec2) entered disabled state [ 300.942142][ T9703] macsec2: entered allmulticast mode [ 300.973361][ T9703] bridge0: entered allmulticast mode [ 301.004101][ T9703] macsec2: left allmulticast mode [ 301.018891][ T9703] bridge0: left allmulticast mode [ 301.019167][ T9701] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 301.019167][ T9701] program syz.2.1001 not setting count and/or reply_len properly [ 301.217579][ T990] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 301.327566][ T5918] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 301.373861][ T990] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.394339][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.451942][ T990] usb 2-1: Product: syz [ 301.462767][ T990] usb 2-1: Manufacturer: syz [ 301.482088][ T990] usb 2-1: SerialNumber: syz [ 301.509722][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 301.528970][ T990] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.538906][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.568738][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.582273][ T5918] usb 5-1: config 0 descriptor?? [ 301.707537][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 301.869685][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 301.885856][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.910119][ T24] usb 4-1: config 0 has no interfaces? [ 301.939544][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 301.958318][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 301.981010][ T24] usb 4-1: Product: syz [ 301.982084][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 301.993033][ T24] usb 4-1: Manufacturer: syz [ 302.011520][ T24] usb 4-1: SerialNumber: syz [ 302.036483][ T24] usb 4-1: config 0 descriptor?? [ 302.087561][ T5895] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 302.188075][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.198306][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.218184][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.245696][ T5825] usb 2-1: USB disconnect, device number 55 [ 302.262999][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.272387][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 302.295059][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.299961][ T5895] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 302.332615][ T5895] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 302.363961][ T5895] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.390219][ T5895] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 302.406074][ T5915] usb 4-1: USB disconnect, device number 56 [ 302.429102][ T5895] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 302.443533][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.465671][ T5895] usb 1-1: Product: syz [ 302.475634][ T5895] usb 1-1: Manufacturer: syz [ 302.486225][ T5895] usb 1-1: SerialNumber: syz [ 302.532886][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 302.548181][ T5895] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input39 [ 302.695927][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 302.718020][ T9] ath9k_htc: Failed to initialize the device [ 302.735813][ T5825] usb 2-1: ath9k_htc: USB layer deinitialized [ 302.757960][ T5895] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 302.772075][ T5895] (id 0x00) [ 302.844632][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'. [ 302.845815][ T9805] fuse: Invalid uid '00000000000000000004' [ 302.855595][ T5895] rc_core: IR keymap rc-imon-pad not found [ 302.882150][ T5895] Registered IR keymap rc-empty [ 302.898181][ T5895] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 302.912168][ T5895] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 302.950792][ T5895] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 302.992417][ T5895] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input40 [ 303.019935][ T5895] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:60> initialized [ 303.657469][ T5895] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 303.797548][ T5895] usb 2-1: device descriptor read/64, error -71 [ 303.978093][ T5825] usb 5-1: USB disconnect, device number 73 [ 304.037429][ T5895] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 304.177427][ T5895] usb 2-1: device descriptor read/64, error -71 [ 304.297831][ T5895] usb usb2-port1: attempt power cycle [ 304.458255][ T9] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 304.477494][ T5825] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 304.637331][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 304.638437][ T9] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 304.652335][ T5895] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 304.654990][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 304.674835][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.674931][ T9] usb 4-1: can't read configurations, error -61 [ 304.702896][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.729044][ T5895] usb 2-1: device descriptor read/8, error -71 [ 304.735332][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.764994][ T5825] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 304.785250][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.795920][ T5825] usb 5-1: Product: syz [ 304.800979][ T5825] usb 5-1: Manufacturer: syz [ 304.805660][ T5825] usb 5-1: SerialNumber: syz [ 304.837580][ T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 304.925058][ T9898] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 304.951848][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 304.951868][ T29] audit: type=1326 audit(1776546759.712:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.1026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9099c819 code=0x0 [ 304.997606][ T5895] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 305.008807][ T9] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 305.019954][ T5895] usb 2-1: device descriptor read/8, error -71 [ 305.021986][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 305.035285][ T9] usb 4-1: can't read configurations, error -61 [ 305.047922][ T9] usb usb4-port1: attempt power cycle [ 305.056946][ T5825] usb 5-1: 0:1 : does not exist [ 305.066595][ T5825] usb 5-1: unit 5 not found! [ 305.073008][ T5825] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 305.104942][ T5825] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 305.149826][ T5895] usb usb2-port1: unable to enumerate USB device [ 305.193810][ T5825] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 305.219740][ T5825] usb 5-1: USB disconnect, device number 74 [ 305.264457][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.301703][ T9870] imon:send_packet: task interrupted [ 305.310782][ T9870] imon:send_packet: packet tx failed (-512) [ 305.343615][ T9870] imon:vfd_write: send packet #3 failed [ 305.382484][ T5915] usb 1-1: USB disconnect, device number 60 [ 305.449676][ T9] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 305.498759][ T9] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 305.516272][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 305.539762][ T9] usb 4-1: can't read configurations, error -61 [ 305.688896][ T9] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 305.718697][ T9] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 305.732530][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 305.741552][ T9] usb 4-1: can't read configurations, error -61 [ 305.758414][ T9] usb usb4-port1: unable to enumerate USB device [ 306.297525][ T5895] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 306.433282][ T9959] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1030'. [ 306.445232][ T9960] tipc: Enabling of bearer rejected, failed to enable media [ 306.478900][ T9960] capability: warning: `syz.2.1032' uses 32-bit capabilities (legacy support in use) [ 306.488580][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 306.497944][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.521777][ T5895] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 306.555305][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.574980][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.601412][ T5895] usb 5-1: SerialNumber: syz [ 306.623592][ T5895] hub 5-1:1.0: bad descriptor, ignoring hub [ 306.643728][ T5895] hub 5-1:1.0: probe with driver hub failed with error -5 [ 306.653281][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 306.683006][ T5895] usb 5-1: No union descriptors [ 306.772677][ T9959] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 306.927635][ T5895] usb 5-1: USB disconnect, device number 75 [ 307.947444][ T5915] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 307.957130][ T990] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 308.118365][ T5915] usb 1-1: device descriptor read/64, error -71 [ 308.141590][ C0] [ 308.143950][ C0] ======================================================== [ 308.151143][ C0] WARNING: possible irq lock inversion dependency detected [ 308.158333][ C0] syzkaller #0 Tainted: G L [ 308.164290][ C0] -------------------------------------------------------- [ 308.171462][ C0] ksoftirqd/0/15 just changed the state of lock: [ 308.177765][ C0] ffff88802bde6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 308.187468][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 308.195420][ C0] (tasklist_lock){.+.+}-{3:3} [ 308.195439][ C0] [ 308.195439][ C0] [ 308.195439][ C0] and interrupts could create inverse lock ordering between them. [ 308.195439][ C0] [ 308.214452][ C0] [ 308.214452][ C0] other info that might help us debug this: [ 308.222488][ C0] Chain exists of: [ 308.222488][ C0] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 308.222488][ C0] [ 308.235499][ C0] Possible interrupt unsafe locking scenario: [ 308.235499][ C0] [ 308.243794][ C0] CPU0 CPU1 [ 308.249153][ C0] ---- ---- [ 308.254510][ C0] lock(tasklist_lock); [ 308.258728][ C0] local_irq_disable(); [ 308.265460][ C0] lock(&dev->event_lock#2); [ 308.272636][ C0] lock(kbd_event_lock); [ 308.279470][ C0] [ 308.282897][ C0] lock(&dev->event_lock#2); [ 308.287726][ C0] [ 308.287726][ C0] *** DEADLOCK *** [ 308.287726][ C0] [ 308.295844][ C0] 1 lock held by ksoftirqd/0/15: [ 308.300773][ C0] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 308.310313][ C0] [ 308.310313][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 308.319664][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 308.325193][ C0] HARDIRQ-ON-R at: [ 308.329587][ C0] lock_acquire+0x106/0x350 [ 308.336614][ C0] _raw_read_lock+0x36/0x50 [ 308.343629][ C0] __do_wait+0xde/0x740 [ 308.350277][ C0] do_wait+0x1e7/0x510 [ 308.356848][ C0] kernel_wait+0xd6/0x1c0 [ 308.363673][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 308.372073][ C0] process_scheduled_works+0xb5d/0x1860 [ 308.380115][ C0] worker_thread+0xa53/0xfc0 [ 308.387198][ C0] kthread+0x388/0x470 [ 308.393755][ C0] ret_from_fork+0x514/0xb70 [ 308.400849][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.408198][ C0] SOFTIRQ-ON-R at: [ 308.412606][ C0] lock_acquire+0x106/0x350 [ 308.419708][ C0] _raw_read_lock+0x36/0x50 [ 308.426705][ C0] __do_wait+0xde/0x740 [ 308.433360][ C0] do_wait+0x1e7/0x510 [ 308.440008][ C0] kernel_wait+0xd6/0x1c0 [ 308.446842][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 308.455242][ C0] process_scheduled_works+0xb5d/0x1860 [ 308.463305][ C0] worker_thread+0xa53/0xfc0 [ 308.470409][ C0] kthread+0x388/0x470 [ 308.476980][ C0] ret_from_fork+0x514/0xb70 [ 308.484076][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.491342][ C0] INITIAL USE at: [ 308.495652][ C0] lock_acquire+0x106/0x350 [ 308.502576][ C0] _raw_write_lock_irq+0x3d/0x50 [ 308.509938][ C0] copy_process+0x2b5e/0x4450 [ 308.517043][ C0] kernel_clone+0x284/0x8f0 [ 308.523953][ C0] user_mode_thread+0x110/0x180 [ 308.531209][ C0] rest_init+0x23/0x300 [ 308.537768][ C0] start_kernel+0x38a/0x3e0 [ 308.544677][ C0] x86_64_start_reservations+0x24/0x30 [ 308.552550][ C0] x86_64_start_kernel+0x143/0x1c0 [ 308.560071][ C0] common_startup_64+0x13e/0x147 [ 308.567429][ C0] INITIAL READ USE at: [ 308.572163][ C0] lock_acquire+0x106/0x350 [ 308.579514][ C0] _raw_read_lock+0x36/0x50 [ 308.586877][ C0] __do_wait+0xde/0x740 [ 308.593881][ C0] do_wait+0x1e7/0x510 [ 308.600792][ C0] kernel_wait+0xd6/0x1c0 [ 308.607990][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 308.616735][ C0] process_scheduled_works+0xb5d/0x1860 [ 308.625126][ C0] worker_thread+0xa53/0xfc0 [ 308.632565][ C0] kthread+0x388/0x470 [ 308.639477][ C0] ret_from_fork+0x514/0xb70 [ 308.646921][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.654527][ C0] } [ 308.657437][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 308.665570][ C0] ... acquired at: [ 308.669869][ C0] _raw_read_lock+0x36/0x50 [ 308.674525][ C0] send_sigurg+0x12b/0x420 [ 308.679095][ C0] sk_send_sigurg+0x6c/0x2e0 [ 308.683842][ C0] queue_oob+0x42c/0x4f0 [ 308.688241][ C0] unix_stream_sendmsg+0xcb1/0xe80 [ 308.693511][ C0] ____sys_sendmsg+0x972/0x9f0 [ 308.698441][ C0] ___sys_sendmsg+0x2a5/0x360 [ 308.703291][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.708415][ C0] do_syscall_64+0x15f/0xf80 [ 308.713168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.719222][ C0] [ 308.721525][ C0] -> (&f_owner->lock){....}-{3:3} { [ 308.727070][ C0] INITIAL USE at: [ 308.731295][ C0] lock_acquire+0x106/0x350 [ 308.738040][ C0] _raw_write_lock_irq+0x3d/0x50 [ 308.745215][ C0] __f_setown+0x67/0x370 [ 308.751699][ C0] generic_setlease+0xacf/0xfd0 [ 308.758800][ C0] do_fcntl_add_lease+0x35e/0x470 [ 308.766098][ C0] fcntl_setlease+0x123/0x180 [ 308.773034][ C0] do_fcntl+0x8b3/0x1a20 [ 308.779519][ C0] __se_sys_fcntl+0xc8/0x150 [ 308.786355][ C0] do_syscall_64+0x15f/0xf80 [ 308.793192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.801352][ C0] INITIAL READ USE at: [ 308.806018][ C0] lock_acquire+0x106/0x350 [ 308.813315][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 308.821212][ C0] send_sigio+0x38/0x370 [ 308.828127][ C0] kill_fasync+0x24d/0x4d0 [ 308.835216][ C0] __start_tty+0x18c/0x220 [ 308.842307][ C0] start_tty+0x26/0x50 [ 308.849052][ C0] n_tty_set_termios+0xa7c/0x10a0 [ 308.856748][ C0] tty_set_termios+0xdb3/0x1800 [ 308.864288][ C0] set_termios+0x566/0x710 [ 308.871397][ C0] tty_mode_ioctl+0x4a6/0x7d0 [ 308.878758][ C0] tty_ioctl+0x9c5/0xde0 [ 308.885725][ C0] __se_sys_ioctl+0xfc/0x170 [ 308.892995][ C0] do_syscall_64+0x15f/0xf80 [ 308.900263][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.908836][ C0] } [ 308.911667][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 308.920840][ C0] ... acquired at: [ 308.924965][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 308.930318][ C0] send_sigio+0x38/0x370 [ 308.934713][ C0] kill_fasync+0x24d/0x4d0 [ 308.939296][ C0] __start_tty+0x18c/0x220 [ 308.943872][ C0] start_tty+0x26/0x50 [ 308.948095][ C0] n_tty_set_termios+0xa7c/0x10a0 [ 308.953282][ C0] tty_set_termios+0xdb3/0x1800 [ 308.958284][ C0] set_termios+0x566/0x710 [ 308.962851][ C0] tty_mode_ioctl+0x4a6/0x7d0 [ 308.967678][ C0] tty_ioctl+0x9c5/0xde0 [ 308.972075][ C0] __se_sys_ioctl+0xfc/0x170 [ 308.976846][ C0] do_syscall_64+0x15f/0xf80 [ 308.981592][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.987633][ C0] [ 308.989944][ C0] -> (&new->fa_lock){....}-{3:3} { [ 308.995319][ C0] INITIAL USE at: [ 308.999453][ C0] lock_acquire+0x106/0x350 [ 309.006023][ C0] _raw_write_lock_irq+0x3d/0x50 [ 309.013130][ C0] fasync_remove_entry+0xf1/0x1c0 [ 309.020238][ C0] sock_fasync+0x85/0xf0 [ 309.026577][ C0] __fput+0x890/0xa60 [ 309.032629][ C0] task_work_run+0x1d9/0x270 [ 309.039381][ C0] exit_to_user_mode_loop+0xed/0x480 [ 309.046749][ C0] do_syscall_64+0x33e/0xf80 [ 309.053404][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.061360][ C0] INITIAL READ USE at: [ 309.065922][ C0] lock_acquire+0x106/0x350 [ 309.072924][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 309.080621][ C0] kill_fasync+0x199/0x4d0 [ 309.087535][ C0] sock_wake_async+0x137/0x160 [ 309.094816][ C0] sctp_data_ready+0x3c1/0x550 [ 309.102082][ C0] sctp_ulpq_tail_event+0x7be/0xb10 [ 309.109773][ C0] do_ulpq_tail_event+0x136/0x1a0 [ 309.117302][ C0] sctp_datamsg_put+0x3ec/0x540 [ 309.124654][ C0] sctp_chunk_free+0x4a/0x60 [ 309.131744][ C0] __sctp_outq_teardown+0x7ab/0x9a0 [ 309.139439][ C0] sctp_association_free+0x240/0x7f0 [ 309.147224][ C0] sctp_do_sm+0x3f6b/0x5cf0 [ 309.154249][ C0] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 309.162050][ C0] inet_shutdown+0x271/0x390 [ 309.169156][ C0] __x64_sys_shutdown+0x13f/0x1a0 [ 309.176681][ C0] do_syscall_64+0x15f/0xf80 [ 309.183775][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.192166][ C0] } [ 309.194901][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 309.203823][ C0] ... acquired at: [ 309.207867][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 309.213220][ C0] kill_fasync+0x199/0x4d0 [ 309.217797][ C0] __start_tty+0x18c/0x220 [ 309.222372][ C0] start_tty+0x26/0x50 [ 309.226596][ C0] n_tty_set_termios+0xa7c/0x10a0 [ 309.231771][ C0] tty_set_termios+0xdb3/0x1800 [ 309.236774][ C0] set_termios+0x566/0x710 [ 309.241344][ C0] tty_mode_ioctl+0x4a6/0x7d0 [ 309.246181][ C0] tty_ioctl+0x9c5/0xde0 [ 309.250585][ C0] __se_sys_ioctl+0xfc/0x170 [ 309.255335][ C0] do_syscall_64+0x15f/0xf80 [ 309.260080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.266122][ C0] [ 309.268423][ C0] -> (&tty->flow.lock){....}-{3:3} { [ 309.273872][ C0] INITIAL USE at: [ 309.277914][ C0] lock_acquire+0x106/0x350 [ 309.284309][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.291394][ C0] start_tty+0x1b/0x50 [ 309.297355][ C0] n_tty_set_termios+0xa7c/0x10a0 [ 309.304265][ C0] tty_set_termios+0xdb3/0x1800 [ 309.311023][ C0] set_termios+0x566/0x710 [ 309.317341][ C0] tty_mode_ioctl+0x4a6/0x7d0 [ 309.323930][ C0] tty_ioctl+0x9c5/0xde0 [ 309.330064][ C0] __se_sys_ioctl+0xfc/0x170 [ 309.336542][ C0] do_syscall_64+0x15f/0xf80 [ 309.343028][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.350816][ C0] } [ 309.353464][ C0] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 309.362292][ C0] ... acquired at: [ 309.366246][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.371594][ C0] stop_tty+0x2f/0x140 [ 309.375818][ C0] kbd_event+0x2e80/0x4080 [ 309.380380][ C0] input_handle_events_default+0xd4/0x1a0 [ 309.386253][ C0] input_pass_values+0x288/0x890 [ 309.391340][ C0] input_event_dispose+0x330/0x6b0 [ 309.396602][ C0] input_inject_event+0x1dc/0x330 [ 309.401779][ C0] evdev_write+0x325/0x4c0 [ 309.406346][ C0] vfs_write+0x29a/0xb90 [ 309.410739][ C0] ksys_write+0x150/0x270 [ 309.415226][ C0] do_syscall_64+0x15f/0xf80 [ 309.419982][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.426069][ C0] [ 309.428372][ C0] -> (kbd_event_lock){....}-{3:3} { [ 309.433647][ C0] INITIAL USE at: [ 309.437606][ C0] lock_acquire+0x106/0x350 [ 309.443837][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.450767][ C0] vt_reset_unicode+0x2b/0x160 [ 309.457258][ C0] reset_vc+0x68/0x1b0 [ 309.463057][ C0] vc_init+0x70/0x4a0 [ 309.468843][ C0] con_init+0x377/0x6a0 [ 309.474718][ C0] console_init+0x10b/0x4a0 [ 309.480936][ C0] start_kernel+0x230/0x3e0 [ 309.487151][ C0] x86_64_start_reservations+0x24/0x30 [ 309.494327][ C0] x86_64_start_kernel+0x143/0x1c0 [ 309.501156][ C0] common_startup_64+0x13e/0x147 [ 309.507810][ C0] } [ 309.510407][ C0] ... key at: [] kbd_event_lock+0x18/0xa0 [ 309.518284][ C0] ... acquired at: [ 309.522157][ C0] _raw_spin_lock+0x2e/0x40 [ 309.526830][ C0] kbd_event+0xd6/0x4080 [ 309.531237][ C0] input_handle_events_default+0xd4/0x1a0 [ 309.537108][ C0] input_pass_values+0x288/0x890 [ 309.542194][ C0] input_event_dispose+0x330/0x6b0 [ 309.547462][ C0] input_inject_event+0x1dc/0x330 [ 309.552643][ C0] evdev_write+0x325/0x4c0 [ 309.557208][ C0] vfs_write+0x29a/0xb90 [ 309.561628][ C0] ksys_write+0x150/0x270 [ 309.566107][ C0] do_syscall_64+0x15f/0xf80 [ 309.570850][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.576891][ C0] [ 309.579194][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 309.584746][ C0] IN-SOFTIRQ-W at: [ 309.588699][ C0] lock_acquire+0x106/0x350 [ 309.594848][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.601691][ C0] input_inject_event+0xa4/0x330 [ 309.608271][ C0] led_trigger_event+0x138/0x210 [ 309.614838][ C0] kbd_bh+0x1c6/0x2e0 [ 309.620452][ C0] tasklet_action_common+0x2da/0x4b0 [ 309.627454][ C0] handle_softirqs+0x22a/0x840 [ 309.633852][ C0] run_ksoftirqd+0x36/0x60 [ 309.639894][ C0] smpboot_thread_fn+0x541/0xa50 [ 309.646456][ C0] kthread+0x388/0x470 [ 309.652149][ C0] ret_from_fork+0x514/0xb70 [ 309.658407][ C0] ret_from_fork_asm+0x1a/0x30 [ 309.664801][ C0] INITIAL USE at: [ 309.668670][ C0] lock_acquire+0x106/0x350 [ 309.674718][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.681457][ C0] input_inject_event+0xa4/0x330 [ 309.687939][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 309.694941][ C0] led_trigger_set+0x535/0x960 [ 309.701244][ C0] led_trigger_set_default+0x260/0x2a0 [ 309.708240][ C0] led_classdev_register_ext+0x787/0x9c0 [ 309.715436][ C0] input_leds_connect+0x517/0x790 [ 309.722003][ C0] input_register_device+0xce0/0x1140 [ 309.728920][ C0] atkbd_connect+0x71e/0xa10 [ 309.735050][ C0] serio_driver_probe+0x82/0xb0 [ 309.741436][ C0] really_probe+0x267/0xaf0 [ 309.747483][ C0] __driver_probe_device+0x18c/0x320 [ 309.754309][ C0] driver_probe_device+0x4f/0x240 [ 309.760881][ C0] __driver_attach+0x34c/0x640 [ 309.767201][ C0] bus_for_each_dev+0x23b/0x2c0 [ 309.773606][ C0] serio_handle_event+0x1af/0xf80 [ 309.780257][ C0] process_scheduled_works+0xb5d/0x1860 [ 309.787351][ C0] worker_thread+0xa53/0xfc0 [ 309.793481][ C0] kthread+0x388/0x470 [ 309.799088][ C0] ret_from_fork+0x514/0xb70 [ 309.805221][ C0] ret_from_fork_asm+0x1a/0x30 [ 309.811538][ C0] } [ 309.814023][ C0] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 309.823021][ C0] ... acquired at: [ 309.826818][ C0] mark_lock+0x115/0x190 [ 309.831332][ C0] __lock_acquire+0x689/0x2cf0 [ 309.836277][ C0] lock_acquire+0x106/0x350 [ 309.840955][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.846316][ C0] input_inject_event+0xa4/0x330 [ 309.851450][ C0] led_trigger_event+0x138/0x210 [ 309.856562][ C0] kbd_bh+0x1c6/0x2e0 [ 309.860725][ C0] tasklet_action_common+0x2da/0x4b0 [ 309.866193][ C0] handle_softirqs+0x22a/0x840 [ 309.871136][ C0] run_ksoftirqd+0x36/0x60 [ 309.875711][ C0] smpboot_thread_fn+0x541/0xa50 [ 309.880831][ C0] kthread+0x388/0x470 [ 309.885079][ C0] ret_from_fork+0x514/0xb70 [ 309.889831][ C0] ret_from_fork_asm+0x1a/0x30 [ 309.894749][ C0] [ 309.897050][ C0] [ 309.897050][ C0] stack backtrace: [ 309.902943][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.902962][ C0] Tainted: [L]=SOFTLOCKUP [ 309.902965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 309.902973][ C0] Call Trace: [ 309.902980][ C0] [ 309.902986][ C0] dump_stack_lvl+0xe8/0x150 [ 309.903007][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 309.903020][ C0] mark_lock_irq+0x3d2/0x420 [ 309.903032][ C0] mark_lock+0x115/0x190 [ 309.903042][ C0] __lock_acquire+0x689/0x2cf0 [ 309.903058][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 309.903073][ C0] ? finish_task_switch+0x41f/0xbe0 [ 309.903088][ C0] ? input_inject_event+0xa4/0x330 [ 309.903103][ C0] lock_acquire+0x106/0x350 [ 309.903116][ C0] ? input_inject_event+0xa4/0x330 [ 309.903130][ C0] ? rcu_is_watching+0x15/0xb0 [ 309.903141][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 309.903155][ C0] ? input_inject_event+0xa4/0x330 [ 309.903167][ C0] input_inject_event+0xa4/0x330 [ 309.903180][ C0] ? led_trigger_event+0x4b/0x210 [ 309.903192][ C0] led_trigger_event+0x138/0x210 [ 309.903202][ C0] kbd_bh+0x1c6/0x2e0 [ 309.903216][ C0] tasklet_action_common+0x2da/0x4b0 [ 309.903228][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 309.903238][ C0] handle_softirqs+0x22a/0x840 [ 309.903253][ C0] ? schedule+0x90/0x360 [ 309.903263][ C0] ? run_ksoftirqd+0x36/0x60 [ 309.903273][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 309.903282][ C0] run_ksoftirqd+0x36/0x60 [ 309.903291][ C0] smpboot_thread_fn+0x541/0xa50 [ 309.903301][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 309.903311][ C0] kthread+0x388/0x470 [ 309.903323][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 309.903332][ C0] ? __pfx_kthread+0x10/0x10 [ 309.903342][ C0] ret_from_fork+0x514/0xb70 [ 309.903369][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 309.903382][ C0] ? __switch_to+0xc79/0x1410 [ 309.903395][ C0] ? __pfx_kthread+0x10/0x10 [ 309.903406][ C0] ret_from_fork_asm+0x1a/0x30 [ 309.903419][ C0] [ 310.163521][ T990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.173251][ T990] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.185663][ T990] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.206388][ T990] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 310.215628][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 310.223855][ T990] usb 5-1: Product: syz [ 310.228549][ T990] usb 5-1: Manufacturer: syz [ 310.233147][ T990] usb 5-1: SerialNumber: syz [ 310.287597][ T5915] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 310.427501][ T5915] usb 1-1: device descriptor read/64, error -71 [ 310.449894][ T990] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 310.537917][ T5915] usb usb1-port1: attempt power cycle [ 310.714059][ T990] usb 5-1: USB disconnect, device number 76 [ 310.723430][ T990] usblp0: removed [ 317.560390][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.566842][ T1308] ieee802154 phy1 wpan1: encryption failed: -22