last executing test programs: 9.559432484s ago: executing program 3 (id=730): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x4, {0x4, 0x0, "8200"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) syz_emit_ethernet(0x83, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) epoll_create(0x1) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10}, 0x48) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32=r4], 0x2c}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.891399186s ago: executing program 4 (id=732): r0 = socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000300)) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000ac0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0xe) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r9, 0x40049409, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 7.355681536s ago: executing program 0 (id=733): unshare(0x20040600) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffef5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x48}, {0x20}, {0x6}]}, 0x10) r10 = fcntl$dupfd(r8, 0x0, r7) sendmmsg$unix(r10, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f08c", 0x2}], 0x1}}], 0x777ee7a793ff, 0x0) setuid(r1) 7.191842766s ago: executing program 2 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'veth0_virt_wifi\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b14c1b05d6dc049acbd6ed05a520dbb3c78a000000000000051d53a11", @ANYRES32=r2, @ANYBLOB="30003300a0000000ffffffffffffffffffffffff505050505050000000008c1000003ff2a0163ce22ae612e08360dbd20800260000000000"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) socket$inet6(0xa, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x48) getsockname$packet(r4, &(0x7f00000004c0), &(0x7f0000000500)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240", @ANYRESOCT], 0x64}}, 0x0) 6.930989038s ago: executing program 2 (id=736): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000ffa10000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 6.599319983s ago: executing program 2 (id=738): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054634b00c6054790fe6059c1415d68cba10701000004000904"], 0x0) write$char_usb(r0, &(0x7f0000000200)="0709fe9a939c654fec4198cb", 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 6.423356815s ago: executing program 3 (id=739): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000012, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6e}}, './file0\x00'}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5ba000000}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xfffbfffe}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68", 0x5d}, {&(0x7f0000000640)="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", 0x116}], 0x2}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400), 0x0, 0x801) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r7, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES64=r9, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="75a2078ef747afdb17207e2ec6b83e3ae72f2350db19e202c8e7add8d583fa1f5c3de850f1b4302d67afb3114cd6efa8a094ca1d83411e6e9a7d4eb37a554173d7ce65eeb1d25856d8dba92f22d2dcb6819d9f"]) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) 6.254622s ago: executing program 0 (id=740): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/103, 0x67, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x3a0, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) sendfile(r2, r3, 0x0, 0x8000002b) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x18, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}}, 0x0, 0x0, 0x0, 0x0, "7d871e232913d8b74ad4e86faa6e51d269a774e58a246edcce872e265ef2a43b378ff4398bd191624e96066fef42f65ce182b92f8f1d722cf2e865283c4038a20c3503d8e09ae10be133cb0576bf2af0"}, 0xd8) syz_io_uring_setup(0x317a, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x2, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB='1-'], 0x23) 5.395401982s ago: executing program 3 (id=742): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6c, 0x43, 0xa6, 0x8, 0x5d1, 0x9003, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0xcc, 0x98}}]}}]}}, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999d", 0xb, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 5.108345359s ago: executing program 0 (id=743): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x55, 0x93d, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@local, 0x86dd}}}]}, 0x58}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="3b0200", @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000680)="98", 0x1}], 0x1}}], 0x1, 0x24008890) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @local}, r6}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, 0x0) r7 = semget$private(0x0, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="05003355c9ac7c400800000400"/27, @ANYRES64=r8, @ANYRES64=r9/1000+60000, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x4000010) semtimedop(r7, &(0x7f0000000280)=[{0x0, 0x8a, 0x1000}, {0x3, 0x3}], 0x2, 0x0) 4.775440767s ago: executing program 4 (id=744): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r2, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f9501020101090212000100000000090400195f3daf63a7b2ce6d99c58bf9a254fa842597c776ac15a9c09d5ee97be329eb44d5a1e8bcba47cf815cf900"/83], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x80, 0x80}, 0x48) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x900, 0x0, 0x34424752}}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=@nfs={0x90, 0x24, {0x3, 0x8, 0x0, 0x80, "92cf0747ad50520b639027fd874b845fbdaf0624befffa3dcc8847f2aa9ef4a1f3bd381fb12a50b13c2c3eff7d5b351e318b9d7468041e7cfb89bf41976217abdaae69f21b033e85712213c89c4365b32eb623befc90e31988a6d5ad3da52d81d4aaf0461f642431fee9e2d88e996e2b60f30d36d4d710804c1ee0ac829248ad"}}, 0x500c0) 3.920756084s ago: executing program 3 (id=746): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.537716109s ago: executing program 2 (id=747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f50506000000000000008500000005000000bf0900000000000055090100800004009500000000000000bf91000000000000b7020200000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xffc, &(0x7f0000001e40)=""/4092}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r4, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(r8, &(0x7f0000000200)={[0x5]}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r10 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r10, 0xc0104307, &(0x7f0000000080)=0x3) 3.480762108s ago: executing program 0 (id=748): socket(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x4b65cb8da2791066, 0x4007, @fd_index=0x7, 0x9, &(0x7f0000000300)=""/104, 0x68, 0x19}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$pid(0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) 3.163317489s ago: executing program 2 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000200), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r6, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x1}], 0x1, 0x1800, &(0x7f00000007c0)='b'}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.079426641s ago: executing program 1 (id=750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xffffffff, 0xffffffff, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0xc0045009, &(0x7f0000000380)) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) personality(0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000a80)={'xfrm0\x00', @local}) ioctl$SIOCGSKNS(r7, 0x894c, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000180)=0x1c) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000000)) unshare(0x24000000) unshare(0xc000000) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 2.702938291s ago: executing program 4 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41002004}, 0xc, &(0x7f00000000c0)={&(0x7f0000004680)={0x1224, r1, 0x200, 0x1000, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0x104c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cea1d41c9390867d01514b001cbc757f010ddb11"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "3863ea703d04cb0712413adb8d0e4a874a0aec25dbce65be9b2bb53bff355ea45263d94d453c894a6d2eca2502336d4a05c0cf27a93a10a82b079f80da3071343a4443216603fdd5fedb1522517a37fa86e1dc9098d743cf2a57775cf504cb7e6bc096d343aa5c0086af0c993723f0b9e352c4fa718f66b26a4a5c01489b24f0b2408adcc90e777e2684c230da03c2036a832b4b46d21fc48f3f2fa36b32db224dd143fe2c035922ecb8203370719fdcf0834af7b2ae3216388f283a288db7daac893307245c731bb91e319e42182d237c610db541e0471fe5e64a8c93ba95cc891c299051c3f6ffb554bbdf4ab99a15f23753e65b75fe80bbcaca8779d1a60a72af45c0cfe01ccd65b89b30fd62e31223e72d8475591df952a73b03b0a8ccd9a42325abd2a976c37dad36d0f5355b8ddeb042a237644e753bca6bc4c7f82654f50dfe74848eaaa50f77e771f38083cbda691f4584928591c09795c02862643cfebe14344b8bc50493734cc8ce72d683e34e558e28c7ab76c8ac7901d77354f1d363ca1cc7aeceda1ee3db606d53d950ea44fce7d338b9eebd748c3d6a46b906b9796e70dfa5e4312e7c4857d929367a6be4987468a60467cf6ac323889b11b52b96d91799ec34fa910ae0f271503cbc064cb228b2f1035ce61ce3320b768a75d511dd092f127822bb658c6eec2df11584928c0fb296dfea5f622b7577c236cdcb55a6e1e2b787031b69cadf55766a9607509371c9e673b7a62fb2cc7bb975f4956839b49112677796720cdec7db53d4763062e73ef9489c99a3552f1697c223c470803beb06062291ce5af241c849725411ca74f4859b86b7931edc33f652bb2ec4d95d4a4f9997d3fa7222ce73eaae47ebe3f003b149612f49ae4bfe2c1629e6bd9c9bcab11119a492d27b3444bd5ab2a38b7457d856f9e2bd64b691df8814952e6562ebd10eb8c9d396deb7a14040e7960a064822740f89a6d83d5ba4a7a23b01b8db1fc4a78a17db03fb477954f408f0904ba6ff9f9e44ed0b288d9541eefd91287c36296f2ae0a84cbe36cd79f4f8005d24dc4fd60862ea08f8a0c8503fe7c891b9130cb9cba37f959ce6169e2750164d599014cdbf9244a3f26d0c5017203b57b8ce3d022cd6d8cef5e5a9dcf255a31d7b94d9314d5ee1ffa0985da8dcf09fc0b4ab34f8fdf155829fe9b0acb45b1756dbb1e987c1ed5c56d3c3e8d2bb229ad299551153003f53c31b3e160976a25b494fb66748ec3f0ffe22cb9b4d8ed16d96b59a7974c70f6619a4815abaf4da295fd4ff18274de3105799735a98b268b1180f02027e6670c92f573714aa637eb473eaf47163cf4f5e94bf411bde3ffefcca55920e260783d56fa7b032288bf0908fe0a3ca3a703790dcda6e9c6a2858d30c57fa75dabd82204e797c67e62b33fa79fcb4f0182d9e6de5b604f0d3336e67713cc9c1800584aa41e121d742bb237f3cf9601773883666a31e37f8ccc9bd2a2de646c40e5fc972361543aac95764d26309a9d199e849ba0bd96b6f1eb10333ad4d8d0dfcecb2eb4febcd8a722c6f7daf734b8a1f585f1dcaf961207d780902f8399338eda22bb73cac4a2e7fda0bb60c9b80c8c9fa30f11f3fd4b40b9fdedc10db611edfdf5e4cedc5fe1e6fc3be3455d4afe2160d6a64962f3c437e7e655a654ada053bb91c3e039962bccdedc432260c959d8835fa8fa5624d8ad0d9285711bd3a8e0936c9c28163332bca252ae1ecce06dc70565032216dd4c65c0e488d2b5992b4e4df030a0c111e2cf61dcbe4476330506ebc7be6d6e058057c7b59995c65cec3a9e200354c9d584530bbc9786eb95e3ed009ac5de89d86c8797dbddb5b5cbd08a28b643962eb978cedd5b94d76d4e6e563534dd59bc3aa8499c6e98d4f9a3318fc7a91957841a7e56417b26058899c64155ed7bbe3f0b31ec95af40036c27f0456c2d7f5b9b1100047ce8e575b884d61f880e7ceaaaab89b459f15636edad982f59fd3fee705e9b1a66142fb57a5b5936b3dc05dec8623a6fa60637fe90009a7e00763ed037fdfe8f8d996bc36163462c729157312c6813578ef8797cc7b1ee99ec888beabe4795700723571a6c825837a4946c8e54cfe80ba9c92c19786487ba47fbd69d6a2c78ebb3638a7612b72b902c7f05ba3806cb7df5ecee3f34965aeb7df85aa3e0df50268fa30cd8351d63192f94095f58eb836842eb794ce00c7854553df1c0498d0ae546a0e4cbcfe26f878d91b4014d18702b446a9c6a57049c0a3e6739c4e172b91afccc1638a048a4c469ae8774c7c317b19d27e239d214b1d6a9909199c05c7f6daecd931f996d9f28d8c297b13f1a9ddca04f8bc3da14d5cc0c2f31de3ed5481f3aa72796d17ac726b3e59ded852750762aa94f048e4b2b17f1e291049ba1096d369dd12f2348a280040242ee7659f5c6002dc8ff5ca4f2205f2e1521f5cf4010f83a593324c44e7e3cfbaa8fd809884f6de4e454d08e60562d995348ee36a6e4379d1e79546695e880ee3539913e6450d21919df23c30ae721e06f3f4053d39a4a490f4f088e7eee4b16e2b0d8c97c5dc9052428bbde0df675cbbc2f828ba835caf10a463d4dd37dc96860089d95e2cbd9cf739a64eb30ad87ce3285233fd7e1f7f2af02ad6c1b87c1fcd4a7ca71da70c09661ec858c7342e46d03414a5c26236e34becdcfb5f1b2716f7f1b623ce407397c8358db79f7b7ef1c68b66ab7e97b284526e912487b1af0d978ee18e72ed48dc37c114a12fa8edfcd4d1208037d91f140aec7ae549c71057d90c00fcd8d9f0c86a13d47138e1ead835dedff765e62bef593718432b48a2ecc18bfcd7f73aa025e7136d0bce3987b6cda1aee6313fe538d9a6ea029b5243233782bab18a65cea7f8bae89eee4966ecfce7d278fbde1fa4ddc8b3279ef8d7889218b9763bb5282c3b5d6f0e7286b66d6f191086e397381102f90ab0405b28ae24a00ff7a8741fef70a72bab4f81b799005da351681a62f54458641908b6d2c8d787a8beeadcdced631d3a8f85789702c90c5771aa85a23dd6e9709e89592d6fdcc5c2cddb4690ee7719eda381a56f0632fc8987d222aa81e48434b4b018559932da5ceead32dd5c4af7dfdbe42b9822a9e6a60c2022ba0940c2c59eed7643d573214e52fb50ac9d38a80ec502b36119707611c8f2b2c6c9f964aaae63c66d135349d089d430eb23ac97d9669feb0a9609a5795159ebe4139f542a1a7e3978e095a6f323ee94e97a29228b9cb31b706c33803ccb475dcfabb9eaee72c7ee8a8a1ae34d72d55ce1fb34d392034aa3eab8dbb174ae774b39cdc06da9b3f6555571166d99a90bd97587564f01f1b6a335bee2b3847965eceef0d705ee9409d8909aec99708997763bf393379495c77bd5d8bccc8de5f78f806de153a6227e692a062ed798ef378616f47f61a7507ef1b5e831d4ed7d5038f6a192dbeecadb5d3bf506bcd5e8b390bfa2bb8ad3e7bf889439c2840d5a6cccb2074c74cea093614a666d268ec3b42d2b2028081a8cd31cbd130a87c610b43234f88a14a36ee029ca580b279adf0866498eff871b4929e1b7349fbaf44e2087b43d923dbb61184ef9a224eb34ec3fa2c81cd4b3f55ac26b364db2b5262bfd0da9f467a308d464c3724979347d14a5372539bf8e5b2654b1c6bf69f9dab258004c3a334c16bd4bec8fab44d8896ce9187020e02e7978ed7d0c2312c453cbe8f1124f2d41529c43f9c66c409d640edf3493e6aabfa4dcde6fc58c82bf116b68b71a19bb465e328d9e0367f07542c89b1fbcbbca516218a834d699203e5d7b876f9719ed8a12e8aca79fda8840cb96f16f276648be863e4c92f63b52aa0e3d03168503fa1fa4db9d91516cc06b42f83649ba1625870453192b641472c4983849566a020998a7a3e6008b99d9cd55a2574520ab1177b82513502ffd5495ae6c02b3e82d13333ccc627f7be90efba8a180fde3fe3571189f8cb071a389cbf8540ef9ac08de9a52e3d00541a96e0107227caaaae19c75680a88c5dde2c08bfc70c76b011f9e6a3cbfecc1c51a093983afe24324f8d10db2b5a856839951be29e257cd2c10740b48f8b2665ea1c906e7415fd26c3b72b8de05b7b465f9ec7d68ac6caee04cd198326bcb68fadf6fcf31e7c849b34eec4d4aa8d57857df186524ba13d4ed7c297405586efea5ec07bae76955fcf7ee69ef7bc88be165828d0dba3182e05fff6c36529016dc2de3d4c333a5b33f09193a8fb46b56726a0d384e503a88b7b69b69cba982bc433192eb0ab4cfbe5f4be963b1e925959be9bd6dc74aa5da4de6b387004294834f4636ba2a7e61fcc155a3b8e61bfb54f6b83e6e1c56156e330430730311ab01d617dec9178eac813919d410f92625ff8d194b313411bc54b0a235f540e44934521de90a5a6a05d611fa01a7b9b465a1a4f664d4fd87a3369781b6358c6ecb03a2f8a78485aa688420ea00c36a650a64e8b31157f031e54f08c6d3df7a8c42c92afedf2d6a910de492e8a0da2dbf861d912863d94a818ae71484e69b020b959565249cb7a1d20dd384f4ceaaa3ecf2d67b21b8b15a85d05a674c2430bb8bbfc1514ea61ff21b9a6615c70abe10133100dc68afa2e62f9c5cce58c55f99c1420a5ada5b837b16eb59447281edcce452b793dd52d148863b3f56793873769995cc347672fe385d3b1502b32f710d3e8e267a8b99e0c868817782c450c35dc2b88da56379a9b0158c5e284929b877572bd765ea89a3624fd803eb3b236cb89d0c268a26f31887d66901755cb4acad65f7996350727eb8c76cb8be3f0d34e38616e51d8e05607d9f08a01a95b6274e2cfb7b754581737dd9b8623128c99a164e3610a59221125f12ae8ff9e9624947851507a70dbe6a2ada5979e6b2860a17edac48e2ab319c5cf964ce0c0d55f44eb7b4eb18ff755ae18429dbff9569d9f29b9e58351debbe989ce4a2c6a3bfdc0ec14374274b3b23879f8749476298a2f07cde9afbbbd87ed3cef7e6101d4413a94197ba6239f2c0a7362ac047c09cf5f22553505c80e40cb9b1db383645e227ef3f257732b6037fb86ae01c74011f65c49d556a545d605c146e1cc0819bfedf77c9182bf7b29cc7faeb9d4314c4b3f562f9136f09f8d69457320e384ed59fd455dd32a80f4894ba622cb1b7e729e3b4ef41e947df9a0a9cfc1ac32e0e62f8f44fdfda0d9d5cfc21b6920d3ba54b08ba39fa2ed292530f9901295bf27b0539c3c13c4dc42af1c456241b675f322edfa32d90b96725901718d42fb06a74e75940be7c8f503e47802e240030fb4fc242e26319bb56e4c084fa04490949c60059d33ffd00870c4674dcf07eebed6899823969508b6d720779a5b595831932e73dc662779a70c25e9522005db60c6af7b8471e3fd7fddefef19492b50aafb4156b3fe1e5fbce7215313f91890c43845b759db3af0176c6d8d5f69a52d0f6e37fbf3079f69e31d303ff468bb1caea1846fb98a1bad47305523517dee645e2b695b180dab4b0a74c5bc91e1a927164b18749166eebaa671e8146cc189e41b36b179bf1f37d6863d2797bd2057e9246f25f2555b6086c80701605ad3743f03585cf03801165d194bd1cf771e8da2d462e9e71f160ce62d8ea1d094b2c8e1cddbbe6db8c08252a1db7970fcfe041e76fa9821b3dc6d562acde43a8fdcd2ca14b9106ea910f5f94319c663301d4bdac3a728f9b6f21760ea51a2d58d3ef9f0de5d6cbe3c9be7e57327a3071a37f0e0f6acbb9f254b30ebf7d1cf4fbf11c652bc219c0eb"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb23}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xeab}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x911e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc89}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8916}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e08}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff69ad}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1224}, 0x1, 0x0, 0x0, 0x15}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="54040000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="2c047d80c20002"], 0x454}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) memfd_secret(0x0) 2.589501213s ago: executing program 4 (id=752): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000012, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6e}}, './file0\x00'}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5ba000000}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xfffbfffe}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68", 0x5d}, {&(0x7f0000000640)="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", 0x116}], 0x2}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400), 0x0, 0x801) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r7, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES64=r9, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="75a2078ef747afdb17207e2ec6b83e3ae72f2350db19e202c8e7add8d583fa1f5c3de850f1b4302d67afb3114cd6efa8a094ca1d83411e6e9a7d4eb37a554173d7ce65eeb1d25856d8dba92f22d2dcb6819d9f"]) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) 2.436714525s ago: executing program 0 (id=753): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xff, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace88ffffff000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.246950802s ago: executing program 0 (id=754): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x96f}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2c, 0x4, 0x0) sendmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x38}}, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00b7a12e572af097fc03a10d000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00d2dadd15df2c06a29a"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x5) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r6 = syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) 2.1092573s ago: executing program 1 (id=755): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xe, 0x80801) ioctl$USBDEVFS_CONNECTINFO(r2, 0x8004551a, &(0x7f0000001980)) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r1], 0x80}}, 0x8000) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) unshare(0x2a020400) r3 = getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x18032, 0xffffffffffffffff, 0x0) r6 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x401, 0x4}, 0x90) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80007f3, 0x2, 0x2000008, 0x1a8b, r4, 0x8, '\x00', 0x0, r7, 0x2, 0x0, 0x80000, 0x7}, 0x48) 1.978825488s ago: executing program 1 (id=756): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6c, 0x43, 0xa6, 0x8, 0x5d1, 0x9003, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0xcc, 0x98}}]}}]}}, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999d", 0xb, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 1.611147791s ago: executing program 4 (id=757): socket(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x4b65cb8da2791066, 0x4007, @fd_index=0x7, 0x9, &(0x7f0000000300)=""/104, 0x68, 0x19}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) 1.307211987s ago: executing program 2 (id=758): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054634b00c6054790fe6059c1415d68cba10701000004000904"], 0x0) write$char_usb(r0, &(0x7f0000000200)="0709fe9a939c654fec4198cb", 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 834.23935ms ago: executing program 3 (id=759): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f50506000000000000008500000005000000bf0900000000000055090100800004009500000000000000bf91000000000000b7020200000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xffc, &(0x7f0000001e40)=""/4092}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r4, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r7 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(r7, &(0x7f0000000200)={[0x5]}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r9, 0xc0104307, &(0x7f0000000080)=0x3) 659.526309ms ago: executing program 3 (id=760): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x1, @win={{0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x1e, 0x1, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x9, 0x0, 0x0, 0x80330}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x1a182000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="90000000", 0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x33, 0x3c, 0x23, 0x40, 0x3fd, 0xebbe, 0xd20d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xcd, 0x64}}]}}]}}, 0x0) 626.654783ms ago: executing program 4 (id=761): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0xff7f}]}, 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0xfffffffc) getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000040)=[{0x81}]}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x5, 0x146, [], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x1b9) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x2, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x8000, @mcast2}, 0x1c) syz_emit_ethernet(0x43, &(0x7f0000000300)={@empty, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x5, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x80, 0xff, '\a', "49a664d908e78d08d73acbcc3b6fca9edc26f5db8ff7b0058b5c8df8ea1b62a26a3b72ff8d0530f969f6"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a00080001"], 0x94}}, 0x0) fcntl$dupfd(r0, 0x406, r0) 625.95102ms ago: executing program 1 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0xfffffffc}, 0x48) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000480)) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x60}}, 0x20000000) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x12b400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async) dup(r4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r8, 0x4, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000921aca000000000000000000000000b605a8df3aa38183cbeb5cb757ee25be91cef5ba5a4cb86db21846f00d254f18bdc1ce362acc53cffeacd9005edd55f57b9cbbf1d139c1f8f95298092d6f00668b4f96fec4221489e2c433ecd4765f56a214863c4f9087a64711"], 0x20) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r10], 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000400)={0x3, 0x0, [{0x40000010, 0x0, 0x81}, {0x85f, 0x0, 0x4}, {0x0, 0x0, 0x80}]}) 167.200964ms ago: executing program 1 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 0s ago: executing program 1 (id=764): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x62, 0xe1, 0xba, 0x10, 0x10b9, 0x8000, 0xc0fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc8, 0x58, 0x7e, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x28, r3, 0xc39a95e20ac8eedb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}]}, 0x28}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x42}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc5}, 0x90) (async) close(0x3) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x453, 0x400, 0x70bd2a, 0x25dfdbfd, "2388dc351ba58d757355722111bb6b82a2266790759d239f7bb340e09f84afd88d5c4d5955bc9559", ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) sendto$inet(r1, &(0x7f0000000340)="addaf29de653e267187b2d9348071bc05ae6add7c5b05e19c444207ffc7cc164be7c3d096802bb6a1d83b944d580a2e928e9316021d50fbbebde49d8b44a4da0a222a6531ab5cef8c6e43687ba61dd7968679c3457475912d8597d0181e05106e7bf83c22d9c1b665d1b7c2a36680023f8df910c4d18b8af53ad2c755c0f9201354a519b992187488637b74b3bba41665645cc0fa52e785a65dc31f94de12ea25306876942b88078", 0xa8, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) r8 = epoll_create(0x5) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x10000019}) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000002c0)={@loopback, @loopback, @multicast1}, &(0x7f0000000400)=0xc) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f00000004c0)=0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): und UVC 0.00 device syz (468c:90ea) [ 199.039014][ T5231] usb 3-1: No valid video chain found. [ 199.214437][ T7447] netlink: 52 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.226515][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.387878][ T7450] sctp: [Deprecated]: syz.2.505 (pid 7450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.387878][ T7450] Use struct sctp_sack_info instead [ 199.447203][ T945] usb 5-1: USB disconnect, device number 26 [ 199.600599][ T58] usbhid 1-1:0.0: can't add hid device: -71 [ 199.621607][ T58] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 199.638332][ T5283] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 199.658681][ T58] usb 1-1: USB disconnect, device number 28 [ 199.866260][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 199.905569][ T5283] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 199.937870][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.965491][ T5283] usb 4-1: config 0 descriptor?? [ 199.987090][ T5283] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 200.383144][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 200.388022][ T5283] gspca_sonixj: reg_r err -32 [ 200.424561][ T5283] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 200.613133][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 200.661810][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 200.683257][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.701329][ T25] usb 2-1: Product: syz [ 200.719846][ T25] usb 2-1: Manufacturer: syz [ 200.748327][ T25] usb 2-1: SerialNumber: syz [ 200.762829][ T945] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 200.811831][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 200.857530][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 200.972571][ T945] usb 1-1: Using ep0 maxpacket: 16 [ 200.992768][ T945] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 201.031933][ T945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.083097][ T945] usb 1-1: config 0 descriptor?? [ 201.104872][ T945] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 201.533180][ T942] usb 3-1: USB disconnect, device number 34 [ 201.604940][ T7481] netlink: 52 bytes leftover after parsing attributes in process `syz.2.522'. [ 201.626058][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 201.905934][ T945] gspca_sonixj: reg_r err -32 [ 201.913691][ T945] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 202.022553][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 202.172544][ T942] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 202.223376][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 202.242851][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 202.268797][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.281938][ T25] usb 5-1: config 0 descriptor?? [ 202.290890][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 202.371163][ T5231] usb 4-1: USB disconnect, device number 25 [ 202.372169][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.435725][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 202.480907][ T942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.533575][ T942] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.553588][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.584344][ T942] usb 3-1: config 0 descriptor?? [ 202.590043][ T7484] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 202.917606][ T945] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 203.116290][ T25] gspca_sonixj: reg_r err -32 [ 203.132831][ T25] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 203.587816][ T25] usb 1-1: USB disconnect, device number 29 [ 203.792915][ T5231] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 204.012650][ T5231] usb 2-1: Using ep0 maxpacket: 8 [ 204.049774][ T5231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.086528][ T5231] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.106085][ T5231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.127533][ T5231] usb 2-1: config 0 descriptor?? [ 204.352675][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 204.386737][ T5231] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.425844][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.571658][ T25] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 204.586208][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.599608][ T25] usb 1-1: Product: syz [ 204.609002][ T25] usb 1-1: Manufacturer: syz [ 204.618257][ T25] usb 1-1: SerialNumber: syz [ 204.631785][ T25] usb 1-1: config 0 descriptor?? [ 204.664949][ T25] xillyusb 1-1:0.0: Failed to send quiesce request. Aborting. [ 204.684884][ T25] xillyusb 1-1:0.0: probe with driver xillyusb failed with error -5 [ 204.757724][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 204.796951][ T942] usbhid 3-1:0.0: can't add hid device: -71 [ 204.802602][ T7505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.528'. [ 204.821962][ T942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.838744][ T5231] usb 5-1: USB disconnect, device number 27 [ 204.865554][ T942] usb 3-1: USB disconnect, device number 35 [ 204.881560][ T25] usb 1-1: USB disconnect, device number 30 [ 205.000654][ T7524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.534'. [ 205.069133][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 205.344841][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 205.344860][ T29] audit: type=1326 audit(1723128258.109:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.390586][ T5282] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 205.392668][ T29] audit: type=1326 audit(1723128258.109:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.449467][ T29] audit: type=1326 audit(1723128258.119:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.559068][ T29] audit: type=1326 audit(1723128258.119:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.612586][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 205.628474][ T29] audit: type=1326 audit(1723128258.119:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.655582][ T5282] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 205.678698][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.697134][ T29] audit: type=1326 audit(1723128258.119:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.740729][ T5282] usb 4-1: config 0 descriptor?? [ 205.778425][ T29] audit: type=1326 audit(1723128258.119:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.793965][ T5282] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 205.838336][ T29] audit: type=1326 audit(1723128258.119:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.860810][ T5231] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 205.911312][ T29] audit: type=1326 audit(1723128258.119:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 205.941368][ T29] audit: type=1326 audit(1723128258.119:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x7ffc0000 [ 206.063667][ T5231] usb 1-1: Using ep0 maxpacket: 16 [ 206.076478][ T5231] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 528 [ 206.100165][ T5231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.130748][ T5231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.157808][ T5231] usb 1-1: Product: 쩔첮뢍껠献䳏챑勊㓉즒똪깡鷍놾㓫ꣀ参쳥ယᕊ㲞趽휙ӄ⑦揖〿鎈펭㙙볓晅೙ĕہ椒綳迱എ [ 206.213526][ T5282] gspca_sonixj: reg_r err -32 [ 206.224690][ T5282] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 206.240384][ T5231] usb 1-1: Manufacturer: 裨䊰鞺鷳鿞鱀䛶钯ᘱ⸩㶞踓淘⛉ឥ課탰䆄㲓ꎡ易콉畘鱦୑⒳餢蹸䑉傕驝ỷ弊蹬埯紋㐽耰陕᱅饯켜鲨槎瓒⻎븚敏綫㿖얢鑈㚲㯬儺ꏟ㾵⇢嫩玬䑔ἷ䱆霗쉻﫜ℏ낛杲 [ 206.345277][ T5231] usb 1-1: SerialNumber: ᙱ寉ࢸ裾塘颃໅﵉哠頯뛜嫓꼡戚ᇮ瞠ꣻ竭䪋咞婜䁣㌮ᅄ﨡ﻭ칳鈑勯跃줦䋦س요궦蒫絋ﰌ䛑顳符陘ډ쨗歮ᐓ赝㤨쯭싮瑩싴뺔幓嗱鮷炄鋴쮬栳艫猉⑶脈ﴈ퇵⿠ꄔ䂰﷙鉓挎칷䦮댮ᰊ [ 206.501226][ T5283] usb 2-1: USB disconnect, device number 27 [ 206.526071][ T5283] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 206.652789][ T5231] cdc_ncm 1-1:1.0: bind() failure [ 206.669685][ T5231] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 206.692548][ T58] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.709343][ T5231] cdc_ncm 1-1:1.1: bind() failure [ 206.727414][ T5231] usb 1-1: USB disconnect, device number 31 [ 206.882602][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 206.891661][ T58] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 206.900935][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.921168][ T58] usb 5-1: config 0 descriptor?? [ 206.964462][ T58] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 207.052543][ T5283] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 207.257762][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.269867][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 207.285322][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.299115][ T5283] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.309248][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.337065][ T5283] usb 3-1: config 0 descriptor?? [ 207.345241][ T7552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.513449][ T5231] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 207.702576][ T5231] usb 1-1: Using ep0 maxpacket: 16 [ 207.714541][ T5231] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 207.726483][ T5231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.737434][ T5231] usb 1-1: config 0 descriptor?? [ 207.748502][ T5231] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 207.798875][ T58] gspca_sonixj: reg_r err -32 [ 207.803775][ T58] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 208.150189][ T58] usb 4-1: USB disconnect, device number 26 [ 208.446009][ T5282] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 208.550470][ T5231] gspca_sonixj: reg_r err -32 [ 208.567274][ T5231] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 208.669351][ T5282] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 208.689886][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.698002][ T5282] usb 2-1: Product: syz [ 208.702286][ T5282] usb 2-1: Manufacturer: syz [ 208.719359][ T5282] usb 2-1: SerialNumber: syz [ 208.740892][ T5282] usb 2-1: config 0 descriptor?? [ 208.769899][ T5282] ch341 2-1:0.0: ch341-uart converter detected [ 209.222714][ T46] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 209.416259][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 209.424522][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 209.488898][ T46] usb 4-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 209.502157][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.519746][ T46] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 209.535822][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 209.542076][ T5280] usb 5-1: USB disconnect, device number 28 [ 209.556284][ T46] usb 4-1: Product: syz [ 209.575299][ T46] usb 4-1: Manufacturer: syz [ 209.592603][ T46] usb 4-1: SerialNumber: syz [ 209.629298][ T46] usb 4-1: config 0 descriptor?? [ 209.812328][ T5283] usbhid 3-1:0.0: can't add hid device: -71 [ 209.831150][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.831163][ T5282] usb 2-1: failed to receive control message: -110 [ 209.854330][ T5282] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 209.881360][ T5283] usb 3-1: USB disconnect, device number 36 [ 209.918820][ T46] usbtest 4-1:0.0: FX2 device [ 209.945748][ T46] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 209.970994][ T46] usb 4-1: USB disconnect, device number 27 [ 210.272247][ T46] usb 1-1: USB disconnect, device number 32 [ 210.494088][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 210.494106][ T29] audit: type=1326 audit(1723128263.249:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.634345][ T29] audit: type=1326 audit(1723128263.249:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.701602][ T29] audit: type=1326 audit(1723128263.249:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.776057][ T29] audit: type=1326 audit(1723128263.249:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.802169][ T29] audit: type=1326 audit(1723128263.249:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.890575][ T29] audit: type=1326 audit(1723128263.249:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 210.956467][ T29] audit: type=1326 audit(1723128263.249:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 211.005433][ T29] audit: type=1326 audit(1723128263.249:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 211.028245][ T29] audit: type=1326 audit(1723128263.249:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 211.061469][ T29] audit: type=1326 audit(1723128263.249:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x7ffc0000 [ 211.113612][ T46] usb 2-1: USB disconnect, device number 28 [ 211.129672][ T46] ch341 2-1:0.0: device disconnected [ 211.415589][ T7609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.558'. [ 211.615850][ T7611] syzkaller1: entered promiscuous mode [ 211.635875][ T7611] syzkaller1: entered allmulticast mode [ 211.912610][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 211.988087][ T5283] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 212.063052][ T5280] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 212.129787][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.139699][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.157488][ T46] usb 1-1: Product: syz [ 212.161750][ T46] usb 1-1: Manufacturer: syz [ 212.170503][ T46] usb 1-1: SerialNumber: syz [ 212.183614][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 212.195010][ T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.209512][ T5283] usb 4-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 212.217357][ T5282] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.222962][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.264334][ T5283] usb 4-1: Product: syz [ 212.270870][ T5283] usb 4-1: Manufacturer: syz [ 212.282700][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 212.293530][ T5283] usb 4-1: SerialNumber: syz [ 212.313556][ T5280] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 212.327992][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.337151][ T5283] usb 4-1: config 0 descriptor?? [ 212.344826][ T5283] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 212.356613][ T5280] usb 2-1: config 0 descriptor?? [ 212.362128][ T5283] usb 4-1: Detected FT232A [ 212.368651][ T5280] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 212.378896][ T5283] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.486747][ T5283] usb 1-1: USB disconnect, device number 33 [ 212.572726][ T945] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.586998][ T942] usb 4-1: USB disconnect, device number 28 [ 212.601544][ T942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.611982][ T942] ftdi_sio 4-1:0.0: device disconnected [ 212.772500][ T945] usb 5-1: Using ep0 maxpacket: 8 [ 212.779767][ T945] usb 5-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 212.791330][ T945] usb 5-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 212.805334][ T945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.816657][ T945] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 212.825765][ T945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 212.834255][ T945] usb 5-1: Product: syz [ 212.838452][ T945] usb 5-1: Manufacturer: syz [ 212.844804][ T945] usb 5-1: SerialNumber: syz [ 212.851289][ T945] usb 5-1: config 0 descriptor?? [ 213.063845][ T945] usbtest 5-1:0.0: FX2 device [ 213.069713][ T945] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 213.089036][ T945] usb 5-1: USB disconnect, device number 29 [ 213.171288][ T5280] gspca_sonixj: reg_r err -32 [ 213.185312][ T5280] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 213.313160][ T7637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.568'. [ 213.325522][ T7637] netlink: 448 bytes leftover after parsing attributes in process `syz.0.568'. [ 213.336147][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 213.345355][ T5282] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 213.368074][ T5282] ath9k_htc: Failed to initialize the device [ 213.384810][ T5283] usb 1-1: ath9k_htc: USB layer deinitialized [ 214.002877][ T7649] mmap: syz.4.572 (7649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.855071][ T945] usb 2-1: USB disconnect, device number 29 [ 214.929300][ T46] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 214.929479][ T7676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.580'. [ 214.969415][ T7676] netlink: 448 bytes leftover after parsing attributes in process `syz.1.580'. [ 214.986399][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 215.120255][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 215.129733][ T46] usb 3-1: config 0 has no interfaces? [ 215.145788][ T46] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 215.158734][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 215.167079][ T46] usb 3-1: Product: syz [ 215.171245][ T46] usb 3-1: Manufacturer: syz [ 215.172525][ T5283] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 215.181004][ T46] usb 3-1: SerialNumber: syz [ 215.190949][ T46] usb 3-1: config 0 descriptor?? [ 215.372578][ T5283] usb 1-1: Using ep0 maxpacket: 16 [ 215.379770][ T5283] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 215.389388][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.399231][ T5283] usb 1-1: config 0 descriptor?? [ 215.409208][ T5283] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 215.409659][ T7664] unsupported nlmsg_type 40 [ 215.430855][ T7664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.442710][ T7664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.458050][ T46] usb 3-1: USB disconnect, device number 37 [ 215.463729][ T945] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 215.626553][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 215.626569][ T29] audit: type=1326 audit(1723128268.399:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x0 [ 215.696968][ T945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.707266][ T945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.717504][ T945] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 215.729368][ T945] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 215.752863][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.767759][ T7679] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 215.794894][ T945] hub 2-1:1.0: bad descriptor, ignoring hub [ 215.802262][ T945] hub 2-1:1.0: probe with driver hub failed with error -5 [ 215.812932][ T945] cdc_wdm 2-1:1.0: skipping garbage [ 215.818143][ T945] cdc_wdm 2-1:1.0: skipping garbage [ 215.832893][ T945] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 215.838817][ T945] cdc_wdm 2-1:1.0: Unknown control protocol [ 215.912261][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 215.924725][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 215.935729][ T5283] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 215.943326][ T5283] sq905c 1-1:0.0: Get version command failed [ 215.949451][ T5283] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 216.174052][ C1] wdm_int_callback: 9047 callbacks suppressed [ 216.174075][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.186719][ C1] wdm_int_callback: 9047 callbacks suppressed [ 216.186729][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.198887][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.204937][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.211510][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.217810][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.224415][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.230732][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.237316][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.243583][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.250185][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.256445][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.263024][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.269277][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.275858][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.282123][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.288699][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.294946][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.301535][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.307744][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 216.314330][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 216.349200][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.357880][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.675528][ T5283] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 216.893783][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 216.951652][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.008928][ T5283] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.027584][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.052279][ T5283] usb 5-1: config 0 descriptor?? [ 217.317097][ T5283] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 217.564779][ T2919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.599124][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 217.609240][ T7707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.585'. [ 217.699915][ T2919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.918984][ T2919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.987110][ T7710] netlink: 52 bytes leftover after parsing attributes in process `syz.2.591'. [ 218.004414][ T7710] netlink: 448 bytes leftover after parsing attributes in process `syz.2.591'. [ 218.015747][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 218.040158][ T2919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.057788][ T5283] usb 1-1: USB disconnect, device number 34 [ 218.312734][ T945] usb 2-1: USB disconnect, device number 30 [ 218.312776][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 219.014427][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.024502][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.051323][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.068479][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.082840][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.096190][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.289452][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.308888][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.321286][ T2919] bond0 (unregistering): Released all slaves [ 219.392631][ T5282] usb 5-1: USB disconnect, device number 30 [ 219.438940][ T5282] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected [ 219.842859][ T58] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 219.919740][ T2919] hsr_slave_0: left promiscuous mode [ 219.940134][ T2919] hsr_slave_1: left promiscuous mode [ 219.946897][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.961265][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.970959][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.982645][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.012548][ T58] usb 1-1: device descriptor read/64, error -71 [ 220.017486][ T2919] veth1_macvtap: left promiscuous mode [ 220.024461][ T2919] veth0_macvtap: left promiscuous mode [ 220.030096][ T2919] veth1_vlan: left promiscuous mode [ 220.037201][ T2919] veth0_vlan: left promiscuous mode [ 220.142707][ T5282] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 220.182840][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 220.302633][ T58] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 220.332828][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 220.344731][ T5282] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 220.363992][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.375774][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 220.395282][ T46] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 220.406014][ T5282] usb 3-1: config 0 descriptor?? [ 220.420055][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.432364][ T5282] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 220.441157][ T46] usb 5-1: config 0 descriptor?? [ 220.457842][ T46] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 220.482646][ T58] usb 1-1: device descriptor read/64, error -71 [ 220.537426][ T7774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.602'. [ 220.549216][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 220.612995][ T58] usb usb1-port1: attempt power cycle [ 220.702733][ T29] audit: type=1326 audit(1723128273.469:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x0 [ 220.764361][ T2919] team0 (unregistering): Port device team_slave_1 removed [ 220.807336][ T2919] team0 (unregistering): Port device team_slave_0 removed [ 220.974605][ T46] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 220.982395][ T46] sq905c 5-1:0.0: Get version command failed [ 220.988913][ T46] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 221.036583][ T58] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 221.084909][ T58] usb 1-1: device descriptor read/8, error -71 [ 221.184324][ T4623] Bluetooth: hci4: command tx timeout [ 221.355736][ T58] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 221.414368][ T58] usb 1-1: device descriptor read/8, error -71 [ 221.424367][ T7737] chnl_net:caif_netlink_parms(): no params data found [ 221.558034][ T58] usb usb1-port1: unable to enumerate USB device [ 221.629988][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.634010][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 221.648098][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.672221][ T7737] bridge_slave_0: entered allmulticast mode [ 221.684178][ T7737] bridge_slave_0: entered promiscuous mode [ 221.703701][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.720423][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.727931][ T7737] bridge_slave_1: entered allmulticast mode [ 221.740161][ T7737] bridge_slave_1: entered promiscuous mode [ 221.829452][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.850127][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.948407][ T7737] team0: Port device team_slave_0 added [ 221.980509][ T7737] team0: Port device team_slave_1 added [ 222.050862][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.078992][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.140783][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.174548][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.181936][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.208941][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.288580][ T7737] hsr_slave_0: entered promiscuous mode [ 222.298752][ T7737] hsr_slave_1: entered promiscuous mode [ 222.305707][ T7737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.316071][ T7737] Cannot create hsr debugfs directory [ 222.766623][ T7811] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 222.790503][ T7811] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.605'. [ 223.036625][ T46] usb 5-1: USB disconnect, device number 31 [ 223.068995][ T5282] gspca_sonixj: reg_w1 err -71 [ 223.077620][ T5282] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 223.137174][ T5282] usb 3-1: USB disconnect, device number 38 [ 223.273840][ T4623] Bluetooth: hci4: command tx timeout [ 223.428224][ T2559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.799680][ T2559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.992333][ T2559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.128154][ T2559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.238221][ T7737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.242564][ T5282] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 224.277353][ T7737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.287665][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.298168][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.307425][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.316143][ T7737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.324989][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.334143][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.342059][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.368208][ T7737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.452805][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 224.522269][ T5282] usb 5-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 224.572243][ T5282] usb 5-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 224.618870][ T5282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.664357][ T5282] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 224.685923][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 224.719346][ T5282] usb 5-1: Product: syz [ 224.733311][ T5282] usb 5-1: Manufacturer: syz [ 224.740504][ T5282] usb 5-1: SerialNumber: syz [ 224.751215][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.612'. [ 224.767352][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 224.770802][ T5282] usb 5-1: config 0 descriptor?? [ 225.007324][ T5282] usbtest 5-1:0.0: FX2 device [ 225.023740][ T5282] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 225.060515][ T5282] usb 5-1: USB disconnect, device number 32 [ 225.104560][ T7849] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 225.115163][ T7849] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.614'. [ 225.343348][ T5236] Bluetooth: hci4: command tx timeout [ 225.462730][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.482280][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.502038][ T2559] bond0 (unregistering): Released all slaves [ 225.573109][ T7849] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 225.583148][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 225.599885][ T7849] hsr0: entered promiscuous mode [ 225.605110][ T7849] hsr0: entered allmulticast mode [ 225.610192][ T7849] hsr_slave_0: entered allmulticast mode [ 225.616024][ T7849] hsr_slave_1: entered allmulticast mode [ 225.622913][ T7849] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 225.976546][ T46] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 226.080483][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.100269][ T2559] hsr_slave_0: left promiscuous mode [ 226.107695][ T2559] hsr_slave_1: left promiscuous mode [ 226.125975][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.137533][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.148454][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.165388][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.180949][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 226.198625][ T46] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 226.230935][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.262562][ T945] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 226.269770][ T2559] veth1_macvtap: left promiscuous mode [ 226.278215][ T46] usb 3-1: config 0 descriptor?? [ 226.297885][ T46] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 226.318606][ T2559] veth0_macvtap: left promiscuous mode [ 226.324646][ T2559] veth1_vlan: left promiscuous mode [ 226.330175][ T2559] veth0_vlan: left promiscuous mode [ 226.383170][ T5236] Bluetooth: hci2: command tx timeout [ 226.464621][ T945] usb 5-1: Using ep0 maxpacket: 16 [ 226.491915][ T945] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 226.502380][ T945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.522781][ T945] usb 5-1: config 0 descriptor?? [ 226.547973][ T945] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 226.554709][ T5283] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 226.566287][ T29] audit: type=1326 audit(1723128279.319:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.2.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa49b779f9 code=0x0 [ 226.785198][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.805706][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 226.817885][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.832885][ T46] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 226.836235][ T5283] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.846710][ T46] sq905c 3-1:0.0: Get version command failed [ 226.876430][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.882671][ T46] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 226.888496][ T5283] usb 1-1: config 0 descriptor?? [ 226.910028][ T7885] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 227.187328][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 227.243499][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 227.376067][ T5283] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 227.391496][ T5283] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 227.426132][ T5236] Bluetooth: hci4: command tx timeout [ 227.427106][ T5283] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.078477][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.105216][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.112415][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.163398][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 228.191637][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.198815][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.408726][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.426124][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.436194][ T7836] bridge_slave_0: entered allmulticast mode [ 228.447419][ T7836] bridge_slave_0: entered promiscuous mode [ 228.463400][ T5236] Bluetooth: hci2: command tx timeout [ 228.476163][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.484316][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.491588][ T7836] bridge_slave_1: entered allmulticast mode [ 228.500045][ T7836] bridge_slave_1: entered promiscuous mode [ 228.556333][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.572769][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.624550][ T7836] team0: Port device team_slave_0 added [ 228.641425][ T7836] team0: Port device team_slave_1 added [ 228.688144][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.695560][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.725180][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.747338][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.754844][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.762601][ T5283] usb 1-1: reset full-speed USB device number 39 using dummy_hcd [ 228.781833][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.829110][ T942] usb 3-1: USB disconnect, device number 39 [ 228.897452][ T7836] hsr_slave_0: entered promiscuous mode [ 228.904711][ T7836] hsr_slave_1: entered promiscuous mode [ 228.911278][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.921101][ T7836] Cannot create hsr debugfs directory [ 229.126551][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.197484][ T945] gspca_sonixj: reg_w1 err -71 [ 229.202717][ T945] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 229.245837][ T945] usb 5-1: USB disconnect, device number 33 [ 229.518150][ T7737] veth0_vlan: entered promiscuous mode [ 229.582827][ T7737] veth1_vlan: entered promiscuous mode [ 229.659905][ T7737] veth0_macvtap: entered promiscuous mode [ 229.676909][ T7737] veth1_macvtap: entered promiscuous mode [ 229.726392][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.757803][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.769068][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.781899][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.807363][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.818983][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.832198][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.861947][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.875523][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.886867][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.897485][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.908022][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.918658][ T945] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 229.926529][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.941833][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.971544][ T7737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.987020][ T7737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.995877][ T7737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.004747][ T7737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.093046][ T945] usb 3-1: device descriptor read/64, error -71 [ 230.156768][ T7376] usb 1-1: USB disconnect, device number 39 [ 230.193575][ T7836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.229094][ T2559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.257705][ T2559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.300294][ T7836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.332306][ T7836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.372726][ T7836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.379557][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.395193][ T945] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 230.407643][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.543859][ T4623] Bluetooth: hci2: command tx timeout [ 230.572577][ T945] usb 3-1: device descriptor read/64, error -71 [ 230.693155][ T945] usb usb3-port1: attempt power cycle [ 230.702851][ T7376] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 230.705643][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.801272][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.833216][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.840386][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.867326][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.874550][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.922829][ T7376] usb 5-1: Using ep0 maxpacket: 8 [ 230.946678][ T7376] usb 5-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 231.002617][ T5283] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 231.013269][ T7376] usb 5-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 231.028430][ T7376] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.038102][ T7376] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 231.056947][ T7376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 231.086630][ T7376] usb 5-1: Product: syz [ 231.092989][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.106591][ T7376] usb 5-1: Manufacturer: syz [ 231.122537][ T7376] usb 5-1: SerialNumber: syz [ 231.142710][ T945] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 231.163598][ T7376] usb 5-1: config 0 descriptor?? [ 231.202775][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 231.208370][ T945] usb 3-1: device descriptor read/8, error -71 [ 231.222741][ T5282] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 231.239482][ T5283] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 231.250696][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.266460][ T7836] veth0_vlan: entered promiscuous mode [ 231.281740][ T5283] usb 4-1: config 0 descriptor?? [ 231.317230][ T5283] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 231.332215][ T7836] veth1_vlan: entered promiscuous mode [ 231.413804][ T7376] usbtest 5-1:0.0: FX2 device [ 231.430596][ T7376] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 231.441447][ T7836] veth0_macvtap: entered promiscuous mode [ 231.451423][ T7376] usb 5-1: USB disconnect, device number 34 [ 231.463856][ T7836] veth1_macvtap: entered promiscuous mode [ 231.482649][ T5282] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 231.502053][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.514392][ T945] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 231.524032][ T5282] usb 1-1: Product: syz [ 231.528250][ T5282] usb 1-1: Manufacturer: syz [ 231.540469][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.540909][ T5282] usb 1-1: SerialNumber: syz [ 231.555902][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.565905][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.577178][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.591931][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.602574][ T945] usb 3-1: device descriptor read/8, error -71 [ 231.612865][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.622754][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.633242][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.645410][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.663721][ T5282] usb 1-1: config 0 descriptor?? [ 231.675053][ T5282] ch341 1-1:0.0: ch341-uart converter detected [ 231.684287][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.705385][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.717791][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.729126][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.739440][ T945] usb usb3-port1: unable to enumerate USB device [ 231.752384][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.766271][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.777605][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.788319][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.800135][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.842374][ T7836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.887906][ T7836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.898423][ T7836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.908034][ T7836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.130372][ T5283] gspca_sonixj: reg_r err -32 [ 232.150551][ T5283] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 232.191219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.221669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.289369][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.301767][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.382916][ T4623] Bluetooth: hci0: command 0x0406 tx timeout [ 232.502625][ T5283] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 232.623138][ T5236] Bluetooth: hci2: command tx timeout [ 232.702826][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 232.726441][ T5283] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 232.737783][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.775553][ T5283] usb 5-1: config 0 descriptor?? [ 232.783504][ T5282] usb 1-1: failed to receive control message: -110 [ 232.786762][ T5283] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 232.815364][ T5282] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 233.011960][ T8015] delete_channel: no stack [ 233.047645][ T29] audit: type=1326 audit(1723128285.819:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.4.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906fb779f9 code=0x0 [ 233.092590][ T5280] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 233.307754][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.319034][ T5283] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 233.332327][ T5283] sq905c 5-1:0.0: Get version command failed [ 233.338758][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 233.354024][ T5283] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 233.367002][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.384458][ T5280] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.393956][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.415019][ T5280] usb 3-1: config 0 descriptor?? [ 233.423837][ T8013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.751494][ T945] usb 4-1: USB disconnect, device number 29 [ 233.855920][ T5280] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4 [ 233.865595][ T5280] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 233.895274][ T5280] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 233.922027][ T5280] usb 1-1: USB disconnect, device number 40 [ 233.945257][ T5280] ch341 1-1:0.0: device disconnected [ 234.052936][ T5283] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 234.264236][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 234.271443][ T5283] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 234.281073][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.292879][ T5283] usb 2-1: config 0 descriptor?? [ 234.302320][ T5283] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 235.122150][ T5236] Bluetooth: hci4: ISO packet for unknown connection handle 48 [ 235.217307][ T5236] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 235.346573][ T5282] usb 5-1: USB disconnect, device number 35 [ 235.362538][ T945] usb 3-1: reset full-speed USB device number 44 using dummy_hcd [ 235.499576][ T8047] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 235.592756][ T5231] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 235.782901][ T5231] usb 4-1: Using ep0 maxpacket: 32 [ 235.801989][ T5231] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.819862][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 235.832053][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.848964][ T5231] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.860965][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.880184][ T5231] usb 4-1: config 0 descriptor?? [ 235.897506][ T8044] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 235.911164][ T5231] hub 4-1:0.0: USB hub found [ 236.022648][ T5282] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 236.114720][ T5231] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 236.212601][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 236.219819][ T5282] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 236.229107][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.238997][ T5280] usb 3-1: USB disconnect, device number 44 [ 236.243323][ T5282] usb 5-1: config 0 descriptor?? [ 236.255353][ T5282] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 236.332547][ T5231] hid-generic 0003:046D:C314.0006: unknown main item tag 0x0 [ 236.355979][ T5231] hid-generic 0003:046D:C314.0006: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 236.422808][ T5280] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 236.622543][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 236.630305][ T5280] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 236.639600][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.650296][ T5280] usb 3-1: config 0 descriptor?? [ 236.655942][ T5231] usb 4-1: USB disconnect, device number 30 [ 236.661584][ T5280] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 236.663261][ T5282] gspca_sonixj: reg_r err -32 [ 236.676250][ T5282] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 236.926883][ T5283] gspca_sonixj: reg_w1 err -71 [ 236.934225][ T5283] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 236.944742][ T5283] usb 2-1: USB disconnect, device number 31 [ 237.432600][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 237.485911][ T5280] gspca_sonixj: reg_r err -32 [ 237.496059][ T5280] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 237.663523][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 237.677105][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.689160][ T9] usb 1-1: Product: syz [ 237.699472][ T9] usb 1-1: Manufacturer: syz [ 237.714179][ T9] usb 1-1: SerialNumber: syz [ 237.726560][ T9] usb 1-1: config 0 descriptor?? [ 237.741942][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 238.382755][ T5231] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 238.604591][ T5231] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.627780][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.657778][ T5231] usb 4-1: config 0 descriptor?? [ 238.687987][ T5231] cp210x 4-1:0.0: cp210x converter detected [ 238.792002][ T9] usb 1-1: failed to receive control message: -110 [ 238.800524][ T5283] usb 5-1: USB disconnect, device number 36 [ 238.808294][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 238.923424][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.932061][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.986597][ T46] usb 3-1: USB disconnect, device number 45 [ 239.219635][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.387283][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.411478][ T5231] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 239.411516][ T5231] cp210x 4-1:0.0: querying part number failed [ 239.427958][ T5231] usb 4-1: cp210x converter now attached to ttyUSB1 [ 239.432942][ T5231] usb 4-1: USB disconnect, device number 31 [ 239.488035][ T5231] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 239.488634][ T5231] cp210x 4-1:0.0: device disconnected [ 239.535769][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.618052][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.622598][ T5282] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 239.832055][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.872396][ T12] bridge_slave_1: left allmulticast mode [ 239.878877][ T12] bridge_slave_1: left promiscuous mode [ 239.886812][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 239.905855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.932672][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 239.966156][ T8095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 239.972074][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.972978][ T8095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 240.013708][ T12] bridge_slave_0: left allmulticast mode [ 240.019380][ T12] bridge_slave_0: left promiscuous mode [ 240.047832][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.066519][ T5282] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.098019][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.101301][ T8095] vhci_hcd vhci_hcd.0: Device attached [ 240.120627][ T5282] usb 5-1: config 0 descriptor?? [ 240.225794][ T5280] usb 1-1: USB disconnect, device number 41 [ 240.247101][ T5280] ch341 1-1:0.0: device disconnected [ 240.302847][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.313497][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.331448][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.346066][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.358319][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 240.365493][ T945] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 240.374170][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.416007][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 240.422024][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.495223][ T5282] usb 5-1: USB disconnect, device number 37 [ 240.582612][ T58] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 240.802616][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 240.818980][ T58] usb 3-1: config 0 has no interfaces? [ 240.841509][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.860974][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.882577][ T58] usb 3-1: Product: syz [ 240.886771][ T58] usb 3-1: Manufacturer: syz [ 240.903164][ T5280] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 240.907543][ T58] usb 3-1: SerialNumber: syz [ 240.921787][ T58] usb 3-1: config 0 descriptor?? [ 241.082571][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 241.090252][ T5280] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 241.102487][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.117326][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.120950][ T5280] usb 1-1: config 0 descriptor?? [ 241.151833][ T5280] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 241.158787][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.188732][ T12] bond0 (unregistering): Released all slaves [ 241.708020][ T12] hsr_slave_0: left promiscuous mode [ 241.716372][ T12] hsr_slave_1: left promiscuous mode [ 241.728113][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.736919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.745308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.753442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.778218][ T12] veth1_macvtap: left promiscuous mode [ 241.784113][ T12] veth0_macvtap: left promiscuous mode [ 241.789821][ T12] veth1_vlan: left promiscuous mode [ 241.796204][ T12] veth0_vlan: left promiscuous mode [ 241.871018][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 241.939283][ T5283] usb 3-1: USB disconnect, device number 46 [ 241.958852][ T8097] vhci_hcd: connection reset by peer [ 242.024119][ T35] vhci_hcd: stop threads [ 242.034990][ T35] vhci_hcd: release socket [ 242.053576][ T35] vhci_hcd: disconnect device [ 242.099901][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 242.117371][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 242.153580][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.163776][ T9] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 242.173557][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.192140][ T9] usb 4-1: config 0 descriptor?? [ 242.386193][ T5282] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 242.464335][ T5236] Bluetooth: hci2: command tx timeout [ 242.526333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.572611][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 242.587614][ T5282] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 242.602007][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.618891][ T5282] usb 5-1: config 0 descriptor?? [ 242.630948][ T5282] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 242.639231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.672058][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 242.678306][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 242.692049][ T9] usb 4-1: USB disconnect, device number 32 [ 243.044496][ T5282] gspca_sonixj: reg_r err -32 [ 243.052117][ T5282] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 243.171035][ T8151] libceph: resolve '0' (ret=-3): failed [ 243.176617][ T8110] chnl_net:caif_netlink_parms(): no params data found [ 243.597552][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.626136][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.646118][ T8110] bridge_slave_0: entered allmulticast mode [ 243.675086][ T8110] bridge_slave_0: entered promiscuous mode [ 243.683673][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.690799][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.702195][ T8110] bridge_slave_1: entered allmulticast mode [ 243.718241][ T8110] bridge_slave_1: entered promiscuous mode [ 243.795919][ T5280] gspca_sonixj: reg_w1 err -71 [ 243.802592][ T5280] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 243.843383][ T5280] usb 1-1: USB disconnect, device number 42 [ 243.854132][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.870629][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.886719][ T5283] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 243.966587][ T8110] team0: Port device team_slave_0 added [ 244.006648][ T8110] team0: Port device team_slave_1 added [ 244.054132][ T5283] usb 3-1: device descriptor read/64, error -71 [ 244.099101][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.117415][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.161688][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.194475][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.201455][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.262561][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.333346][ T5283] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 244.344206][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.357993][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.365889][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.374432][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.387217][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.395043][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.451207][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.543845][ T5283] usb 3-1: device descriptor read/64, error -71 [ 244.543933][ T5241] Bluetooth: hci2: command tx timeout [ 244.557680][ T8110] hsr_slave_0: entered promiscuous mode [ 244.560609][ T8110] hsr_slave_1: entered promiscuous mode [ 244.598414][ T8110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.598464][ T8110] Cannot create hsr debugfs directory [ 244.649744][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.693190][ T5283] usb usb3-port1: attempt power cycle [ 244.742096][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.846123][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.954820][ T5282] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 245.041886][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 245.113249][ T5283] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 245.151664][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.160384][ T5280] usb 5-1: USB disconnect, device number 38 [ 245.169873][ T5283] usb 3-1: device descriptor read/8, error -71 [ 245.201228][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 245.226950][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 245.241925][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.265404][ T5282] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.284981][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.309865][ T12] bridge_slave_1: left allmulticast mode [ 245.317874][ T12] bridge_slave_1: left promiscuous mode [ 245.318340][ T5282] usb 1-1: config 0 descriptor?? [ 245.327354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.340914][ T12] bridge_slave_0: left allmulticast mode [ 245.347226][ T12] bridge_slave_0: left promiscuous mode [ 245.358976][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.472566][ T5283] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 245.507703][ T5283] usb 3-1: device descriptor read/8, error -71 [ 245.514189][ T945] vhci_hcd: vhci_device speed not set [ 245.569472][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 245.586964][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.603510][ T5282] usb 1-1: USB disconnect, device number 43 [ 245.642832][ T5283] usb usb3-port1: unable to enumerate USB device [ 245.739141][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.749671][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.760228][ T12] bond0 (unregistering): Released all slaves [ 245.825952][ T5280] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 245.911698][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.923741][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.931017][ T8187] bridge_slave_0: entered allmulticast mode [ 245.939829][ T8187] bridge_slave_0: entered promiscuous mode [ 245.947680][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.959005][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.967759][ T8187] bridge_slave_1: entered allmulticast mode [ 245.974769][ T8187] bridge_slave_1: entered promiscuous mode [ 246.054991][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 246.078932][ T5280] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 246.094485][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.109590][ T5280] usb 5-1: Product: syz [ 246.118719][ T5280] usb 5-1: Manufacturer: syz [ 246.120750][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.128309][ T5280] usb 5-1: SerialNumber: syz [ 246.151516][ T5280] usb 5-1: config 0 descriptor?? [ 246.180019][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.280859][ T12] hsr_slave_0: left promiscuous mode [ 246.287647][ T12] hsr_slave_1: left promiscuous mode [ 246.301434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.319775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.331929][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.341685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.371233][ T12] veth1_macvtap: left promiscuous mode [ 246.378710][ T12] veth0_macvtap: left promiscuous mode [ 246.385243][ T12] veth1_vlan: left promiscuous mode [ 246.390696][ T12] veth0_vlan: left promiscuous mode [ 246.467532][ T5241] Bluetooth: hci4: command tx timeout [ 246.624076][ T5241] Bluetooth: hci2: command tx timeout [ 247.132037][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.173050][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.355935][ T5282] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 247.493621][ T5280] rtl8150 5-1:0.0: couldn't reset the device [ 247.510247][ T5280] rtl8150 5-1:0.0: probe with driver rtl8150 failed with error -5 [ 247.547649][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 247.571002][ T5282] usb 3-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 247.595484][ T5282] usb 3-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 247.609255][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.619944][ T5282] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 247.630307][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 247.642222][ T5282] usb 3-1: Product: syz [ 247.650867][ T5282] usb 3-1: Manufacturer: syz [ 247.655929][ T5282] usb 3-1: SerialNumber: syz [ 247.665592][ T5282] usb 3-1: config 0 descriptor?? [ 247.895863][ T5282] usbtest 3-1:0.0: FX2 device [ 247.907574][ T8187] team0: Port device team_slave_0 added [ 247.918915][ T5282] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 247.936510][ T5282] usb 3-1: USB disconnect, device number 51 [ 247.967669][ T8187] team0: Port device team_slave_1 added [ 248.056686][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.065623][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.094351][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.133588][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.158141][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.214370][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.286269][ T945] usb 5-1: USB disconnect, device number 39 [ 248.420286][ T8110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.450759][ T8110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.513621][ T8110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.542741][ T5241] Bluetooth: hci4: command tx timeout [ 248.615733][ T8187] hsr_slave_0: entered promiscuous mode [ 248.642862][ T8187] hsr_slave_1: entered promiscuous mode [ 248.655774][ T8187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.664372][ T8187] Cannot create hsr debugfs directory [ 248.672051][ T8110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.703317][ T5241] Bluetooth: hci2: command tx timeout [ 248.752606][ T5280] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 248.922707][ T5280] usb 1-1: device descriptor read/64, error -71 [ 249.238483][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.273396][ T5280] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 249.348513][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.428824][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.435973][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.472955][ T5280] usb 1-1: device descriptor read/64, error -71 [ 249.561112][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.568218][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.593473][ T5280] usb usb1-port1: attempt power cycle [ 249.923426][ T46] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 249.958653][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.052793][ T5280] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 250.060775][ T8187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.068396][ T8187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.090261][ T8187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.092243][ T8187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.112929][ T5280] usb 1-1: device descriptor read/8, error -71 [ 250.122931][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 250.128377][ T46] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 250.128396][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.129824][ T46] usb 3-1: config 0 descriptor?? [ 250.132030][ T46] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 250.209412][ T8110] veth0_vlan: entered promiscuous mode [ 250.269258][ T8110] veth1_vlan: entered promiscuous mode [ 250.402829][ T5280] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 250.412645][ T7376] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 250.450619][ T8110] veth0_macvtap: entered promiscuous mode [ 250.468751][ T5280] usb 1-1: device descriptor read/8, error -71 [ 250.499645][ T8110] veth1_macvtap: entered promiscuous mode [ 250.535724][ T46] gspca_sonixj: reg_r err -32 [ 250.541199][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.550668][ T46] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 250.613907][ T5280] usb usb1-port1: unable to enumerate USB device [ 250.617943][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.632422][ T5241] Bluetooth: hci4: command tx timeout [ 250.651825][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.661402][ T7376] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.666828][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.683902][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.693886][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.697901][ T7376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 250.704565][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.706095][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.749911][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.761336][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.773754][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.781844][ T7376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 250.797655][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.797673][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.797690][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.799221][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.847192][ T7376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.871598][ T7376] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.895633][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.936768][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.944001][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.957715][ T7376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.993386][ T7376] usb 5-1: config 0 descriptor?? [ 251.000268][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.007467][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.072352][ T8110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.119429][ T8110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.152590][ T8110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.167527][ T8110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.252321][ T7376] usbhid 5-1:0.0: can't add hid device: -71 [ 251.279374][ T7376] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.303406][ T7376] usb 5-1: USB disconnect, device number 40 [ 251.483194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.491131][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.614038][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.633637][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.661635][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.845265][ T8187] veth0_vlan: entered promiscuous mode [ 251.916435][ T8187] veth1_vlan: entered promiscuous mode [ 252.044413][ T8187] veth0_macvtap: entered promiscuous mode [ 252.058504][ T8187] veth1_macvtap: entered promiscuous mode [ 252.103912][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.117693][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.127834][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.146683][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.167531][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.180216][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.192262][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.209934][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.220031][ T5282] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 252.240293][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.259121][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.284592][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.301676][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.334648][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.359915][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.379127][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.391169][ T8187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.413843][ T8187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.426055][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.445109][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 252.459913][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.485255][ T8187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.498150][ T8187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.498957][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.507461][ T8187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.541230][ T5282] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.561762][ T8187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.565472][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.586819][ T945] usb 3-1: USB disconnect, device number 52 [ 252.637020][ T5282] usb 2-1: config 0 descriptor?? [ 252.644850][ T8309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.703758][ T5241] Bluetooth: hci4: command tx timeout [ 252.891183][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.907042][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.010407][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.055847][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.067197][ T5282] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x4 [ 253.103635][ T5282] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 253.142092][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 253.155709][ T5282] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 253.593350][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 253.753748][ T9] usb 4-1: device descriptor read/64, error -71 [ 254.032690][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 254.113194][ T7376] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 254.195335][ T9] usb 4-1: device descriptor read/64, error -71 [ 254.294574][ T7376] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.310276][ T7376] usb 5-1: config 0 has no interface number 0 [ 254.320758][ T9] usb usb4-port1: attempt power cycle [ 254.335171][ T7376] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 254.349354][ T7376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.358041][ T5280] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 254.371926][ T7376] usb 5-1: Product: syz [ 254.376950][ T7376] usb 5-1: Manufacturer: syz [ 254.383329][ T7376] usb 5-1: SerialNumber: syz [ 254.399849][ T7376] usb 5-1: config 0 descriptor?? [ 254.412644][ T945] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 254.522658][ T5282] usb 2-1: reset full-speed USB device number 32 using dummy_hcd [ 254.564647][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.586677][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 254.598823][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 254.610084][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.624484][ T945] usb 3-1: Using ep0 maxpacket: 16 [ 254.632830][ T5280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.641909][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.664315][ T945] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 254.692705][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.705350][ T5280] usb 1-1: config 0 descriptor?? [ 254.715858][ T945] usb 3-1: config 0 descriptor?? [ 254.738124][ T945] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 254.748877][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 254.784759][ T9] usb 4-1: device descriptor read/8, error -71 [ 254.935556][ T5280] usbhid 1-1:0.0: can't add hid device: -71 [ 254.941714][ T5280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 254.975114][ T5280] usb 1-1: USB disconnect, device number 48 [ 255.062995][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 255.105486][ T9] usb 4-1: device descriptor read/8, error -71 [ 255.128693][ T945] gspca_sonixj: reg_r err -32 [ 255.136913][ T945] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 255.233694][ T9] usb usb4-port1: unable to enumerate USB device [ 255.352108][ T8419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.513149][ T7376] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 255.755936][ T58] usb 2-1: USB disconnect, device number 32 [ 255.907162][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916916][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.440515][ T8431] delete_channel: no stack [ 256.528601][ T58] usb 5-1: USB disconnect, device number 41 [ 256.833394][ T5231] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 257.035713][ T5231] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 257.075752][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.088177][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.099417][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.121415][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.134382][ T7376] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 257.148342][ T58] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 257.159652][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.192564][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.223831][ T5282] usb 3-1: USB disconnect, device number 53 [ 257.266707][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.307481][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.342335][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.356804][ T7376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.362558][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 257.378562][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.397433][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.402525][ T7376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 257.435349][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.452296][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.471751][ T7376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.477086][ T58] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.498526][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.507095][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.520132][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.535557][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.545989][ T58] usb 1-1: config 0 descriptor?? [ 257.546693][ T7376] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.560182][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.573460][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.584497][ T7376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.642238][ T7376] usb 5-1: config 0 descriptor?? [ 257.654633][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.657935][ T8451] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.713374][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.723766][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.782209][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.801869][ T5231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.811365][ T5231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.832235][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.847963][ T5231] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 257.858251][ T5231] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 257.868851][ T58] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 257.881111][ T5231] usb 4-1: Product: syz [ 257.890346][ T5231] usb 4-1: Manufacturer: syz [ 257.920708][ T5231] usb 4-1: SerialNumber: syz [ 257.943955][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.951717][ T5231] usb 4-1: config 0 descriptor?? [ 257.968662][ T5231] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 257.983073][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 258.015682][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.165000][ T7376] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x4 [ 258.175360][ T5280] usb 4-1: USB disconnect, device number 37 [ 258.196317][ T7376] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 258.212624][ T58] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 258.227767][ T5280] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 258.252978][ T7376] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 258.296191][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 258.310316][ T8452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'. [ 259.642566][ T58] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 259.807963][ T5280] usb 1-1: USB disconnect, device number 49 [ 259.816567][ T5280] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 259.832688][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 259.864495][ T58] usb 3-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 259.893775][ T5231] usb 5-1: USB disconnect, device number 42 [ 259.904325][ T58] usb 3-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 259.924574][ T58] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.941944][ T58] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 259.965994][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 259.974593][ T58] usb 3-1: Product: syz [ 259.979550][ T58] usb 3-1: Manufacturer: syz [ 260.001424][ T58] usb 3-1: SerialNumber: syz [ 260.024367][ T58] usb 3-1: config 0 descriptor?? [ 260.269268][ T58] usbtest 3-1:0.0: FX2 device [ 260.289860][ T58] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 260.304058][ T8505] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 260.321402][ T58] usb 3-1: USB disconnect, device number 55 [ 260.362795][ T46] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 260.402689][ T7376] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 260.556207][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 260.575681][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.587724][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.602624][ T7376] usb 2-1: Using ep0 maxpacket: 8 [ 260.614259][ T7376] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.616506][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 260.624508][ T7376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.638808][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.646214][ T7376] usb 2-1: Product: syz [ 260.651542][ T46] usb 1-1: config 0 descriptor?? [ 260.653758][ T7376] usb 2-1: Manufacturer: syz [ 260.665349][ T7376] usb 2-1: SerialNumber: syz [ 260.671927][ T7376] usb 2-1: config 0 descriptor?? [ 260.722555][ T5280] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 260.862823][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 260.898491][ T7376] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.909493][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.921235][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.934203][ T5280] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 260.944404][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.957808][ T5280] usb 4-1: config 0 descriptor?? [ 261.065011][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.083162][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.087356][ T8512] netlink: 'syz.2.718': attribute type 5 has an invalid length. [ 261.092867][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 261.126694][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.137774][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.185657][ T8509] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 261.201115][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 261.210557][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 261.229983][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 261.241371][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 261.273257][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 261.280970][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 261.383231][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 261.399647][ T5280] uclogic 0003:2179:0053.0009: interface is invalid, ignoring [ 261.611631][ T29] audit: type=1326 audit(1723128314.379:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.3.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cdd1779f9 code=0x0 [ 261.664808][ C1] wdm_int_callback: 10606 callbacks suppressed [ 261.664827][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.677570][ C1] wdm_int_callback: 10606 callbacks suppressed [ 261.677584][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.689957][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.696549][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.702845][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.709451][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.715772][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.722368][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.728670][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.735285][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.741582][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.748175][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.754469][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.761052][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.767300][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.773900][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.780193][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.786774][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.793047][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 261.799639][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 261.827938][ T8515] bond0: entered promiscuous mode [ 261.841918][ T8515] bond_slave_0: entered promiscuous mode [ 261.850452][ T8515] bond_slave_1: entered promiscuous mode [ 261.878146][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 261.878445][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.898488][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.334117][ T9] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 262.584820][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.584848][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.584930][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 262.584974][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 262.584996][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.600318][ T8518] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 262.603464][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 262.603492][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 262.604046][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 262.604063][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 262.617836][ T9] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 262.617856][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.874687][ T7376] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 263.011575][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.037074][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.129118][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 263.137789][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 263.199127][ T46] usb 1-1: USB disconnect, device number 50 [ 263.492323][ T8515] bond0: left promiscuous mode [ 263.492409][ T8515] bond_slave_0: left promiscuous mode [ 263.495598][ T8515] bond_slave_1: left promiscuous mode [ 263.503286][ T7376] usb 4-1: USB disconnect, device number 38 [ 263.722874][ T46] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 263.814027][ T7376] usb 2-1: USB disconnect, device number 33 [ 263.911192][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 263.931263][ T46] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 263.959610][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.986418][ T46] usb 1-1: Product: syz [ 263.996454][ T46] usb 1-1: Manufacturer: syz [ 264.010687][ T46] usb 1-1: SerialNumber: syz [ 264.047576][ T46] usb 1-1: config 0 descriptor?? [ 264.079364][ T46] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 264.287104][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.301469][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.311580][ T9] usb 1-1: USB disconnect, device number 51 [ 264.317711][ T52] usb 1-1: Failed to submit usb control message: -71 [ 264.335574][ T52] usb 1-1: unable to send the bmi data to the device: -71 [ 264.344012][ T52] usb 1-1: unable to get target info from device [ 264.354515][ T52] usb 1-1: could not get target info (-71) [ 264.375936][ T52] usb 1-1: could not probe fw (-71) [ 264.454110][ T7376] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 264.653771][ T7376] usb 2-1: Using ep0 maxpacket: 16 [ 264.665843][ T7376] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 264.678846][ T7376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.689337][ T7376] usb 2-1: config 0 descriptor?? [ 264.697974][ T7376] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 265.044737][ T5282] usb 5-1: USB disconnect, device number 43 [ 265.192840][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 265.406777][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 265.418388][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 265.428659][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.458731][ T5280] usb 3-1: USB disconnect, device number 56 [ 265.470110][ T9] usb 1-1: config 0 descriptor?? [ 265.512347][ T9] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 265.529871][ T8553] FAULT_INJECTION: forcing a failure. [ 265.529871][ T8553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.562158][ T8553] CPU: 1 UID: 0 PID: 8553 Comm: syz.3.729 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 265.572760][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.582811][ T8553] Call Trace: [ 265.586179][ T8553] [ 265.589114][ T8553] dump_stack_lvl+0x241/0x360 [ 265.593799][ T8553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.599004][ T8553] ? __pfx__printk+0x10/0x10 [ 265.603620][ T8553] should_fail_ex+0x3b0/0x4e0 [ 265.608298][ T8553] _copy_from_user+0x2f/0xe0 [ 265.612902][ T8553] move_addr_to_kernel+0x82/0x150 [ 265.617940][ T8553] __sys_sendto+0x2a3/0x4f0 [ 265.622458][ T8553] ? __pfx___sys_sendto+0x10/0x10 [ 265.627508][ T8553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.633486][ T8553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.639833][ T8553] __x64_sys_sendto+0xde/0x100 [ 265.644588][ T8553] do_syscall_64+0xf3/0x230 [ 265.649087][ T8553] ? clear_bhb_loop+0x35/0x90 [ 265.653760][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.659662][ T8553] RIP: 0033:0x7f6cdd1779f9 [ 265.664087][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.683702][ T8553] RSP: 002b:00007f6cdde87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.692120][ T8553] RAX: ffffffffffffffda RBX: 00007f6cdd305f80 RCX: 00007f6cdd1779f9 [ 265.700091][ T8553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 265.708070][ T8553] RBP: 00007f6cdde87090 R08: 0000000020000200 R09: 0000000000000014 [ 265.716038][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.724004][ T8553] R13: 0000000000000000 R14: 00007f6cdd305f80 R15: 00007f6cdd42fa38 [ 265.731978][ T8553] [ 265.809025][ T29] audit: type=1326 audit(1723128318.579:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.0.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62f81779f9 code=0x0 [ 265.955615][ T5280] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 266.043291][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 266.057951][ T9] sq905c 1-1:0.0: Get version command failed [ 266.065623][ T9] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 266.132621][ T5280] usb 3-1: device descriptor read/64, error -71 [ 266.162549][ T5282] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 266.326841][ T46] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 266.352388][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 266.358848][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.370095][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.380088][ T5282] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 266.389178][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.401087][ T5282] usb 4-1: config 0 descriptor?? [ 266.412694][ T5280] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 266.515307][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 266.526553][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.536399][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 266.549550][ T46] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 266.558739][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.568568][ T46] usb 5-1: config 0 descriptor?? [ 266.586097][ T5280] usb 3-1: device descriptor read/64, error -71 [ 266.713261][ T5280] usb usb3-port1: attempt power cycle [ 266.983353][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 266.989386][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 267.008314][ T46] usb 5-1: USB disconnect, device number 44 [ 267.136878][ T5280] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 267.174601][ T5280] usb 3-1: device descriptor read/8, error -71 [ 267.472697][ T5280] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 267.513244][ T5280] usb 3-1: device descriptor read/8, error -71 [ 267.643946][ T5280] usb usb3-port1: unable to enumerate USB device [ 267.703950][ T8564] xt_hashlimit: overflow, try lower: 3/0 [ 267.766744][ T7376] gspca_sonixj: reg_w1 err -71 [ 267.785075][ T7376] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 267.810687][ T7376] usb 2-1: USB disconnect, device number 34 [ 268.026879][ T58] usb 1-1: USB disconnect, device number 52 [ 268.062693][ T46] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 268.294721][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.322585][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.367443][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.424377][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.496836][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.500514][ T8571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.735'. [ 268.546261][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.579075][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.607115][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.632305][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.658565][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.681408][ T46] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.722144][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.744913][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.800928][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.828101][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'. [ 268.844926][ T46] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.886185][ T46] usb 5-1: string descriptor 0 read error: -22 [ 268.903394][ T46] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.921924][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.964512][ T46] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.978118][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 269.009756][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 269.053873][ T5282] usb 4-1: USB disconnect, device number 39 [ 269.103640][ T5280] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 269.220706][ T58] usb 5-1: USB disconnect, device number 45 [ 269.324290][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.341257][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.364829][ T5280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 269.407431][ T5280] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 269.432832][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.472672][ T8577] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.490387][ T5280] hub 3-1:1.0: bad descriptor, ignoring hub [ 269.506806][ T5280] hub 3-1:1.0: probe with driver hub failed with error -5 [ 269.533304][ T5280] cdc_wdm 3-1:1.0: skipping garbage [ 269.538879][ T5280] cdc_wdm 3-1:1.0: skipping garbage [ 269.566937][ T5280] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 269.597559][ T5280] cdc_wdm 3-1:1.0: Unknown control protocol [ 269.891420][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.917916][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.422617][ T46] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 270.541818][ T8597] capability: warning: `syz.0.743' uses 32-bit capabilities (legacy support in use) [ 270.623316][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 270.637898][ T46] usb 4-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 270.660905][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.672049][ T46] usb 4-1: Product: syz [ 270.676537][ T46] usb 4-1: Manufacturer: syz [ 270.682195][ T46] usb 4-1: SerialNumber: syz [ 270.696616][ T46] usb 4-1: config 0 descriptor?? [ 270.712073][ T46] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 270.723576][ T46] usb 4-1: Detected FT232A [ 270.730902][ T46] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 270.916321][ T46] usb 4-1: USB disconnect, device number 40 [ 270.936388][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 270.989085][ T46] ftdi_sio 4-1:0.0: device disconnected [ 271.442547][ T58] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 271.662662][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 271.686325][ T58] usb 5-1: too many endpoints for config 0 interface 0 altsetting 25: 95, using maximum allowed: 30 [ 271.706355][ T58] usb 5-1: config 0 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 271.728268][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.750390][ T58] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 271.759846][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 271.777498][ T58] usb 5-1: Product: syz [ 271.787655][ T58] usb 5-1: Manufacturer: syz [ 271.794449][ T58] usb 5-1: SerialNumber: syz [ 271.800584][ T58] usb 5-1: config 0 descriptor?? [ 271.805791][ T46] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 271.963293][ T5282] usb 3-1: USB disconnect, device number 61 [ 272.002646][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 272.029833][ T46] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 272.054148][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.066619][ T58] usbtest 5-1:0.0: FX2 device [ 272.076023][ T58] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 272.099109][ T46] usb 4-1: config 0 descriptor?? [ 272.117185][ T8613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.747'. [ 272.117206][ T46] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 272.117933][ T58] usb 5-1: USB disconnect, device number 46 [ 272.537745][ T46] gspca_sonixj: reg_r err -32 [ 272.555741][ T46] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 272.646000][ T7376] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 272.769151][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 272.872633][ T7376] usb 3-1: Using ep0 maxpacket: 16 [ 272.906468][ T7376] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 272.931777][ T7376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.958878][ T7376] usb 3-1: Product: syz [ 272.967121][ T7376] usb 3-1: Manufacturer: syz [ 272.971987][ T7376] usb 3-1: SerialNumber: syz [ 272.989422][ T7376] r8152-cfgselector 3-1: Unknown version 0x0000 [ 272.998659][ T7376] r8152-cfgselector 3-1: config 0 descriptor?? [ 273.474755][ T5280] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 273.538575][ T58] r8152-cfgselector 3-1: USB disconnect, device number 62 [ 273.666148][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.677820][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.687925][ T5280] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 273.697539][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.707784][ T5280] usb 1-1: config 0 descriptor?? [ 273.732571][ T5282] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 273.912580][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 273.942235][ T5282] usb 2-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 273.961683][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.971037][ T5282] usb 2-1: Product: syz [ 273.976653][ T5282] usb 2-1: Manufacturer: syz [ 273.982660][ T5282] usb 2-1: SerialNumber: syz [ 273.989414][ T5282] usb 2-1: config 0 descriptor?? [ 273.996910][ T5282] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 274.006813][ T5282] usb 2-1: Detected FT232A [ 274.019049][ T5282] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 274.201409][ T5282] usb 2-1: USB disconnect, device number 35 [ 274.234482][ T5282] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 274.249325][ T5282] ftdi_sio 2-1:0.0: device disconnected [ 274.336409][ T5280] usb 1-1: language id specifier not provided by device, defaulting to English [ 274.422601][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 274.549533][ T5282] usb 4-1: USB disconnect, device number 41 [ 274.619483][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.628641][ T8647] netlink: 68 bytes leftover after parsing attributes in process `syz.3.759'. [ 274.651386][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.697486][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 274.710177][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.720281][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.748932][ T8645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.785109][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 274.815350][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 274.843327][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 274.858713][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 274.879254][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 274.892770][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 274.956478][ T8633] input: syz1 as /devices/virtual/input/input7 [ 275.084511][ C0] wdm_int_callback: 16795 callbacks suppressed [ 275.084531][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.097268][ C0] wdm_int_callback: 16795 callbacks suppressed [ 275.097282][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.109653][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.116275][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.122608][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.129220][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.135555][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.142181][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.148467][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.152530][ T5282] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 275.155056][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.169222][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.175819][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.182088][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.188700][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.194995][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.201610][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.208024][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.214645][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.220980][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.227582][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.254064][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.261792][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 275.263002][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.293468][ T58] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 275.439187][ T5282] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 275.475021][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.494105][ T5282] usb 4-1: Product: syz [ 275.503745][ T5282] usb 4-1: Manufacturer: syz [ 275.522912][ T5282] usb 4-1: SerialNumber: syz [ 275.546738][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 275.550795][ T5282] usb 4-1: config 0 descriptor?? [ 275.554819][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.554866][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.554889][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.557550][ T5282] xillyusb 4-1:0.0: Failed to send quiesce request. Aborting. [ 275.557590][ T5282] xillyusb 4-1:0.0: probe with driver xillyusb failed with error -5 [ 275.560920][ T59] [ 275.560929][ T59] ============================================ [ 275.560935][ T59] WARNING: possible recursive locking detected [ 275.560943][ T59] 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 Not tainted [ 275.560955][ T59] -------------------------------------------- [ 275.560961][ T59] kworker/1:1H/59 is trying to acquire lock: [ 275.560971][ T59] ffff88802fdfb548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 275.561025][ T59] [ 275.561025][ T59] but task is already holding lock: [ 275.561031][ T59] ffff88802fdfb548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 275.561075][ T59] [ 275.561075][ T59] other info that might help us debug this: [ 275.561082][ T59] Possible unsafe locking scenario: [ 275.561082][ T59] [ 275.561088][ T59] CPU0 [ 275.561092][ T59] ---- [ 275.561097][ T59] lock((wq_completion)xillyusb); [ 275.561110][ T59] lock((wq_completion)xillyusb); [ 275.561122][ T59] [ 275.561122][ T59] *** DEADLOCK *** [ 275.561122][ T59] [ 275.561126][ T59] May be due to missing lock nesting notation [ 275.561126][ T59] [ 275.561135][ T59] 2 locks held by kworker/1:1H/59: [ 275.561141][ T59] #0: ffff88802fdfb548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 275.561176][ T59] #1: ffffc9000134fd00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 275.561225][ T59] [ 275.561225][ T59] stack backtrace: [ 275.561233][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/1:1H Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 275.561253][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 275.561265][ T59] Workqueue: xillyusb wakeup_all [ 275.561283][ T59] Call Trace: [ 275.561291][ T59] [ 275.561298][ T59] dump_stack_lvl+0x241/0x360 [ 275.561317][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.561333][ T59] ? print_deadlock_bug+0x479/0x620 [ 275.561347][ T59] validate_chain+0x15d3/0x5900 [ 275.561375][ T59] ? __pfx_validate_chain+0x10/0x10 [ 275.561395][ T59] ? __pfx_validate_chain+0x10/0x10 [ 275.561415][ T59] ? __pfx_validate_chain+0x10/0x10 [ 275.561441][ T59] ? mark_lock+0x9a/0x350 [ 275.561466][ T59] __lock_acquire+0x137a/0x2040 [ 275.561493][ T59] lock_acquire+0x1ed/0x550 [ 275.561506][ T59] ? __flush_workqueue+0x1b0/0x1710 [ 275.561521][ T59] ? __pfx_lock_acquire+0x10/0x10 [ 275.561539][ T59] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 275.561566][ T59] ? __init_swait_queue_head+0xae/0x150 [ 275.561589][ T59] ? __flush_workqueue+0x1b0/0x1710 [ 275.561611][ T59] __flush_workqueue+0x1c9/0x1710 [ 275.561634][ T59] ? __flush_workqueue+0x1b0/0x1710 [ 275.561657][ T59] ? rcu_is_watching+0x15/0xb0 [ 275.561673][ T59] ? trace_contention_end+0x3c/0x120 [ 275.561686][ T59] ? __pfx___flush_workqueue+0x10/0x10 [ 275.561702][ T59] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.561729][ T59] drain_workqueue+0xc9/0x3a0 [ 275.561755][ T59] destroy_workqueue+0xba/0xc40 [ 275.561772][ T59] ? kfree+0x149/0x360 [ 275.561790][ T59] kref_put+0x104/0x180 [ 275.561808][ T59] ? process_scheduled_works+0x945/0x1830 [ 275.561829][ T59] process_scheduled_works+0xa2c/0x1830 [ 275.561853][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.561867][ T59] ? assign_work+0x364/0x3d0 [ 275.561880][ T59] worker_thread+0x86d/0xd40 [ 275.561904][ T59] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.561928][ T59] ? __kthread_parkme+0x169/0x1d0 [ 275.561952][ T59] ? __pfx_worker_thread+0x10/0x10 [ 275.561973][ T59] kthread+0x2f0/0x390 [ 275.561995][ T59] ? __pfx_worker_thread+0x10/0x10 [ 275.562016][ T59] ? __pfx_kthread+0x10/0x10 [ 275.562039][ T59] ret_from_fork+0x4b/0x80 [ 275.562060][ T59] ? __pfx_kthread+0x10/0x10 [ 275.562083][ T59] ret_from_fork_asm+0x1a/0x30 [ 275.562113][ T59] [ 275.565852][ T58] usb 5-1: config 0 descriptor?? [ 275.780696][ T945] usb 4-1: USB disconnect, device number 42 [ 275.954401][ T58] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 276.246812][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 276.247250][ T8670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.761'. [ 276.373360][ T5280] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 276.394577][ T5280] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 276.415316][ T5280] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 276.426456][ T5280] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 276.473688][ T5280] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 276.506763][ T5280] usb 1-1: USB disconnect, device number 53 [ 277.375723][ T5280] usb 3-1: USB disconnect, device number 63 [ 277.381629][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 278.439566][ T58] usb 5-1: USB disconnect, device number 47 [ 278.448384][ T58] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected