last executing test programs: 13.333750206s ago: executing program 0 (id=282): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000080)={&(0x7f0000000140)=""/134, 0x86}) 12.410939227s ago: executing program 0 (id=288): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0xa0000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000012, 0x0, 0x0, 0xffffffffffff7ffb, 0x9, 0x3, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) unshare(0x22020600) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) epoll_create(0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 9.914934867s ago: executing program 1 (id=298): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf86000000000000c4080000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r1], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="d4c1ce69a55f02b191d7d08b238b860a09f3a94b0ef55e21", 0x18) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x110, 0x5, 0x2, 0x1}]}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x8, 0x6) syz_extract_tcp_res$synack(&(0x7f00000003c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x105a, &(0x7f0000002380)=ANY=[@ANYBLOB="aaaaaaaa0600ffffffffffff08004615104c00670000269b10069078ffffffffff204e200000000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x4, [0xd24, 0x1b6, 0x5e0, 0x66c]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x148, 0x2c, 0xa35, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0xfff1}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x114, 0x2, [@TCA_MATCHALL_ACT={0x110, 0x2, [@m_ife={0x10c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0xc6, 0x6, "364c1b51cef5146d83570ec4a7745f988031a07da493f60e307611845aa4d5c8509771d62accde34e4e2bdcbeae5b1b27766107213d872f1241fab353cb57bad8181ac4e72ec9d1cfe1a282a0e7efb757784b8bc8896e2d0f47fc2fd70b315947f73d8db6f212c19ab10b37501104155a71479cfbc641df5ac29e069605241fbbb972a867b165c64ca578e01200325c4545b0993987875d90ef06ad72e5643566931c3ec1540377f377dea79300ac5f8f8965ebe97be2c5e791690eb243300000000"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], 0x10) 9.668661042s ago: executing program 4 (id=299): fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000906010800000000080020000200feff0900020073797a310000000008000940000004390500010007000000100008800c000780080009"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9.118495491s ago: executing program 0 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x0, 0x0, 0x0, 0x7, 0xde, &(0x7f0000000300)=""/222, 0x1f00, 0x14, '\x00', r2, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x7fffffff, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1], 0x0, 0x10, 0xfd}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)}, {&(0x7f0000000580)="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", 0x1aa}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r5, &(0x7f0000003780)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.110664197s ago: executing program 4 (id=302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f0000000140)=0x27a8dfcf, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0xe4, 0x18, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x0, 0x9, 0xfc, 0x4, 0xff, 0x9, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @RTA_PREF={0x5}, @RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_METRICS={0xa2, 0x8, 0x0, 0x1, "9f3ed11c6b1ac22465908b21cad13b2bb4073019a762a1710f18ada364c92fc94fab20fb59b2da04d5a7fbb751cc189d530650f11520b8f7de60c95a6619f4ba76ecfae22705543bd1f564dc025c3c5f858f8d7cc028cb60a616c854edafdc1fc314fb81871ba847175b0c8f2930fe20853d440f8ffa452b49d2131e41adabc779f620f01f5c7faad56337a52113e96957ccd61018a0c8bf22d6b86989a0"}]}, 0xe4}}, 0x20000000) 8.589723398s ago: executing program 4 (id=305): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)="b6ef0ed6edaa5aa7cae642051ea7", 0xe}], 0x1, 0x0, 0x1d8}}], 0x1, 0x20008040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="b4030000100033060000000000000000fe880000000000000000000000000101ac1414000000000000000000000000004e22000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="ac141441000000000000000000000000000004d5330000000000000000000000000000000000000000800000000000005a9100000000000008000000000000000400000000000000"], 0x3b4}}, 0x0) fsopen(0x0, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) 7.762893931s ago: executing program 0 (id=307): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000}) read$FUSE(r1, &(0x7f0000004940)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0xd, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x29f, 0x200, 0x0, 0x0}, {0x4, 0x6000, 0x0, 0x0}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400f7ff", @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7742, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, 0x0) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="640f7927660f3880b0c9d300002e454f01b60018000066460f3acfc8aa410f01cab9850800000f322e470f01cb3e0f01d1c4e20129100f20c035000001000f22c0", 0x41}], 0x1, 0x43, 0x0, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.658013017s ago: executing program 3 (id=309): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae32ba2b10000000000e5000000000007ee0000004000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000010c0)={0x5, "001921bc00f20000000100000017000002202000"}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) pipe(&(0x7f0000000480)) eventfd2(0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 7.594985783s ago: executing program 3 (id=310): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000480)) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000140)={@my=0x1, 0xbb}) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000200)={{0x2, @addr=0x9}, "8f7eb5112f898f635de9626c9f2a4a0e8623b743095107729eae0b6d635827e0", 0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x108, &(0x7f0000000040)=0x81, 0x0, 0x4) io_uring_enter(r1, 0x2d3e, 0x0, 0x40, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x70}}, 0x8010) 7.467182768s ago: executing program 1 (id=311): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0xa0000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000012, 0x0, 0x0, 0xffffffffffff7ffb, 0x9, 0x3, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) unshare(0x22020600) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) epoll_create(0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 6.914847056s ago: executing program 2 (id=312): unshare(0x2040400) syz_usb_connect(0x0, 0x202, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000600)) (fail_nth: 1) 6.571898912s ago: executing program 4 (id=313): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080001400000025c0c0001800800014000000a00080006400000030005000500020000000500010006000000"], 0x6c}}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=""/32, 0x20}) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000100)=ANY=[]) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20cadfc9989d68668074d8f9d313f89c1f36d230e50df7692f2b3e2edcc69e88a7fd479f7d4960", @ANYRES16=r1], 0x38}}, 0x0) 6.285223123s ago: executing program 2 (id=314): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x1, 0x20, 0x8, 0x6, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @local, {[@timestamp={0x44, 0x14, 0x5d, 0x0, 0x2, [0x4, 0x5, 0x3ff, 0x5]}, @generic={0x82, 0xa, "c0ae455adeb84863"}, @noop]}}}}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r3, 0x1) sendto$inet(r3, 0x0, 0x0, 0x8020, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r5, 0x0, {0x1, 0xfe, 0x2}}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x24000005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r7, 0x0, {0x1, 0xfe, 0x2}}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x1}, 0x24000005) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@getchain={0x54, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xfff2}, {0xf, 0x10}, {0xfff1, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.151447497s ago: executing program 3 (id=315): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) 5.919658627s ago: executing program 3 (id=316): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524"], 0x0) 4.980459911s ago: executing program 0 (id=317): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) setxattr$incfs_size(0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x5, 0x8, 0x2) sendmsg(r2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r7 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r8, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="0000196b1c3ff9fc8000e9d928f8f4bcfa00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r7, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003f80), 0x228100) 4.562887252s ago: executing program 2 (id=318): syz_usb_connect$uac1(0x0, 0x97, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80}) r1 = userfaultfd(0x80001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r4, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x400, 0x2) 4.420832147s ago: executing program 4 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000000000000000e0000a80480002800800034000000003080003400000000308000340000000020900020073797a310000000008000340000000010800034000000001080001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x40000000000}) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x6}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x9, 0x8000) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x52482, 0x0) 3.785130655s ago: executing program 1 (id=320): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae32ba2b10000000000e5000000000007ee0000004000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000010c0)={0x5, "001921bc00f20000000100000017000002202000"}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) pipe(&(0x7f0000000480)) eventfd2(0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 3.689885912s ago: executing program 1 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0xcff}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 3.438186737s ago: executing program 4 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x28, 0x107, 0x8000000, 0x1, {0x5, 0x7c}}, 0x14}}, 0x40080c0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r3, 0x0, 0x400000000000000, 0x7) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xeb0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe84, 0x2, [@TCA_FW_ACT={0xe80, 0x4, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x1, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x200007, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0xe7, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1c7, 0x304, 0x4, 0x4002d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xdde, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x2, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x9f, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0xc, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x0, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xf, 0x792c, 0xa4, 0x8, 0x8, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x4, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x6, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0xfffffffd, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x9, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x8, 0x56c, 0xffff9586, 0xd, 0x9, 0xf}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x0, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x9, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xeb0}}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943280c00", 0xbd) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020000000000000000000010902240001000000f60904"], 0x0) 2.94192635s ago: executing program 2 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0xa00, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 2.663213922s ago: executing program 1 (id=324): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x37e08658adf9aa53, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) unshare(0x20000400) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, {0x10000000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000280)=@v3={0x3000000, [{0x5}, {0x8000, 0x835}]}, 0x18, 0x3) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000140)=""/62, &(0x7f00000001c0)=0x3e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0xa}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x50000015}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8940, 0x0, 0x0) chmod(&(0x7f00000002c0)='./file1\x00', 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 2.578191814s ago: executing program 3 (id=325): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40281, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = dup3(r2, r0, 0x80000) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000000080)) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800430500000f"], 0xffbf) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x15, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}, "e7c37e9156"}}}}}}}, 0x0) 2.163024831s ago: executing program 2 (id=326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00'], 0x0}, 0x0) 1.758585827s ago: executing program 0 (id=327): r0 = fsopen(&(0x7f0000000400)='btrfs\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0xa679d07be9d27db9, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r11, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 1.572601296s ago: executing program 3 (id=328): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r1}, &(0x7f0000001380)=""/4093, 0xffd, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1, 0xff}, [@IFA_CACHEINFO={0x14, 0x6, {0xff, 0x662, 0x8001, 0x7}}, @IFA_FLAGS={0x8, 0x8, 0xac321edddf4ec935}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060000}, 0x8000800) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x12}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x800}, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ecm(0x5, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x7f, 0xe0, 0x33, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, "d8"}, {0x5, 0x24, 0x0, 0x384b}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x2fa5, 0x60, 0xfa}, [@mbim={0xc, 0x24, 0x1b, 0x55, 0x5, 0x9, 0x5, 0xffb2, 0x6}, @obex={0x5}, @dmm={0x7, 0x24, 0x14, 0x37dd, 0xffff}, @obex={0x5, 0x24, 0x15, 0xb}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xff, 0x40, 0x28, 0x20}, 0x5e, &(0x7f00000002c0)={0x5, 0xf, 0x5e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x8, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "298beefa1faa071c4675c743d78a8a21"}, @ssp_cap={0x1c, 0x10, 0xa, 0xb, 0x4, 0x5, 0xf0f, 0x3, [0x0, 0x0, 0xff0021, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xc, 0x80, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e51940eefc29955faf220222aca12bba"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xa0, &(0x7f0000000400)=@string={0xa0, 0x3, "d36bf1f46130b684ce0579f85d311fda1dac2e7fbb5de3b64ea97ec766e6b6deb337c118edc87580a91c8741e3f4307e972df7c96b122454ec47c89db5515dad4990c89b4c4b22366ec11d51949810e55fd2483064c395480d1def843a5fa83ce1358b593c949930ec8a0283512fb899726adda1262ff37efe7bc7a8d231388490121365cea0fecbb15e2e1a139689be8b836caff67b8c1944b901feba67"}}]}) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x0, 0xd, 0xda, {0xda, 0x24, "8a85754198c86f3bb228d421f440ec080e0a390e6da2bedd47697d0e3828bec6b866217ea5d803c4a944e818c55bddff05c5ed459d0f84ebc874bb87162d86c3a98094dbf17b970af42253bd1284e35501ba829b1d3199e7d7ea92781d12f93ded02e70ac30c947caa9cbc2dfec7e5a0e08acea52bbce6e2da16d828276f982e6db227c22f3dba60d6e1e70c7eafbac7746a8356802ec509cd25ac166d8cdd5610b19c39317451bfd66fb9fcb137e82dc2ef308fdac644087582fc3d83b0565c68fe68a8c19a35f2ac4e94401279d9bfb2076b303e1508dd"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f00000006c0)={0x0, 0xf, 0xe6, {0x5, 0xf, 0xe6, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f2af3f3aa1ba836638edb551fdb32afc"}, @generic={0xbb, 0x10, 0x4, "aefb7b31d599b1b0e3fc421dcfbb8c7511787f95eba0e5b6b0796babac7e62a7d120d38cad8432ecc334255fdca2f308d88fc8ab12a57f119b601ad5147c47838b06d97bbb70397f662b665ddf8b112ebb4da8823aa648cb1b89a01ca60bed88b282ada711e8b8768feb545a2601fe43347c86a6b855832257c3f1154a2b8f9ab5675b22fbde9da2fabf2f181723992d8d1dd52ae5dcdee61a794797aa76ed5dcd5d64ac0c539ab7fe2e55639b3b92564e6de3bc144e217f"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x7, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x6, 0x55, 0x9, 0x1}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x30, 0x10, 0x8, 0x6, "186a5bff", "48048e51"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xd5, 0x9, 0x3, 0x2, 0x4}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000880)={0x60, 0x18, 0x12, "1303f56eb60d10a32b109bb4318f404baae1"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x560, 0x12, [0x870f]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "cb1c"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "c50d"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) syz_open_dev$I2C(0x0, 0x1, 0x402) 516.819373ms ago: executing program 1 (id=329): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/202, 0xca}, {0x0}], 0x2, 0xc, 0x5, 0x1) r6 = dup2(r0, r0) clock_getres(0xfffffffffffffff2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x1ab841) 0s ago: executing program 2 (id=330): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0xa0000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000012, 0x0, 0x0, 0xffffffffffff7ffb, 0x9, 0x3, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) unshare(0x22020600) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) epoll_create(0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): .230192][ T5878] usb 5-1: SerialNumber: syz [ 129.251186][ T5951] usb 2-1: can't read configurations, error -71 [ 129.412102][ T30] audit: type=1326 audit(1755277746.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x0 [ 129.611026][ T5878] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 129.644074][ T5878] gspca_sn9c20x: Write register 1000 failed -71 [ 129.676708][ T5878] gspca_sn9c20x: Device initialization failed [ 129.682934][ T5878] gspca_sn9c20x 5-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 129.814887][ T5878] usb 5-1: USB disconnect, device number 4 [ 130.246152][ T5928] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 130.318504][ T5928] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 130.374227][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 130.387063][ T5928] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 130.421431][ T5928] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 130.588833][ T5928] usb 4-1: USB disconnect, device number 8 [ 130.693949][ T5951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.928893][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 131.147278][ T5951] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 131.178180][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.203013][ T5951] usb 3-1: Product: syz [ 131.247217][ T5951] usb 3-1: Manufacturer: syz [ 131.254894][ T5951] usb 3-1: SerialNumber: syz [ 131.270504][ T5951] usb 3-1: config 0 descriptor?? [ 131.287030][ T5951] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 131.705770][ T6296] netlink: 244 bytes leftover after parsing attributes in process `syz.0.87'. [ 131.760416][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 131.830059][ T6294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.84'. [ 131.860929][ T5951] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 131.939138][ T5951] usb 3-1: USB disconnect, device number 6 [ 132.107267][ T1226] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.368041][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 132.433091][ T1226] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 132.442860][ T1226] usb 1-1: config 252 has no interface number 0 [ 132.565687][ T1226] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 132.667698][ T1226] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 132.679725][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.715041][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.737793][ T1226] usb 1-1: Product: syz [ 132.742065][ T1226] usb 1-1: Manufacturer: syz [ 132.804697][ T1226] usb 1-1: SerialNumber: syz [ 133.005489][ T1226] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 133.025959][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 133.044805][ T1226] usb 1-1: USB disconnect, device number 10 [ 133.052934][ T36] usb 1-1: Failed to submit usb control message: -71 [ 133.083479][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 133.117394][ T36] usb 1-1: unable to get target info from device [ 133.159821][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 133.170006][ T36] usb 1-1: could not get target info (-71) [ 133.254859][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.281872][ T36] usb 1-1: could not probe fw (-71) [ 133.297587][ T6323] netlink: 'syz.4.91': attribute type 21 has an invalid length. [ 133.305987][ T9] usb 2-1: Product: syz [ 133.310200][ T9] usb 2-1: Manufacturer: syz [ 133.329041][ T9] usb 2-1: SerialNumber: syz [ 133.333906][ T6323] netlink: 128 bytes leftover after parsing attributes in process `syz.4.91'. [ 133.373047][ T9] usb 2-1: config 0 descriptor?? [ 133.387812][ T6323] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 133.416032][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 133.475905][ T6323] netlink: 'syz.4.91': attribute type 5 has an invalid length. [ 133.500462][ T6323] netlink: 3 bytes leftover after parsing attributes in process `syz.4.91'. [ 133.574888][ T5951] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.811768][ T6328] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 133.850765][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.883773][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.912581][ T5951] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=38.d2 [ 133.959385][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.970873][ T5951] usb 3-1: Product: syz [ 133.975877][ T5951] usb 3-1: Manufacturer: syz [ 133.980874][ T5951] usb 3-1: SerialNumber: syz [ 134.016472][ T5951] usb 3-1: config 0 descriptor?? [ 134.075081][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.289006][ T5921] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 134.406237][ T5921] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 134.456595][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.541688][ T5921] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 134.592367][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.603262][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.845804][ T9] gspca_sonixj: reg_w1 err -110 [ 134.895359][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 135.074900][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.246660][ T5878] usb 5-1: config 0 has no interfaces? [ 135.250419][ T5951] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.268890][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.279763][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.289427][ T5878] usb 5-1: Product: syz [ 135.294468][ T5878] usb 5-1: Manufacturer: syz [ 135.344572][ T5878] usb 5-1: SerialNumber: syz [ 135.375905][ T5878] usb 5-1: config 0 descriptor?? [ 135.458361][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.492852][ T5951] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 135.533393][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.588018][ T5951] usb 4-1: config 0 descriptor?? [ 135.623336][ T5878] usb 5-1: USB disconnect, device number 5 [ 135.687541][ T5921] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 135.704391][ T5921] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 135.733380][ T5921] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 135.763680][ T5921] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 136.647187][ T5921] usb 1-1: USB disconnect, device number 11 [ 136.662822][ T5951] itetech 0003:258A:6A88.0002: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 136.889075][ T5878] usb 4-1: USB disconnect, device number 9 [ 136.961512][ T9] usb 2-1: USB disconnect, device number 8 [ 137.185401][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.250899][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 137.344718][ T5921] usb 5-1: device descriptor read/64, error -71 [ 137.799583][ T30] audit: type=1326 audit(1755277754.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 137.856908][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.895112][ T9] usb 3-1: USB disconnect, device number 7 [ 137.915910][ T30] audit: type=1326 audit(1755277754.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 137.954042][ T30] audit: type=1326 audit(1755277754.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 138.054819][ T30] audit: type=1326 audit(1755277754.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d4018d550 code=0x7ffc0000 [ 138.095892][ T5921] usb 5-1: device descriptor read/64, error -71 [ 138.152864][ T30] audit: type=1326 audit(1755277754.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 138.258359][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.265476][ T5921] usb usb5-port1: attempt power cycle [ 138.276624][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.288871][ T30] audit: type=1326 audit(1755277754.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d4018d550 code=0x7ffc0000 [ 138.518667][ T30] audit: type=1326 audit(1755277754.420:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 138.567877][ T30] audit: type=1326 audit(1755277754.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 138.656932][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.681678][ T6392] netlink: 120 bytes leftover after parsing attributes in process `syz.2.103'. [ 138.753085][ T5921] usb 5-1: device descriptor read/8, error -71 [ 138.795285][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.117175][ T9] usb 4-1: config 0 has no interfaces? [ 139.170371][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.229163][ T5921] usb 5-1: device descriptor read/8, error -71 [ 139.251512][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 139.355505][ T5921] usb usb5-port1: unable to enumerate USB device [ 139.416796][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.545554][ T9] usb 4-1: Product: syz [ 139.555823][ T9] usb 4-1: Manufacturer: syz [ 139.584743][ T9] usb 4-1: SerialNumber: syz [ 139.675469][ T9] usb 4-1: config 0 descriptor?? [ 140.011636][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.224501][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.232848][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.407228][ T6407] team_slave_0: left promiscuous mode [ 140.433452][ T6407] team_slave_1: left promiscuous mode [ 140.544922][ T6407] bridge_slave_0: left allmulticast mode [ 140.557458][ T6407] bridge_slave_0: left promiscuous mode [ 140.601910][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.645017][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.653955][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.706149][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.715261][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.905919][ T6407] bridge_slave_1: left allmulticast mode [ 140.915970][ T6407] bridge_slave_1: left promiscuous mode [ 140.922043][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.023224][ T6433] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 141.087732][ T6407] bond0: (slave bond_slave_0): Releasing backup interface [ 141.166283][ T6407] bond0: (slave bond_slave_1): Releasing backup interface [ 141.187331][ T6407] team0: Port device team_slave_0 removed [ 141.207083][ T6407] team0: Port device team_slave_1 removed [ 141.221862][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.233616][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.247686][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.255378][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.269580][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.397208][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.415071][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.423993][ T5951] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 141.438204][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.460644][ T5951] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.481368][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.543317][ T3497] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.553293][ T5951] usb 3-1: Product: syz [ 141.575499][ T5951] usb 3-1: Manufacturer: syz [ 141.586246][ T5951] usb 3-1: SerialNumber: syz [ 141.924811][ T5878] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.032743][ T5951] usb 3-1: 0:2 : does not exist [ 142.074668][ T5951] usb 3-1: USB disconnect, device number 8 [ 142.129082][ T6434] bond1: entered promiscuous mode [ 142.134534][ T6434] bond1: entered allmulticast mode [ 142.141863][ T6434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.252173][ T6435] ip6gretap1: entered promiscuous mode [ 142.259965][ T6435] ip6gretap1: entered allmulticast mode [ 142.269755][ T6435] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.280492][ T3497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.294039][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.297231][ T1141] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.381627][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.393354][ T5878] usb 1-1: config 0 has no interfaces? [ 142.425958][ T5878] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.456254][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.466006][ T1141] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.575706][ T5878] usb 1-1: config 0 descriptor?? [ 143.001361][ T6452] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.112'. [ 143.680472][ T5928] usb 4-1: USB disconnect, device number 10 [ 143.703496][ T6468] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 144.001147][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 144.014763][ T6476] batadv_slave_0: entered promiscuous mode [ 144.030681][ T5951] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.085243][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.779139][ T5928] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.827163][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.837341][ T5951] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.868245][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.900470][ T5951] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.904808][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.014720][ T5951] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.032971][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.033411][ T5951] usb 3-1: Manufacturer: syz [ 145.056959][ T5928] usb 4-1: Product: syz [ 145.061174][ T5928] usb 4-1: Manufacturer: syz [ 145.218352][ T5951] usb 3-1: config 0 descriptor?? [ 145.275239][ T5928] usb 4-1: SerialNumber: syz [ 145.287492][ T5928] usb 4-1: config 0 descriptor?? [ 145.311311][ T5928] usb 4-1: selecting invalid altsetting 0 [ 145.421276][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 145.434973][ T6482] fuse: Bad value for 'fd' [ 145.753550][ T5921] usb 1-1: USB disconnect, device number 12 [ 145.928353][ T5951] rc_core: IR keymap rc-hauppauge not found [ 145.967522][ T5951] Registered IR keymap rc-empty [ 145.979235][ T5928] usb 4-1: USB disconnect, device number 11 [ 146.006487][ T5951] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.038719][ T5951] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 146.214701][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 146.303070][ T5878] usb 3-1: USB disconnect, device number 9 [ 147.118173][ T5878] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.305122][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 147.329725][ T5878] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 147.339377][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.361333][ T5878] usb 1-1: Product: syz [ 147.383089][ T5878] usb 1-1: Manufacturer: syz [ 147.393239][ T5878] usb 1-1: SerialNumber: syz [ 147.436100][ T5878] usb 1-1: config 0 descriptor?? [ 147.514418][ T5878] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 147.615628][ T6514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.939428][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 147.995490][ T6500] netlink: 80 bytes leftover after parsing attributes in process `syz.0.119'. [ 148.025353][ T5878] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 148.064817][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.104091][ T5878] usb 1-1: USB disconnect, device number 13 [ 148.259410][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 148.283207][ T9] usb 5-1: config 0 has no interface number 0 [ 148.320301][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 148.364981][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 148.401533][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 148.414808][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 148.425237][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.443324][ T9] usb 5-1: config 0 descriptor?? [ 148.463497][ T9] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 149.152635][ T5878] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 149.285029][ T5951] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.377026][ T5878] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 149.402825][ T5878] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 149.425733][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.444694][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 149.469316][ T5878] usb 2-1: config 1 has no interface number 0 [ 149.484766][ T5878] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 149.484954][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 149.514412][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.543981][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.568309][ T5951] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 149.582180][ T10] usb 5-1: USB disconnect, device number 10 [ 149.590973][ T5878] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 149.718081][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.776871][ T5951] usb 1-1: config 0 descriptor?? [ 149.859753][ T5921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.860923][ T5878] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 149.886982][ T5878] snd_usb_pod 2-1:1.1: invalid control EP [ 149.892853][ T5878] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 149.917107][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 149.925314][ T5878] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 149.943976][ T5878] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 150.144806][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.175174][ T5921] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.175234][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.178203][ T5921] usb 3-1: config 0 descriptor?? [ 150.192692][ T5921] pwc: Askey VC010 type 2 USB webcam detected. [ 150.204210][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 150.292635][ T5951] usbhid 1-1:0.0: can't add hid device: -71 [ 150.292770][ T5951] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.310787][ T5951] usb 1-1: USB disconnect, device number 14 [ 150.634395][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.638206][ T5921] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.639300][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.640232][ T5921] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.642126][ T5921] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.650400][ T5921] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.664762][ T5921] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.890742][ T5921] pwc: recv_control_msg error -71 req 04 val 1500 [ 150.913080][ T5921] pwc: recv_control_msg error -71 req 02 val 2500 [ 150.944762][ T5921] pwc: recv_control_msg error -71 req 02 val 2400 [ 150.970901][ T5921] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.008275][ T5921] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.027764][ T5921] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.036302][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.056251][ T5921] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.066364][ T5921] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.106656][ T5921] pwc: Registered as video103. [ 151.124906][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.131076][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 151.176716][ T5921] usb 3-1: USB disconnect, device number 10 [ 151.185171][ T6562] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 151.192459][ T6562] syzkaller1: linktype set to 1 [ 151.225088][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.246904][ T6563] +: renamed from syzkaller0 [ 151.263748][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.314094][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.350343][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.432316][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.465051][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.466305][ T5951] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.580690][ T5921] usb 2-1: USB disconnect, device number 9 [ 151.621072][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.669223][ T6561] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 151.677953][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 151.702570][ T5951] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 151.735868][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.736794][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.741886][ T6557] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 151.814488][ T5951] usb 4-1: config 0 has no interface number 0 [ 151.864934][ T5951] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 151.894512][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.936286][ T5951] usb 4-1: Product: syz [ 151.953508][ T5951] usb 4-1: Manufacturer: syz [ 151.970324][ T5951] usb 4-1: SerialNumber: syz [ 152.004571][ T5951] usb 4-1: config 0 descriptor?? [ 152.029121][ T5951] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 152.434923][ T5951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.594819][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 152.777881][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 153.304818][ T1226] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.475466][ T1226] usb 5-1: Using ep0 maxpacket: 8 [ 153.488655][ T1226] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 153.500552][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.509031][ T1226] usb 5-1: Product: syz [ 153.518238][ T1226] usb 5-1: Manufacturer: syz [ 153.528212][ T1226] usb 5-1: SerialNumber: syz [ 153.559537][ T1226] usb 5-1: config 0 descriptor?? [ 153.578624][ T1226] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 154.061821][ T5982] usb 4-1: USB disconnect, device number 12 [ 154.291226][ T6590] fuse: Bad value for 'fd' [ 154.386688][ T5878] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 154.593738][ T5878] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 154.614503][ T5878] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 154.650498][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.664908][ T5921] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.672668][ T1226] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 154.694350][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 154.738383][ T5878] usb 3-1: config 1 has no interface number 0 [ 154.745350][ T1226] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 154.762253][ T5878] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 154.792219][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.848037][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.918578][ T5921] usb 4-1: config 0 has no interface number 0 [ 154.942571][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 155.164308][ T5921] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.191073][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.200820][ T10] usb 5-1: USB disconnect, device number 11 [ 155.237527][ T5921] usb 4-1: Product: syz [ 155.267628][ T5921] usb 4-1: Manufacturer: syz [ 155.306523][ T5921] usb 4-1: SerialNumber: syz [ 155.336367][ T6592] netlink: 244 bytes leftover after parsing attributes in process `syz.0.140'. [ 155.347518][ T5921] usb 4-1: config 0 descriptor?? [ 155.616081][ T5921] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 155.695219][ T849] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.700842][ T5921] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.819625][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.836172][ T6590] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 155.864553][ T5921] usb 4-1: media controller created [ 155.884945][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 155.892729][ T849] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 155.911172][ T849] usb 1-1: config 252 has no interface number 0 [ 155.981387][ T849] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 156.006866][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.060655][ T849] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 156.101497][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.144747][ T849] usb 1-1: Product: syz [ 156.198926][ T849] usb 1-1: Manufacturer: syz [ 156.287433][ T849] usb 1-1: SerialNumber: syz [ 156.359598][ T849] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 156.518434][ T12] usb 1-1: Failed to submit usb control message: -71 [ 156.527449][ T849] usb 1-1: USB disconnect, device number 15 [ 156.536434][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 156.543598][ T12] usb 1-1: unable to get target info from device [ 156.587097][ T12] usb 1-1: could not get target info (-71) [ 156.607158][ T12] usb 1-1: could not probe fw (-71) [ 156.731183][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.741808][ T5951] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 156.766701][ T5951] usb 2-1: can't read configurations, error -71 [ 157.595684][ T5921] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 157.745611][ T5878] snd_usb_pod 3-1:1.1: set_interface failed [ 157.751697][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 157.826372][ T5921] usb 4-1: USB disconnect, device number 13 [ 157.835152][ T5878] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 157.900592][ T5878] usb 3-1: USB disconnect, device number 11 [ 157.963633][ T6609] netlink: del zone limit has 4 unknown bytes [ 157.992068][ T6598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.034558][ T6608] netlink: zone id is out of range [ 158.126552][ T6608] netlink: zone id is out of range [ 158.131869][ T6608] netlink: zone id is out of range [ 158.142888][ T6608] netlink: zone id is out of range [ 158.148383][ T6608] netlink: zone id is out of range [ 158.153636][ T6608] netlink: zone id is out of range [ 158.178078][ T6608] netlink: zone id is out of range [ 158.214083][ T6608] netlink: zone id is out of range [ 158.220367][ T6608] netlink: zone id is out of range [ 158.268980][ T6603] pim6reg: entered allmulticast mode [ 158.665774][ T6599] pim6reg: left allmulticast mode [ 158.893852][ T6618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.823541][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 159.839552][ T6628] fuse: Bad value for 'fd' [ 160.061374][ T30] audit: type=1326 audit(1755277776.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.143673][ T30] audit: type=1326 audit(1755277776.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.260295][ T30] audit: type=1326 audit(1755277776.680:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.322214][ T30] audit: type=1326 audit(1755277776.680:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.384768][ T30] audit: type=1326 audit(1755277776.680:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.457005][ T30] audit: type=1326 audit(1755277776.680:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.479491][ T849] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.524771][ T30] audit: type=1326 audit(1755277776.680:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.555186][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 160.571728][ T30] audit: type=1326 audit(1755277776.680:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.644887][ T849] usb 4-1: Using ep0 maxpacket: 8 [ 160.655577][ T849] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 160.664951][ T849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.694750][ T30] audit: type=1326 audit(1755277776.680:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.727123][ T849] usb 4-1: Product: syz [ 160.731315][ T849] usb 4-1: Manufacturer: syz [ 160.786286][ T849] usb 4-1: SerialNumber: syz [ 160.815973][ T849] usb 4-1: config 0 descriptor?? [ 160.835180][ T30] audit: type=1326 audit(1755277776.680:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4018ebe9 code=0x7ffc0000 [ 160.863007][ T849] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 161.124782][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.238943][ T6645] netlink: 244 bytes leftover after parsing attributes in process `syz.0.154'. [ 161.656467][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 161.686172][ T5878] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 161.700006][ T5878] usb 2-1: config 0 has no interface number 0 [ 161.721569][ T5878] usb 2-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 161.734886][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.734895][ T5921] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.824277][ T6652] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.156'. [ 161.969733][ T5867] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 161.977564][ T5878] usb 2-1: Product: syz [ 161.977587][ T5878] usb 2-1: Manufacturer: syz [ 161.977603][ T5878] usb 2-1: SerialNumber: syz [ 161.991671][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 162.005308][ T5921] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 162.013688][ T5921] usb 1-1: config 252 has no interface number 0 [ 162.020067][ T5921] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 162.041387][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.051682][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.110703][ T5878] usb 2-1: config 0 descriptor?? [ 162.139185][ T5878] usb 2-1: bad CDC descriptors [ 162.141396][ T5921] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 162.153280][ T5878] cdc_acm 2-1:0.180: Zero length descriptor references [ 162.153311][ T5878] cdc_acm 2-1:0.180: probe with driver cdc_acm failed with error -22 [ 162.186608][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.225624][ T5921] usb 1-1: Product: syz [ 162.314741][ T5921] usb 1-1: Manufacturer: syz [ 162.315055][ T849] gspca_sonixj: reg_r err -110 [ 162.351249][ T849] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 162.359472][ T5921] usb 1-1: SerialNumber: syz [ 162.569967][ T5921] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.723048][ T1141] usb 1-1: Failed to submit usb control message: -71 [ 162.730310][ T5921] usb 1-1: USB disconnect, device number 16 [ 162.778170][ T1141] usb 1-1: unable to send the bmi data to the device: -71 [ 162.795709][ T1141] usb 1-1: unable to get target info from device [ 162.815162][ T1141] usb 1-1: could not get target info (-71) [ 162.830495][ T1141] usb 1-1: could not probe fw (-71) [ 163.064861][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.248050][ T6664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.255541][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 163.268101][ T5878] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.279709][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.321350][ T5878] usb 5-1: Product: syz [ 163.350476][ T5878] usb 5-1: Manufacturer: syz [ 163.378835][ T5878] usb 5-1: SerialNumber: syz [ 163.415070][ T5878] usb 5-1: config 0 descriptor?? [ 163.603665][ T849] usb 4-1: USB disconnect, device number 14 [ 163.634682][ T5921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.638108][ T5878] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.794722][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 163.828738][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.921524][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 163.931226][ T849] usb 2-1: USB disconnect, device number 12 [ 163.957782][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.975001][ T5921] usb 1-1: Product: syz [ 163.981769][ T5921] usb 1-1: Manufacturer: syz [ 163.990031][ T5921] usb 1-1: SerialNumber: syz [ 164.016915][ T5921] usb 1-1: config 0 descriptor?? [ 164.248297][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.447088][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 164.614688][ T5951] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.717351][ T5878] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 164.765698][ T5951] usb 2-1: device descriptor read/64, error -71 [ 164.868633][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.164'. [ 165.095203][ T5951] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.116323][ T5878] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 165.274839][ T5951] usb 2-1: device descriptor read/64, error -71 [ 165.291747][ T5878] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 165.309588][ T5878] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 165.324687][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.342133][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 165.358396][ T5878] usb 3-1: config 1 has no interface number 0 [ 165.371050][ T5878] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 165.387659][ T5951] usb usb2-port1: attempt power cycle [ 165.399712][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.434847][ T5982] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 165.437756][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 165.603936][ T5982] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.620378][ T5982] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.630990][ T5982] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.644062][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.657900][ T5982] usb 4-1: Product: syz [ 165.665613][ T5982] usb 4-1: Manufacturer: syz [ 165.672671][ T5982] usb 4-1: SerialNumber: syz [ 165.683975][ T5878] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 165.692515][ T5878] snd_usb_pod 3-1:1.1: invalid control EP [ 165.698801][ T5878] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 165.708562][ T5982] usb 4-1: config 0 descriptor?? [ 165.717780][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 165.725004][ T5951] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.734051][ T5878] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 165.749324][ T5951] usb 2-1: device descriptor read/8, error -71 [ 165.763861][ T5982] usb 4-1: selecting invalid altsetting 0 [ 166.004853][ T5951] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.038209][ T5951] usb 2-1: device descriptor read/8, error -71 [ 166.056692][ T5878] usb 5-1: USB disconnect, device number 12 [ 166.145280][ T5951] usb usb2-port1: unable to enumerate USB device [ 166.304560][ T849] usb 4-1: USB disconnect, device number 15 [ 166.673728][ T5878] usb 1-1: USB disconnect, device number 17 [ 166.763383][ T6693] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.167'. [ 166.855696][ T5867] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 167.257363][ T5878] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 167.314455][ T10] usb 3-1: USB disconnect, device number 12 [ 167.474968][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 167.506668][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.525553][ T5878] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 167.563568][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.633715][ T5878] usb 1-1: config 0 descriptor?? [ 168.134305][ T5878] hid (null): report_id 0 is invalid [ 168.150321][ T5878] wacom 0003:056A:00BA.0003: report_id 0 is invalid [ 168.150359][ T5878] wacom 0003:056A:00BA.0003: item 0 1 1 8 parsing failed [ 168.151343][ T5878] wacom 0003:056A:00BA.0003: parse failed [ 168.151419][ T5878] wacom 0003:056A:00BA.0003: probe with driver wacom failed with error -22 [ 168.343054][ T5951] usb 1-1: USB disconnect, device number 18 [ 168.435738][ T849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.585061][ T849] usb 3-1: Using ep0 maxpacket: 8 [ 168.602839][ T849] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 168.602863][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.602878][ T849] usb 3-1: Product: syz [ 168.602888][ T849] usb 3-1: Manufacturer: syz [ 168.602900][ T849] usb 3-1: SerialNumber: syz [ 168.606530][ T849] usb 3-1: config 0 descriptor?? [ 168.628877][ T849] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 168.799534][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 169.339671][ T5878] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 169.713796][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.722942][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.764949][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 169.772543][ T5878] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 169.833368][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.952318][ T5878] usb 1-1: config 0 descriptor?? [ 170.073828][ T849] gspca_sonixj: reg_w1 err -110 [ 170.184995][ T849] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 171.044717][ T849] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.214824][ T5878] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 171.230217][ T849] usb 4-1: Using ep0 maxpacket: 16 [ 171.237670][ T5878] asix 1-1:0.0: probe with driver asix failed with error -71 [ 171.248973][ T849] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 171.267558][ T5878] usb 1-1: USB disconnect, device number 19 [ 171.275920][ T849] usb 4-1: config 0 has no interface number 0 [ 171.333736][ T5951] usb 3-1: USB disconnect, device number 13 [ 171.340216][ T849] usb 4-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 171.417579][ T849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.444927][ T849] usb 4-1: Product: syz [ 171.453240][ T849] usb 4-1: Manufacturer: syz [ 171.469741][ T849] usb 4-1: SerialNumber: syz [ 171.481748][ T849] usb 4-1: config 0 descriptor?? [ 171.503172][ T849] usb 4-1: bad CDC descriptors [ 171.551741][ T849] cdc_acm 4-1:0.180: Zero length descriptor references [ 171.581407][ T849] cdc_acm 4-1:0.180: probe with driver cdc_acm failed with error -22 [ 172.242129][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 172.755416][ T849] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.911867][ T849] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.926631][ T849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.955276][ T849] usb 2-1: config 0 has no interface number 0 [ 172.972111][ T849] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 172.991457][ T6744] usb usb8: usbfs: process 6744 (syz.2.182) did not claim interface 0 before use [ 173.024563][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.041503][ T849] usb 2-1: Product: syz [ 173.049762][ T849] usb 2-1: Manufacturer: syz [ 173.058414][ T849] usb 2-1: SerialNumber: syz [ 173.067300][ T849] usb 2-1: config 0 descriptor?? [ 173.075304][ T849] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 173.084088][ T849] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 173.770941][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 173.985183][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.068558][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.068592][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.068611][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.068633][ T24] usb 5-1: config 1 has no interface number 0 [ 174.075602][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.075624][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.085240][ T5982] usb 4-1: USB disconnect, device number 16 [ 174.097175][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 174.341356][ T24] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 174.345106][ T24] snd_usb_pod 5-1:1.1: invalid control EP [ 174.345127][ T24] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 174.345341][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 174.345876][ T24] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 174.893330][ T6758] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.185'. [ 175.589844][ T849] usb 2-1: USB disconnect, device number 17 [ 176.060395][ T5878] usb 5-1: USB disconnect, device number 13 [ 176.224281][ T6770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.188'. [ 176.284787][ T849] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 176.533446][ T6777] netlink: 'syz.3.190': attribute type 11 has an invalid length. [ 176.592299][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 176.669332][ T849] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 176.682575][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.720892][ T849] usb 2-1: Product: syz [ 176.734906][ T849] usb 2-1: Manufacturer: syz [ 176.745087][ T849] usb 2-1: SerialNumber: syz [ 176.762586][ T849] usb 2-1: config 0 descriptor?? [ 176.778575][ T849] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 177.124097][ T6788] team_slave_0: entered promiscuous mode [ 177.129973][ T6788] team_slave_1: entered promiscuous mode [ 177.222977][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 177.349500][ T5982] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 177.704765][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 177.727850][ T5982] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 177.750758][ T5982] usb 4-1: config 0 has no interface number 0 [ 177.772449][ T5982] usb 4-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 177.797710][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.228117][ T849] gspca_sonixj: reg_r err -110 [ 178.233008][ T849] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 178.271945][ T5982] usb 4-1: Product: syz [ 178.558043][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.580786][ T5982] usb 4-1: Manufacturer: syz [ 178.634914][ T5982] usb 4-1: SerialNumber: syz [ 179.185062][ T849] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 179.189743][ T5982] usb 4-1: config 0 descriptor?? [ 179.589118][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.599612][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.665168][ T5982] usb 4-1: bad CDC descriptors [ 179.668272][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 179.679358][ T5982] cdc_acm 4-1:0.180: Zero length descriptor references [ 179.684914][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.692715][ T5982] cdc_acm 4-1:0.180: probe with driver cdc_acm failed with error -22 [ 179.716929][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 179.731426][ T849] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 179.754727][ T10] usb 3-1: config 0 has no interface number 0 [ 179.778819][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.794764][ T849] usb 5-1: config 0 has no interface number 0 [ 179.801277][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 179.811453][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.820908][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.838142][ T10] usb 3-1: Product: syz [ 179.845984][ T849] usb 5-1: config 0 has no interface number 0 [ 179.852236][ T10] usb 3-1: Manufacturer: syz [ 179.872166][ T10] usb 3-1: SerialNumber: syz [ 179.879856][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.896932][ T10] usb 3-1: config 0 descriptor?? [ 179.904566][ T849] usb 5-1: config 0 has no interface number 0 [ 179.955898][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.965298][ T10] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 179.971820][ T849] usb 5-1: config 0 has no interface number 0 [ 179.978374][ T10] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 179.989791][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.998910][ T849] usb 5-1: config 0 has no interface number 0 [ 180.006737][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.015884][ T849] usb 5-1: config 0 has no interface number 0 [ 180.023510][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.032080][ T849] usb 5-1: config 0 has no interface number 0 [ 180.045615][ T849] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.054313][ T849] usb 5-1: config 0 has no interface number 0 [ 180.072416][ T849] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 180.086466][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.096596][ T849] usb 5-1: Product: syz [ 180.100905][ T849] usb 5-1: Manufacturer: syz [ 180.107253][ T849] usb 5-1: SerialNumber: syz [ 180.116068][ T849] usb 5-1: config 0 descriptor?? [ 180.126682][ T849] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 180.356232][ T849] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 180.562246][ T849] usb 5-1: USB disconnect, device number 14 [ 180.581131][ T849] etas_es58x 5-1:0.2: Disconnecting syz syz [ 180.678293][ T5878] usb 2-1: USB disconnect, device number 18 [ 181.536893][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.704808][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 181.786866][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.834734][ T5878] usb 4-1: USB disconnect, device number 17 [ 181.857169][ T849] usb 3-1: USB disconnect, device number 14 [ 181.873656][ T24] usb 5-1: config 0 has no interface number 0 [ 181.905696][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.942459][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.979233][ T24] usb 5-1: Product: syz [ 182.002400][ T24] usb 5-1: Manufacturer: syz [ 182.031630][ T24] usb 5-1: SerialNumber: syz [ 182.047202][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.202'. [ 182.079937][ T24] usb 5-1: config 0 descriptor?? [ 182.149420][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 182.357936][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 182.368861][ T6838] fuse: Bad value for 'fd' [ 182.404451][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 182.645108][ T5921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.811581][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.822055][ T5982] usb 5-1: USB disconnect, device number 15 [ 182.828965][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 182.839361][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.856951][ T5921] usb 4-1: config 0 has no interface number 0 [ 182.864709][ T5982] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.879926][ T5921] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 182.904969][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.920436][ T5982] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.939339][ T5921] usb 4-1: Product: syz [ 182.955022][ T5921] usb 4-1: Manufacturer: syz [ 182.959671][ T5921] usb 4-1: SerialNumber: syz [ 182.970626][ T5982] quatech2 5-1:0.51: device disconnected [ 182.979748][ T5921] usb 4-1: config 0 descriptor?? [ 183.034687][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 183.053991][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.095731][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.125153][ T24] usb 1-1: Product: syz [ 183.129405][ T24] usb 1-1: Manufacturer: syz [ 183.160771][ T24] usb 1-1: SerialNumber: syz [ 183.189071][ T24] usb 1-1: config 0 descriptor?? [ 183.212104][ T5921] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 183.252031][ T5921] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.264122][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 183.272358][ T5921] usb 4-1: media controller created [ 183.310323][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.407754][ T5951] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.425266][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.454727][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 183.609559][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 183.616119][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 183.623902][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.635477][ T5951] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 183.641107][ T10] usb 2-1: config 10 has an invalid interface number: 223 but max is 2 [ 183.646738][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.674532][ T10] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 183.674533][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.678253][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.731092][ T10] usb 2-1: config 10 has 1 interface, different from the descriptor's value: 3 [ 183.742551][ T10] usb 2-1: config 10 has no interface number 0 [ 183.758724][ T10] usb 2-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 183.764346][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.772552][ T10] usb 2-1: config 10 interface 223 has no altsetting 0 [ 183.849666][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.861051][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.864216][ T10] usb 2-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 183.888626][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.890180][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.905057][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.913284][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.921756][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.929708][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.933621][ T10] usb 2-1: Product: syz [ 183.948813][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.956877][ T10] usb 2-1: Manufacturer: syz [ 183.958089][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.961512][ T10] usb 2-1: SerialNumber: syz [ 183.978913][ T5951] usb 3-1: config 0 has no interface number 0 [ 183.988064][ T5951] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.997011][ T5951] usb 3-1: config 0 has no interface number 0 [ 184.008603][ T5951] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 184.017923][ T5982] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 184.031694][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 184.053532][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.066373][ T24] usb 1-1: USB disconnect, device number 20 [ 184.085873][ T5951] usb 3-1: Product: syz [ 184.105259][ T5951] usb 3-1: Manufacturer: syz [ 184.113186][ T5951] usb 3-1: SerialNumber: syz [ 184.140817][ T5951] usb 3-1: config 0 descriptor?? [ 184.153952][ T5951] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 184.194343][ T10] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 184.260534][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.261341][ T5982] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 184.277768][ T5982] usb 5-1: config 0 has no interface number 0 [ 184.284141][ T5982] usb 5-1: config 0 interface 29 has no altsetting 0 [ 184.284247][ T10] dib0700: firmware download failed at 7 with -22 [ 184.301289][ T5982] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 184.311128][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.320334][ T5982] usb 5-1: Product: syz [ 184.325225][ T5982] usb 5-1: Manufacturer: syz [ 184.330105][ T5982] usb 5-1: SerialNumber: syz [ 184.341243][ T5982] usb 5-1: config 0 descriptor?? [ 184.358169][ T10] usb 2-1: USB disconnect, device number 19 [ 184.406147][ T5921] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 184.425159][ T6838] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 184.757482][ T5982] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 185.175827][ T1226] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 185.334980][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 185.354257][ T1226] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 185.365666][ T1226] usb 1-1: config 0 has no interface number 0 [ 185.392028][ T1226] usb 1-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 185.415513][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.442065][ T1226] usb 1-1: Product: syz [ 185.454502][ T1226] usb 1-1: Manufacturer: syz [ 185.471007][ T1226] usb 1-1: SerialNumber: syz [ 185.578363][ T5921] usb 4-1: USB disconnect, device number 18 [ 185.612658][ T1226] usb 1-1: config 0 descriptor?? [ 185.670491][ T1226] usb 1-1: bad CDC descriptors [ 185.680823][ T1226] cdc_acm 1-1:0.180: Zero length descriptor references [ 185.691505][ T1226] cdc_acm 1-1:0.180: probe with driver cdc_acm failed with error -22 [ 186.215075][ T5921] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 186.374810][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 186.383392][ T5921] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 186.392373][ T5921] usb 2-1: config 0 has no interface number 1 [ 186.421867][ T5921] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.511595][ T5982] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 186.536821][ T5982] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 186.585368][ T5921] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 186.651880][ T5921] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 186.697745][ T5982] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 186.730891][ T5921] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 186.758082][ T5982] usb 5-1: USB disconnect, device number 16 [ 186.773740][ T5921] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.832281][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 186.850472][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 186.862354][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 186.956839][ T5921] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 186.992746][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.008828][ T5921] usb 2-1: Product: syz [ 187.013153][ T5921] usb 2-1: Manufacturer: syz [ 187.031232][ T5921] usb 2-1: SerialNumber: syz [ 187.045833][ T5921] usb 2-1: config 0 descriptor?? [ 187.056396][ T6889] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.073078][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.090907][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.152719][ T5921] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 187.255119][ T5878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.431731][ T5951] etas_es58x 3-1:0.2: could not retrieve the product info string [ 187.444903][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 187.471161][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.502042][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.533972][ T5951] usb 3-1: USB disconnect, device number 15 [ 187.542636][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.553682][ T6902] netlink: 536 bytes leftover after parsing attributes in process `syz.4.220'. [ 187.560216][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.572684][ T5951] etas_es58x 3-1:0.2: Disconnecting syz syz [ 187.587125][ T5878] usb 4-1: Product: syz [ 187.592147][ T5878] usb 4-1: Manufacturer: syz [ 187.605946][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 187.606201][ T5878] usb 4-1: SerialNumber: syz [ 187.628630][ T6902] netlink: 168 bytes leftover after parsing attributes in process `syz.4.220'. [ 187.693643][ T5878] usb 4-1: config 0 descriptor?? [ 187.710236][ T5878] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.724282][ T5878] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 187.943205][ T849] usb 2-1: USB disconnect, device number 20 [ 187.975229][ T5982] usb 1-1: USB disconnect, device number 21 [ 188.219277][ T6921] fuse: Bad value for 'fd' [ 188.588431][ T5878] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 188.596413][ T5878] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 188.826842][ T5951] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 188.864820][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 189.104312][ T6930] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.225'. [ 189.120043][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 189.120572][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.143884][ T10] usb 5-1: config 0 has no interface number 0 [ 189.148628][ T5951] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.159887][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.171508][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 189.180223][ T5951] usb 3-1: Product: syz [ 189.202561][ T5951] usb 3-1: Manufacturer: syz [ 189.212632][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.215696][ T5951] usb 3-1: SerialNumber: syz [ 189.232368][ T5878] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 189.258724][ T5951] usb 3-1: config 0 descriptor?? [ 189.288040][ T10] usb 5-1: Product: syz [ 189.314932][ T10] usb 5-1: Manufacturer: syz [ 189.327902][ T10] usb 5-1: SerialNumber: syz [ 189.344131][ T10] usb 5-1: config 0 descriptor?? [ 189.458658][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 189.460908][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 189.462380][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 189.464768][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 189.465563][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 189.486697][ T5878] usb 4-1: USB disconnect, device number 19 [ 189.505848][ T5951] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.580417][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 189.597599][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.597824][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 189.597861][ T10] usb 5-1: media controller created [ 189.623140][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.113861][ T6946] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 190.113911][ T6946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.114287][ T6946] vhci_hcd vhci_hcd.0: Device attached [ 190.121013][ T5951] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 190.146547][ T5951] usb 3-1: USB disconnect, device number 16 [ 190.297841][ T5986] vhci_hcd: vhci_device speed not set [ 190.445436][ T5986] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 190.557189][ T6957] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 190.733365][ T6957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.800105][ T6921] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 190.806973][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 190.959053][ T6960] bond2: (slave gretap1): making interface the new active one [ 191.038241][ T6947] vhci_hcd: connection reset by peer [ 191.051969][ T36] vhci_hcd: stop threads [ 191.056822][ T36] vhci_hcd: release socket [ 191.068484][ T36] vhci_hcd: disconnect device [ 191.155144][ T849] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 191.186499][ T6960] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 191.212992][ T6957] vlan2: entered allmulticast mode [ 191.226372][ T6957] bond2: entered allmulticast mode [ 191.233021][ T6957] gretap1: entered allmulticast mode [ 191.253396][ T6957] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.314755][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 191.354842][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.374162][ T849] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 191.393833][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.424473][ T849] usb 2-1: Product: syz [ 191.439797][ T849] usb 2-1: Manufacturer: syz [ 191.457630][ T849] usb 2-1: SerialNumber: syz [ 191.480065][ T849] usb 2-1: config 0 descriptor?? [ 191.531669][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.540723][ T849] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 191.548832][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.548882][ T5921] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.548907][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.569929][ T5921] usb 3-1: config 0 descriptor?? [ 191.885971][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 191.902287][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.929376][ T10] usb 5-1: USB disconnect, device number 17 [ 192.064107][ T5921] usb 3-1: USB disconnect, device number 17 [ 192.151119][ T6973] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 192.286209][ T6973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.308495][ T6976] syz.4.231 (6976): drop_caches: 0 [ 192.466403][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 192.502747][ T6978] netlink: 536 bytes leftover after parsing attributes in process `syz.0.232'. [ 192.528182][ T6975] bond1: (slave veth3): Enslaving as an active interface with a down link [ 192.555254][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 192.570814][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.579875][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.608337][ T6979] netlink: 168 bytes leftover after parsing attributes in process `syz.0.232'. [ 192.676877][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.689383][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.754428][ T5921] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.798516][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.852179][ T5921] usb 3-1: config 0 descriptor?? [ 192.870588][ T849] gspca_sonixj: reg_w1 err -110 [ 192.924831][ T849] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 193.135420][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 193.167594][ T6987] netlink: 'syz.4.236': attribute type 8 has an invalid length. [ 193.311762][ T5921] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 193.333437][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.365044][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input8 [ 193.413462][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.460517][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.502725][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.571793][ T5921] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.617952][ T10] usb 4-1: config 0 descriptor?? [ 193.651597][ T5921] usb 3-1: USB disconnect, device number 18 [ 193.872820][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 193.881246][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 193.933456][ T6993] fido_id[6993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 193.935022][ T10] usb 4-1: USB disconnect, device number 20 [ 194.424710][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 194.585605][ T9] usb 2-1: USB disconnect, device number 21 [ 195.174070][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 195.204962][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.216644][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.226858][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.243138][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.263089][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.281860][ T10] usb 4-1: config 0 descriptor?? [ 195.327538][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 195.328399][ T7011] fuse: Bad value for 'fd' [ 195.625070][ T5986] vhci_hcd: vhci_device speed not set [ 195.835817][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 195.854685][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 195.969001][ T7019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.244'. [ 195.999208][ T7020] netlink: 536 bytes leftover after parsing attributes in process `syz.0.245'. [ 196.010824][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 196.036640][ T7020] netlink: 168 bytes leftover after parsing attributes in process `syz.0.245'. [ 196.058040][ T5951] usb 4-1: USB disconnect, device number 21 [ 196.084289][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.101151][ T9] usb 2-1: config 0 has no interface number 0 [ 196.101441][ T7022] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 196.124940][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 196.138090][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 196.150996][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.155753][ T7023] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 196.166993][ T9] usb 2-1: Product: syz [ 196.171493][ T7022] PKCS7: Only support pkcs7_signedData type [ 196.201854][ T9] usb 2-1: Manufacturer: syz [ 196.212177][ T9] usb 2-1: SerialNumber: syz [ 196.217175][ T7023] PKCS7: Only support pkcs7_signedData type [ 196.227557][ T9] usb 2-1: config 0 descriptor?? [ 196.260962][ T7027] netlink: 27 bytes leftover after parsing attributes in process `syz.0.247'. [ 196.296624][ T5921] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 196.315059][ T5921] usb 3-1: config 0 has no interface number 0 [ 196.321504][ T5921] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 196.339362][ T5921] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.361020][ T5921] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 196.370555][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.378973][ T5921] usb 3-1: Product: syz [ 196.383172][ T5921] usb 3-1: Manufacturer: syz [ 196.388244][ T5921] usb 3-1: SerialNumber: syz [ 196.404028][ T5921] usb 3-1: config 0 descriptor?? [ 196.420282][ T7015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 196.431293][ T5921] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 196.436462][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 196.450002][ T5921] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 196.458087][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.482050][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 196.496016][ T9] usb 2-1: media controller created [ 196.523129][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.711059][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.725062][ T5878] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 196.733082][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.781766][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.800976][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.921260][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.938755][ T5878] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 196.949493][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.968738][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.990871][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.000179][ T5878] usb 5-1: Product: syz [ 197.007829][ T5878] usb 5-1: Manufacturer: syz [ 197.013292][ T5878] usb 5-1: SerialNumber: syz [ 197.383110][ T5878] usb 5-1: 0:2 : does not exist [ 197.499699][ T5878] usb 5-1: USB disconnect, device number 18 [ 197.595175][ T7011] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 197.602000][ T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 198.897593][ T5921] usb 3-1: USB disconnect, device number 19 [ 198.997033][ T5921] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 199.044424][ T9] usb 2-1: USB disconnect, device number 22 [ 199.044495][ T5921] cyberjack 3-1:0.69: device disconnected [ 199.679900][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.686971][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.714745][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 199.782201][ T7058] netlink: 536 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.792027][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.803571][ T7058] netlink: 168 bytes leftover after parsing attributes in process `syz.3.257'. [ 199.824748][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 199.904869][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 199.911713][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.920464][ T9] usb 2-1: config 0 has no interface number 0 [ 199.930983][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 199.942466][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.950616][ T9] usb 2-1: Product: syz [ 199.961246][ T9] usb 2-1: Manufacturer: syz [ 199.969115][ T9] usb 2-1: SerialNumber: syz [ 199.975550][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 199.985658][ T9] usb 2-1: config 0 descriptor?? [ 199.989780][ T5921] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 200.001555][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.002774][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.028805][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.036626][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.045774][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.053377][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.061869][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.069799][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.081187][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.090555][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.099849][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.106165][ T5982] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 200.124318][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.141692][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.151938][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.160214][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.171041][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.179364][ T5921] usb 3-1: config 0 has no interface number 0 [ 200.196737][ T5921] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 200.208165][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.218306][ T5921] usb 3-1: Product: syz [ 200.222508][ T5921] usb 3-1: Manufacturer: syz [ 200.230494][ T5921] usb 3-1: SerialNumber: syz [ 200.241756][ T5921] usb 3-1: config 0 descriptor?? [ 200.259179][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.259833][ T5921] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 200.276142][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 200.280695][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.288658][ T5982] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 200.302865][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.312015][ T5982] usb 4-1: Product: syz [ 200.324301][ T5982] usb 4-1: Manufacturer: syz [ 200.332963][ T5982] usb 4-1: SerialNumber: syz [ 200.356210][ T5982] usb 4-1: config 0 descriptor?? [ 200.377248][ T5982] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 200.424844][ T5951] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 200.469680][ T5921] etas_es58x 3-1:0.2: could not retrieve the product info string [ 200.481930][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 200.491792][ T849] usb 2-1: USB disconnect, device number 23 [ 200.525920][ T849] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.557463][ T849] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.572446][ T849] quatech2 2-1:0.51: device disconnected [ 200.578625][ T5982] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 200.593768][ T5921] usb 3-1: USB disconnect, device number 20 [ 200.601372][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 200.623797][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 200.635649][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 200.647932][ T5921] etas_es58x 3-1:0.2: Disconnecting syz syz [ 200.666030][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 200.675624][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.711891][ T5951] usb 5-1: config 0 descriptor?? [ 200.743458][ T5951] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 200.779078][ T5982] usb 4-1: USB disconnect, device number 22 [ 201.196121][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.205586][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.310137][ T7077] netlink: 'syz.1.261': attribute type 11 has an invalid length. [ 201.376113][ T849] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 201.494796][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.554827][ T849] usb 1-1: Using ep0 maxpacket: 8 [ 201.582988][ T849] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 201.624277][ T7081] fuse: Bad value for 'fd' [ 201.662488][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.704772][ T849] usb 1-1: Product: syz [ 201.715180][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.730915][ T849] usb 1-1: Manufacturer: syz [ 201.743445][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 201.763003][ T849] usb 1-1: SerialNumber: syz [ 201.801575][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.811735][ T849] usb 1-1: config 0 descriptor?? [ 201.864256][ T849] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 201.875448][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.884769][ T5921] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 201.920505][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.364034][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 202.384487][ T7085] fuse: Bad value for 'fd' [ 202.438392][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.450873][ T5921] usb 4-1: config 0 has no interface number 0 [ 202.477656][ T9] usb 3-1: Product: syz [ 202.481573][ T5921] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 202.482499][ T9] usb 3-1: Manufacturer: syz [ 202.502148][ T9] usb 3-1: SerialNumber: syz [ 202.511493][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.548583][ T5921] usb 4-1: Product: syz [ 202.561126][ T5921] usb 4-1: Manufacturer: syz [ 202.569693][ T5921] usb 4-1: SerialNumber: syz [ 202.585797][ T5921] usb 4-1: config 0 descriptor?? [ 202.809433][ T5921] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 202.828267][ T5921] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.857658][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 202.879313][ T5921] usb 4-1: media controller created [ 202.932453][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.120058][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.130956][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.415914][ T849] gspca_sonixj: reg_w1 err -110 [ 203.624812][ T849] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 203.999413][ T5921] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 204.005958][ T7081] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 204.137787][ T5921] usb 4-1: USB disconnect, device number 23 [ 204.522775][ T9] usb 3-1: 0:2 : does not exist [ 204.546467][ T849] usb 5-1: USB disconnect, device number 19 [ 204.644534][ T5878] usb 1-1: USB disconnect, device number 22 [ 204.665588][ T9] usb 3-1: USB disconnect, device number 21 [ 204.814435][ T7117] netlink: 536 bytes leftover after parsing attributes in process `syz.0.268'. [ 204.824981][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 204.838028][ T7117] netlink: 168 bytes leftover after parsing attributes in process `syz.0.268'. [ 204.857279][ T6756] udevd[6756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.940264][ T5921] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.109398][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 205.525376][ T849] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.550313][ T5921] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 205.669388][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.806547][ T5921] usb 2-1: Product: syz [ 205.809834][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.810764][ T5921] usb 2-1: Manufacturer: syz [ 205.827941][ T5921] usb 2-1: SerialNumber: syz [ 205.844283][ T5921] usb 2-1: config 0 descriptor?? [ 206.219183][ T5986] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.223828][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.254730][ T849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.313806][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.495393][ T5921] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 206.505253][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 206.505268][ T849] usb 5-1: config 0 descriptor?? [ 206.536183][ T5921] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 206.546939][ T5986] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 206.559120][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.572331][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.579143][ T5921] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 206.598921][ T5921] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 206.616770][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.628989][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.659931][ T5921] usb 2-1: USB disconnect, device number 24 [ 206.682230][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.719266][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.724395][ T849] usbhid 5-1:0.0: can't add hid device: -71 [ 206.745387][ T849] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.777199][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.786563][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.811113][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.818442][ T849] usb 5-1: USB disconnect, device number 20 [ 206.845505][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.881072][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.889682][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.909966][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.927217][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.941739][ T5986] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.957081][ T5986] usb 3-1: config 0 has no interface number 0 [ 206.982590][ T5986] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 207.004915][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.044857][ T5986] usb 3-1: Product: syz [ 207.052642][ T5986] usb 3-1: Manufacturer: syz [ 207.068767][ T5986] usb 3-1: SerialNumber: syz [ 207.093899][ T5986] usb 3-1: config 0 descriptor?? [ 207.116998][ T5986] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 207.284734][ T849] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 207.322555][ T5986] etas_es58x 3-1:0.2: could not retrieve the product info string [ 207.389016][ T5986] usb 3-1: USB disconnect, device number 22 [ 207.404110][ T5986] etas_es58x 3-1:0.2: Disconnecting syz syz [ 207.437150][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.449358][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.534937][ T849] usb 5-1: New USB device found, idVendor=047f, idProduct=33ff, bcdDevice= 0.40 [ 207.565710][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.636430][ T849] usb 5-1: config 0 descriptor?? [ 208.091051][ T849] plantronics 0003:047F:33FF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:33ff] on usb-dummy_hcd.4-1/input0 [ 208.104805][ T5921] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 208.299582][ T5878] usb 5-1: USB disconnect, device number 21 [ 208.321448][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 208.343443][ T5921] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 208.363187][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.372667][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.395775][ T7145] fido_id[7145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 208.397336][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.435696][ T849] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 208.492512][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.542908][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.612114][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.624380][ T849] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 208.634986][ T849] usb 3-1: config 0 has no interface number 0 [ 208.641122][ T849] usb 3-1: config 0 interface 29 has no altsetting 0 [ 208.649425][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.660351][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.668762][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.681589][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.731535][ T849] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 208.732278][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.740921][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.792520][ T849] usb 3-1: Product: syz [ 208.824509][ T5921] usb 4-1: config 0 has no interface number 0 [ 208.833244][ T849] usb 3-1: Manufacturer: syz [ 208.859998][ T849] usb 3-1: SerialNumber: syz [ 208.866866][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.891042][ T849] usb 3-1: config 0 descriptor?? [ 208.930089][ T5921] usb 4-1: config 0 has no interface number 0 [ 209.022407][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 209.072780][ T5921] usb 4-1: config 0 has no interface number 0 [ 209.114446][ T5921] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 209.153831][ T849] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 209.164184][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.173300][ T7152] fuse: Bad value for 'fd' [ 209.253045][ T5921] usb 4-1: Product: syz [ 209.269474][ T5921] usb 4-1: Manufacturer: syz [ 209.276702][ T5921] usb 4-1: SerialNumber: syz [ 209.293062][ T5921] usb 4-1: config 0 descriptor?? [ 209.302545][ T5921] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 209.413406][ T7160] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 209.695669][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.717673][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.730110][ T5986] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 209.795870][ T5921] etas_es58x 4-1:0.2: could not retrieve the product info string [ 209.959531][ T5921] usb 4-1: USB disconnect, device number 24 [ 211.029628][ T5921] etas_es58x 4-1:0.2: Disconnecting syz syz [ 211.040372][ T5986] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.068049][ T5986] usb 5-1: config 0 has no interface number 0 [ 211.086277][ T5986] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 211.144811][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.217736][ T5986] usb 5-1: Product: syz [ 211.221963][ T5986] usb 5-1: Manufacturer: syz [ 211.274006][ T5986] usb 5-1: SerialNumber: syz [ 211.306996][ T5986] usb 5-1: config 0 descriptor?? [ 211.516110][ T5986] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 211.527322][ T5986] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.579388][ T5986] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 211.630008][ T5986] usb 5-1: media controller created [ 211.716700][ T7152] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 211.785056][ T5921] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 211.821304][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.929581][ T5986] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 211.986702][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.051540][ T5921] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 212.114424][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.152483][ T5986] usb 5-1: USB disconnect, device number 22 [ 212.168284][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.193350][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.221947][ T5921] usb 4-1: Product: syz [ 212.266559][ T5921] usb 4-1: Manufacturer: syz [ 212.289716][ T5921] usb 4-1: SerialNumber: syz [ 212.755936][ T849] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 212.772116][ T849] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 212.885721][ T5921] usb 4-1: 0:2 : does not exist [ 212.990812][ T5921] usb 4-1: USB disconnect, device number 25 [ 213.034113][ T7191] net_ratelimit: 91 callbacks suppressed [ 213.034134][ T7191] netlink: del zone limit has 4 unknown bytes [ 213.040363][ T6899] udevd[6899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.112846][ T7188] netlink: zone id is out of range [ 213.161808][ T7188] netlink: zone id is out of range [ 213.206200][ T849] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 213.228196][ T7188] netlink: zone id is out of range [ 213.259141][ T7188] netlink: zone id is out of range [ 213.268282][ T849] usb 3-1: USB disconnect, device number 23 [ 213.275926][ T7188] netlink: zone id is out of range [ 213.302417][ T7188] netlink: zone id is out of range [ 213.312520][ T7188] netlink: zone id is out of range [ 213.333217][ T7188] netlink: zone id is out of range [ 213.340205][ T7188] netlink: zone id is out of range [ 213.527216][ T5921] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 213.551434][ T7200] bond0: (slave macvlan0): Error: Device can not be enslaved while up [ 213.634771][ T849] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 213.694754][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 213.712608][ T5921] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.725458][ T5921] usb 5-1: config 0 has no interface number 0 [ 213.742054][ T5921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.817397][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.834728][ T5921] usb 5-1: Product: syz [ 213.849208][ T5921] usb 5-1: Manufacturer: syz [ 213.859685][ T5921] usb 5-1: SerialNumber: syz [ 213.872375][ T5921] usb 5-1: config 0 descriptor?? [ 213.936234][ T5921] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.972375][ T849] usb 3-1: Using ep0 maxpacket: 16 [ 213.986704][ T849] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 214.010705][ T849] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 214.032559][ T849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 214.047209][ T849] usb 3-1: language id specifier not provided by device, defaulting to English [ 214.062223][ T849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.072594][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.090859][ T849] usb 3-1: Product: ᐇ [ 214.096989][ T849] usb 3-1: Manufacturer: 붮귱賊圧죡⚕᪷效胊땳玣䗗恭㞜羡㍸폎⩈䌣콷샭՗柍琍൞יּ곶ⵍ䳣栗䶦㮞컖ᙰ哼 [ 214.117240][ T849] usb 3-1: SerialNumber: syz [ 214.133921][ T7189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.147079][ T7189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.389925][ T849] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 214.409622][ T849] usb 3-1: USB disconnect, device number 24 [ 215.122817][ T7232] FAULT_INJECTION: forcing a failure. [ 215.122817][ T7232] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 215.235842][ T7232] CPU: 1 UID: 0 PID: 7232 Comm: syz.1.293 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 215.235874][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.235887][ T7232] Call Trace: [ 215.235896][ T7232] [ 215.235905][ T7232] dump_stack_lvl+0x189/0x250 [ 215.235940][ T7232] ? __pfx____ratelimit+0x10/0x10 [ 215.235969][ T7232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.235995][ T7232] ? __pfx__printk+0x10/0x10 [ 215.236038][ T7232] should_fail_ex+0x414/0x560 [ 215.236071][ T7232] _copy_to_user+0x31/0xb0 [ 215.236097][ T7232] simple_read_from_buffer+0xe1/0x170 [ 215.236133][ T7232] proc_fail_nth_read+0x1b3/0x220 [ 215.236160][ T7232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.236187][ T7232] ? rw_verify_area+0x2a6/0x4d0 [ 215.236213][ T7232] ? __lock_acquire+0xab9/0xd20 [ 215.236241][ T7232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.236274][ T7232] vfs_read+0x1fd/0xa30 [ 215.236299][ T7232] ? fdget_pos+0x247/0x320 [ 215.236322][ T7232] ? __pfx___mutex_lock+0x10/0x10 [ 215.236353][ T7232] ? __pfx_vfs_read+0x10/0x10 [ 215.236381][ T7232] ? __fget_files+0x2a/0x420 [ 215.236405][ T7232] ? __fget_files+0x3a0/0x420 [ 215.236422][ T7232] ? __fget_files+0x2a/0x420 [ 215.236450][ T7232] ksys_read+0x145/0x250 [ 215.236480][ T7232] ? __pfx_ksys_read+0x10/0x10 [ 215.236504][ T7232] ? rcu_is_watching+0x15/0xb0 [ 215.236542][ T7232] ? do_syscall_64+0xbe/0x3b0 [ 215.236576][ T7232] do_syscall_64+0xfa/0x3b0 [ 215.236603][ T7232] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.236629][ T7232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.236649][ T7232] ? clear_bhb_loop+0x60/0xb0 [ 215.236673][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.236693][ T7232] RIP: 0033:0x7f8d4018d5fc [ 215.236711][ T7232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.236728][ T7232] RSP: 002b:00007f8d3e3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.236749][ T7232] RAX: ffffffffffffffda RBX: 00007f8d403b5fa0 RCX: 00007f8d4018d5fc [ 215.236764][ T7232] RDX: 000000000000000f RSI: 00007f8d3e3f60a0 RDI: 0000000000000004 [ 215.236776][ T7232] RBP: 00007f8d3e3f6090 R08: 0000000000000000 R09: 0000000000000014 [ 215.236788][ T7232] R10: 0000000000000b00 R11: 0000000000000246 R12: 0000000000000001 [ 215.236800][ T7232] R13: 00007f8d403b6038 R14: 00007f8d403b5fa0 R15: 00007f8d404dfa28 [ 215.236832][ T7232] [ 215.634552][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 215.796616][ T30] audit: type=1326 audit(1755277832.250:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.3.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb7b8ebe9 code=0x0 [ 215.913825][ T7245] netlink: 'syz.1.296': attribute type 11 has an invalid length. [ 216.134748][ T5951] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 216.318365][ T5921] usb 5-1: qt2_attach - failed to power on unit: -71 [ 216.330267][ T5921] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 216.343244][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.360080][ T5951] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 216.420584][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.447884][ T5921] usb 5-1: USB disconnect, device number 23 [ 216.461199][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 216.476053][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 216.505583][ T7113] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 216.560358][ T5951] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.576846][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.608692][ T5951] usb 3-1: Product: syz [ 216.612912][ T5951] usb 3-1: Manufacturer: syz [ 216.764846][ T7113] usb 2-1: Using ep0 maxpacket: 8 [ 216.783362][ T5951] usb 3-1: SerialNumber: syz [ 216.787338][ T7113] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.806491][ T7113] usb 2-1: config 179 has no interface number 0 [ 216.813405][ T7113] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 216.840386][ T7113] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 216.874695][ T7113] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 216.944338][ T7256] netlink: 'syz.4.302': attribute type 63 has an invalid length. [ 216.956551][ T7113] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 216.970287][ T7254] syz_tun: entered promiscuous mode [ 216.975924][ T7113] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.984192][ T7254] syz_tun: left promiscuous mode [ 216.990168][ T7113] usb 2-1: config 179 interface 65 has no altsetting 0 [ 217.002555][ T7113] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 217.016647][ T7257] netlink: 'syz.4.302': attribute type 63 has an invalid length. [ 217.031422][ T7113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.109918][ T7113] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 217.124091][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 217.184045][ T5218] input input10: unable to receive magic message: -110 [ 217.241482][ T5951] usb 3-1: 0:2 : does not exist [ 217.264973][ T5218] input input10: unable to receive magic message: -32 [ 217.264994][ T7256] TCP: TCP_TX_DELAY enabled [ 217.325257][ T5218] input input10: unable to receive magic message: -32 [ 217.345273][ T5951] usb 3-1: USB disconnect, device number 25 [ 217.393435][ T5218] input input10: unable to receive magic message: -32 [ 217.407255][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.416031][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.469157][ T7113] usb 2-1: USB disconnect, device number 25 [ 217.493431][ T7268] netlink: 244 bytes leftover after parsing attributes in process `syz.4.305'. [ 217.519699][ T6899] udevd[6899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.603307][ T7270] netlink: 'syz.3.306': attribute type 11 has an invalid length. [ 217.616901][ T7270] FAULT_INJECTION: forcing a failure. [ 217.616901][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 217.631300][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.3.306 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 217.631328][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.631340][ T7270] Call Trace: [ 217.631349][ T7270] [ 217.631357][ T7270] dump_stack_lvl+0x189/0x250 [ 217.631387][ T7270] ? __pfx____ratelimit+0x10/0x10 [ 217.631415][ T7270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.631440][ T7270] ? __pfx__printk+0x10/0x10 [ 217.631476][ T7270] ? __pfx___might_resched+0x10/0x10 [ 217.631494][ T7270] ? fs_reclaim_acquire+0x7d/0x100 [ 217.631531][ T7270] should_fail_ex+0x414/0x560 [ 217.631565][ T7270] should_failslab+0xa8/0x100 [ 217.631598][ T7270] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 217.631627][ T7270] ? kasprintf+0xd4/0x120 [ 217.631656][ T7270] kvasprintf+0xdc/0x190 [ 217.631683][ T7270] ? __pfx_kvasprintf+0x10/0x10 [ 217.631703][ T7270] ? do_raw_spin_lock+0x121/0x290 [ 217.631743][ T7270] kasprintf+0xd4/0x120 [ 217.631768][ T7270] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 217.631798][ T7270] ? __pfx_kasprintf+0x10/0x10 [ 217.631818][ T7270] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 217.631861][ T7270] ieee80211_alloc_led_names+0xa4/0x2b0 [ 217.631887][ T7270] ieee80211_alloc_hw_nm+0x18ca/0x1f20 [ 217.631921][ T7270] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 217.631956][ T7270] ? __pfx____ratelimit+0x10/0x10 [ 217.631987][ T7270] ? __pfx__printk+0x10/0x10 [ 217.632012][ T7270] ? netlink_unicast+0x721/0x9e0 [ 217.632045][ T7270] ? nla_get_range_unsigned+0x294/0x4b0 [ 217.632081][ T7270] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 217.632104][ T7270] ? __nla_validate_parse+0x2400/0x2d40 [ 217.632133][ T7270] ? __sock_sendmsg+0x21c/0x270 [ 217.632163][ T7270] ? ____sys_sendmsg+0x505/0x830 [ 217.632197][ T7270] hwsim_new_radio_nl+0xea4/0x1b10 [ 217.632227][ T7270] ? __pfx___nla_validate_parse+0x10/0x10 [ 217.632273][ T7270] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 217.632314][ T7270] ? __nla_parse+0x40/0x60 [ 217.632348][ T7270] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 217.632381][ T7270] genl_family_rcv_msg_doit+0x212/0x300 [ 217.632414][ T7270] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 217.632452][ T7270] ? bpf_lsm_capable+0x9/0x20 [ 217.632480][ T7270] ? security_capable+0x7e/0x2e0 [ 217.632516][ T7270] genl_rcv_msg+0x60e/0x790 [ 217.632546][ T7270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.632569][ T7270] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 217.632596][ T7270] ? __asan_memcpy+0x40/0x70 [ 217.632619][ T7270] ? __pfx_ref_tracker_free+0x10/0x10 [ 217.632656][ T7270] netlink_rcv_skb+0x205/0x470 [ 217.632684][ T7270] ? __lock_acquire+0xab9/0xd20 [ 217.632716][ T7270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.632740][ T7270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.632791][ T7270] ? down_read+0x1ad/0x2e0 [ 217.632825][ T7270] genl_rcv+0x28/0x40 [ 217.632844][ T7270] netlink_unicast+0x82f/0x9e0 [ 217.632881][ T7270] ? __pfx_netlink_unicast+0x10/0x10 [ 217.632910][ T7270] ? netlink_sendmsg+0x642/0xb30 [ 217.632937][ T7270] ? skb_put+0x11b/0x210 [ 217.632960][ T7270] netlink_sendmsg+0x805/0xb30 [ 217.633000][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.633040][ T7270] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.633073][ T7270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.633095][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.633126][ T7270] __sock_sendmsg+0x21c/0x270 [ 217.633161][ T7270] ____sys_sendmsg+0x505/0x830 [ 217.633188][ T7270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.633220][ T7270] ? import_iovec+0x74/0xa0 [ 217.633245][ T7270] ___sys_sendmsg+0x21f/0x2a0 [ 217.633270][ T7270] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.633332][ T7270] ? __fget_files+0x2a/0x420 [ 217.633351][ T7270] ? __fget_files+0x3a0/0x420 [ 217.633381][ T7270] __x64_sys_sendmsg+0x19b/0x260 [ 217.633405][ T7270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.633438][ T7270] ? __pfx_ksys_write+0x10/0x10 [ 217.633462][ T7270] ? rcu_is_watching+0x15/0xb0 [ 217.633489][ T7270] ? do_syscall_64+0xbe/0x3b0 [ 217.633523][ T7270] do_syscall_64+0xfa/0x3b0 [ 217.633550][ T7270] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.633576][ T7270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.633596][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 217.633620][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.633640][ T7270] RIP: 0033:0x7f4eb7b8ebe9 [ 217.633659][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.633676][ T7270] RSP: 002b:00007f4eb8a55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.633697][ T7270] RAX: ffffffffffffffda RBX: 00007f4eb7db5fa0 RCX: 00007f4eb7b8ebe9 [ 217.633712][ T7270] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 217.633725][ T7270] RBP: 00007f4eb8a55090 R08: 0000000000000000 R09: 0000000000000000 [ 217.633737][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.633749][ T7270] R13: 00007f4eb7db6038 R14: 00007f4eb7db5fa0 R15: 00007f4eb7edfa28 [ 217.633782][ T7270] [ 218.116783][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.260530][ T1226] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.415896][ T1226] usb 5-1: Using ep0 maxpacket: 16 [ 218.423110][ T1226] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 218.431597][ T1226] usb 5-1: config 252 has no interface number 0 [ 218.444687][ T5951] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 218.452465][ T1226] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 218.467964][ T1226] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 218.477201][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.485410][ T1226] usb 5-1: Product: syz [ 218.489695][ T1226] usb 5-1: Manufacturer: syz [ 218.494360][ T1226] usb 5-1: SerialNumber: syz [ 218.523137][ T1226] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 218.604670][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 218.611912][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.623094][ T5951] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.632290][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.651826][ T5951] usb 1-1: config 0 descriptor?? [ 218.769131][ T1226] usb 5-1: USB disconnect, device number 24 [ 218.816547][ T13] usb 5-1: Failed to submit usb control message: -71 [ 218.828264][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 218.872386][ T13] usb 5-1: unable to get target info from device [ 218.880436][ T13] usb 5-1: could not get target info (-71) [ 218.894205][ T13] usb 5-1: could not probe fw (-71) [ 219.082933][ T5951] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 219.092576][ T7289] FAULT_INJECTION: forcing a failure. [ 219.092576][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.095166][ T5951] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 219.138172][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.312 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 219.138203][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.138215][ T7289] Call Trace: [ 219.138223][ T7289] [ 219.138232][ T7289] dump_stack_lvl+0x189/0x250 [ 219.138260][ T7289] ? __pfx____ratelimit+0x10/0x10 [ 219.138288][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.138313][ T7289] ? __pfx__printk+0x10/0x10 [ 219.138341][ T7289] ? __might_fault+0xb0/0x130 [ 219.138399][ T7289] should_fail_ex+0x414/0x560 [ 219.138437][ T7289] _copy_from_user+0x2d/0xb0 [ 219.138462][ T7289] do_sock_getsockopt+0x17d/0x450 [ 219.138487][ T7289] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.138507][ T7289] ? write_ibpb+0x30/0x40 [ 219.138538][ T7289] ? ksys_write+0x1e1/0x250 [ 219.138574][ T7289] __x64_sys_getsockopt+0x1a5/0x250 [ 219.138594][ T7289] ? write_ibpb+0x30/0x40 [ 219.138624][ T7289] ? write_ibpb+0x30/0x40 [ 219.138656][ T7289] do_syscall_64+0xfa/0x3b0 [ 219.138683][ T7289] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.138711][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.138732][ T7289] ? clear_bhb_loop+0x60/0xb0 [ 219.138757][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.138777][ T7289] RIP: 0033:0x7f4e7b38ebe9 [ 219.138795][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.138813][ T7289] RSP: 002b:00007f4e7c183038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.138834][ T7289] RAX: ffffffffffffffda RBX: 00007f4e7b5b5fa0 RCX: 00007f4e7b38ebe9 [ 219.138849][ T7289] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000004 [ 219.138862][ T7289] RBP: 00007f4e7c183090 R08: 0000200000000600 R09: 0000000000000000 [ 219.138876][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.138888][ T7289] R13: 00007f4e7b5b6038 R14: 00007f4e7b5b5fa0 R15: 00007f4e7b6dfa28 [ 219.138920][ T7289] [ 219.153952][ T5951] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 219.292010][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.474708][ T5951] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 219.488617][ T5951] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 219.510665][ T5951] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 219.704950][ T5982] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 219.868888][ T849] usb 1-1: USB disconnect, device number 23 [ 219.875238][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 219.877759][ T5982] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 219.897861][ T5982] usb 5-1: config 0 has no interface number 0 [ 219.920119][ T5982] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.951409][ T5982] usb 5-1: config 0 interface 85 has no altsetting 0 [ 219.974057][ T5982] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 219.986803][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.996213][ T5982] usb 5-1: Product: syz [ 220.000511][ T5982] usb 5-1: Manufacturer: syz [ 220.007216][ T5982] usb 5-1: SerialNumber: syz [ 220.020524][ T5982] usb 5-1: config 0 descriptor?? [ 220.641860][ T5982] appletouch 5-1:0.85: Geyser mode initialized. [ 220.951673][ T5982] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input11 [ 220.990237][ T5982] usb 5-1: USB disconnect, device number 25 [ 221.044813][ T7113] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 221.126295][ T5982] appletouch 5-1:0.85: input: appletouch disconnected [ 221.172336][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b095400: rx timeout, send abort [ 221.181748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b095800: rx timeout, send abort [ 221.190318][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b095400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 221.204971][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b095800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 221.327537][ T7113] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 221.357565][ T7304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.317'. [ 221.442423][ T7113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.473525][ T7113] usb 4-1: config 0 has no interface number 0 [ 221.522042][ T7113] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 221.555756][ T7113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.606117][ T1226] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 221.724766][ T7113] usb 4-1: Product: syz [ 221.735740][ T5951] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 221.735976][ T7113] usb 4-1: Manufacturer: syz [ 221.784476][ T1226] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 221.793116][ T7113] usb 4-1: SerialNumber: syz [ 221.798007][ T1226] usb 1-1: config 0 has no interface number 0 [ 221.806610][ T1226] usb 1-1: config 0 interface 29 has no altsetting 0 [ 221.813922][ T7310] netlink: 'syz.4.319': attribute type 2 has an invalid length. [ 221.824088][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 221.828278][ T7113] usb 4-1: config 0 descriptor?? [ 221.845253][ T1226] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 221.857103][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.875057][ T1226] usb 1-1: Product: syz [ 221.888256][ T1226] usb 1-1: Manufacturer: syz [ 221.901409][ T7113] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 221.902005][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.913758][ T7113] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 221.946653][ T1226] usb 1-1: SerialNumber: syz [ 221.956137][ T5951] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 222.053530][ T1226] usb 1-1: config 0 descriptor?? [ 222.068494][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.106403][ T5951] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.122043][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.131193][ T5951] usb 3-1: Product: syz [ 222.139460][ T5951] usb 3-1: Manufacturer: syz [ 222.145345][ T5951] usb 3-1: SerialNumber: syz [ 222.365366][ T1226] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 222.368522][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.424073][ T5951] usb 3-1: 0:2 : does not exist [ 222.465354][ T5951] usb 3-1: USB disconnect, device number 26 [ 222.511104][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.655157][ T7317] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 222.763311][ T7319] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 223.184707][ T849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.345454][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 223.358827][ T5951] usb 4-1: USB disconnect, device number 26 [ 223.379954][ T849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.394486][ T849] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 223.420602][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.465516][ T849] usb 5-1: config 0 descriptor?? [ 223.503797][ T849] gspca_main: spca501-2.14.0 probing 0000:0000 [ 223.824267][ T7329] syzkaller1: entered promiscuous mode [ 223.871174][ T7329] syzkaller1: entered allmulticast mode [ 224.189353][ T1226] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 224.231160][ T1226] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 224.294981][ T5878] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 224.302960][ T849] gspca_spca501: reg write: error -110 [ 224.315172][ T849] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 224.340647][ T849] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 224.386335][ T1226] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 224.491382][ T1226] usb 1-1: USB disconnect, device number 24 [ 224.635847][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 224.643739][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.650661][ T5878] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 224.660030][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.678690][ T5878] usb 3-1: config 0 descriptor?? [ 224.754837][ T5982] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 224.834831][ T1226] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 225.031526][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 225.044718][ T5982] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 225.060370][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.078625][ T5982] usb 4-1: Product: syz [ 225.094676][ T5982] usb 4-1: Manufacturer: syz [ 225.115264][ T5982] usb 4-1: SerialNumber: syz [ 225.131674][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.165670][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.175893][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 225.182990][ T5982] usb 4-1: config 0 descriptor?? [ 225.291839][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.320968][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.429744][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.438473][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.446107][ T5878] wacom 0003:056A:00BA.0008: unknown main item tag 0x0 [ 225.462486][ T5878] usb 3-1: USB disconnect, device number 27 [ 225.812850][ T5982] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 225.843783][ T5982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.008166][ T5982] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 226.086525][ T5982] usb 4-1: media controller created [ 226.318565][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.338160][ T5878] usb 5-1: USB disconnect, device number 26 [ 226.394939][ T7352] ------------[ cut here ]------------ [ 226.400745][ T7352] usb 4-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 226.410466][ T7352] WARNING: CPU: 1 PID: 7352 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 226.420275][ T7352] Modules linked in: [ 226.424349][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.2.330 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 226.436294][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.446394][ T7352] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 226.452067][ T7352] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 fb 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 66 af 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 226.471755][ T7352] RSP: 0018:ffffc90003b5f830 EFLAGS: 00010246 [ 226.478041][ T7352] RAX: 4f5dd4cab3cce500 RBX: ffff8880785fe100 RCX: 0000000000080000 [ 226.486057][ T7352] RDX: ffffc9000fb6f000 RSI: 0000000000003db9 RDI: 0000000000003dba [ 226.494052][ T7352] RBP: 1ffff1100b1819d8 R08: 0000000000000003 R09: 0000000000000004 [ 226.502070][ T7352] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 226.510101][ T7352] R13: ffff888058c0cec0 R14: 0000000080001b80 R15: ffff8880306fccc0 [ 226.518117][ T7352] FS: 00007f4e7c1206c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 226.527295][ T7352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.533901][ T7352] CR2: 00007f4eb8a34d58 CR3: 000000004d03e000 CR4: 00000000003526f0 [ 226.541925][ T7352] Call Trace: [ 226.545247][ T7352] [ 226.548210][ T7352] usb_start_wait_urb+0x114/0x4c0 [ 226.553359][ T7352] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 226.559531][ T7352] usb_control_msg+0x232/0x3e0 [ 226.564380][ T7352] dtv5100_i2c_msg+0x250/0x330 [ 226.569271][ T7352] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 226.574184][ T7352] __i2c_transfer+0x874/0x2170 [ 226.579134][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.584396][ T7352] ? __pfx___i2c_transfer+0x10/0x10 [ 226.589805][ T7352] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 226.595236][ T7352] ? i2c_transfer+0x11d/0x3a0 [ 226.599969][ T7352] i2c_transfer+0x25b/0x3a0 [ 226.604511][ T7352] ? __pfx_i2c_transfer+0x10/0x10 [ 226.609621][ T7352] ? _copy_from_user+0x94/0xb0 [ 226.614432][ T7352] i2cdev_ioctl_rdwr+0x460/0x740 [ 226.619473][ T7352] i2cdev_ioctl+0x64b/0x7f0 [ 226.624032][ T7352] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 226.629132][ T7352] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.634127][ T7352] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 226.639346][ T7352] __se_sys_ioctl+0xf9/0x170 [ 226.644096][ T7352] do_syscall_64+0xfa/0x3b0 [ 226.648678][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.653948][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.660138][ T7352] ? clear_bhb_loop+0x60/0xb0 [ 226.664913][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.670853][ T7352] RIP: 0033:0x7f4e7b38ebe9 [ 226.675366][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.695027][ T7352] RSP: 002b:00007f4e7c120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.703472][ T7352] RAX: ffffffffffffffda RBX: 00007f4e7b5b6270 RCX: 00007f4e7b38ebe9 [ 226.711532][ T7352] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000008 [ 226.719661][ T7352] RBP: 00007f4e7b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.727681][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.735693][ T7352] R13: 00007f4e7b5b6308 R14: 00007f4e7b5b6270 R15: 00007f4e7b6dfa28 [ 226.743716][ T7352] [ 226.746788][ T7352] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 226.754071][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.2.330 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 226.765968][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.776053][ T7352] Call Trace: [ 226.779350][ T7352] [ 226.782290][ T7352] dump_stack_lvl+0x99/0x250 [ 226.786898][ T7352] ? __asan_memcpy+0x40/0x70 [ 226.791523][ T7352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.796736][ T7352] ? __pfx__printk+0x10/0x10 [ 226.801355][ T7352] vpanic+0x281/0x750 [ 226.805347][ T7352] ? __pfx__printk+0x10/0x10 [ 226.809953][ T7352] ? __pfx_vpanic+0x10/0x10 [ 226.814464][ T7352] ? is_bpf_text_address+0x292/0x2b0 [ 226.819778][ T7352] panic+0xb9/0xc0 [ 226.823516][ T7352] ? __pfx_panic+0x10/0x10 [ 226.827954][ T7352] __warn+0x31b/0x4b0 [ 226.831946][ T7352] ? usb_submit_urb+0x112b/0x1830 [ 226.836980][ T7352] ? usb_submit_urb+0x112b/0x1830 [ 226.842009][ T7352] report_bug+0x2be/0x4f0 [ 226.846353][ T7352] ? usb_submit_urb+0x112b/0x1830 [ 226.851402][ T7352] ? usb_submit_urb+0x112b/0x1830 [ 226.856440][ T7352] ? usb_submit_urb+0x112d/0x1830 [ 226.861475][ T7352] handle_bug+0x84/0x160 [ 226.865729][ T7352] exc_invalid_op+0x1a/0x50 [ 226.870237][ T7352] asm_exc_invalid_op+0x1a/0x20 [ 226.875101][ T7352] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 226.880754][ T7352] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 fb 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 66 af 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 226.900381][ T7352] RSP: 0018:ffffc90003b5f830 EFLAGS: 00010246 [ 226.906461][ T7352] RAX: 4f5dd4cab3cce500 RBX: ffff8880785fe100 RCX: 0000000000080000 [ 226.914457][ T7352] RDX: ffffc9000fb6f000 RSI: 0000000000003db9 RDI: 0000000000003dba [ 226.922467][ T7352] RBP: 1ffff1100b1819d8 R08: 0000000000000003 R09: 0000000000000004 [ 226.930482][ T7352] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 226.938483][ T7352] R13: ffff888058c0cec0 R14: 0000000080001b80 R15: ffff8880306fccc0 [ 226.946525][ T7352] usb_start_wait_urb+0x114/0x4c0 [ 226.951587][ T7352] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 226.957178][ T7352] usb_control_msg+0x232/0x3e0 [ 226.961974][ T7352] dtv5100_i2c_msg+0x250/0x330 [ 226.966763][ T7352] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 226.971643][ T7352] __i2c_transfer+0x874/0x2170 [ 226.976448][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.981705][ T7352] ? __pfx___i2c_transfer+0x10/0x10 [ 226.986933][ T7352] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 226.992411][ T7352] ? i2c_transfer+0x11d/0x3a0 [ 226.997123][ T7352] i2c_transfer+0x25b/0x3a0 [ 227.001647][ T7352] ? __pfx_i2c_transfer+0x10/0x10 [ 227.006696][ T7352] ? _copy_from_user+0x94/0xb0 [ 227.011475][ T7352] i2cdev_ioctl_rdwr+0x460/0x740 [ 227.016447][ T7352] i2cdev_ioctl+0x64b/0x7f0 [ 227.020972][ T7352] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 227.026020][ T7352] ? bpf_lsm_file_ioctl+0x9/0x20 [ 227.030973][ T7352] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 227.036018][ T7352] __se_sys_ioctl+0xf9/0x170 [ 227.040625][ T7352] do_syscall_64+0xfa/0x3b0 [ 227.045145][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.050357][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.056430][ T7352] ? clear_bhb_loop+0x60/0xb0 [ 227.061146][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.067046][ T7352] RIP: 0033:0x7f4e7b38ebe9 [ 227.071471][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.091087][ T7352] RSP: 002b:00007f4e7c120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.099529][ T7352] RAX: ffffffffffffffda RBX: 00007f4e7b5b6270 RCX: 00007f4e7b38ebe9 [ 227.107516][ T7352] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000008 [ 227.115496][ T7352] RBP: 00007f4e7b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 227.123474][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.131455][ T7352] R13: 00007f4e7b5b6308 R14: 00007f4e7b5b6270 R15: 00007f4e7b6dfa28 [ 227.139454][ T7352] [ 227.142826][ T7352] Kernel Offset: disabled [ 227.147156][ T7352] Rebooting in 86400 seconds..