last executing test programs: 2m24.567121444s ago: executing program 2 (id=1747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 2m24.474219112s ago: executing program 2 (id=1749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 2m24.336185104s ago: executing program 2 (id=1751): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40881) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000000c0)='=relative', 0x0, r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x0, 0x1, 0x8, @remote, @mcast1, 0x8000, 0x0, 0x6, 0x45c}}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x12, 0x20, 0x70bd2b, 0x25dfdbfa, {0x22, 0x3, 0x2, 0xef, {0x4e21, 0x4e22, [0x80000001, 0xffffffff, 0xfffffeff, 0x8], [0x8, 0x9, 0x5, 0x8], r5, [0xfffffc78, 0x6bbb5f79]}, 0x80000000, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84f55b8"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "10ece88ef035908cce5817dde13d72d814846ce8c737500d22"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) close(0x3) 2m19.141160943s ago: executing program 2 (id=1767): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 2m18.936265838s ago: executing program 2 (id=1763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01864c1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 2m18.449681041s ago: executing program 2 (id=1769): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 2m18.205076015s ago: executing program 32 (id=1769): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 15.527170489s ago: executing program 3 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070025bdf000fddbdf2505001000180001801400020073797a5f74756e000000000000000000080003800400623400"], 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20003, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x4, [{}, {0x1}], 0x0, 0x0, 0x0, 0x0, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x222822, 0x101) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xe00) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_destroy(r2) io_setup(0x7f, &(0x7f0000000100)) io_cancel(r2, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x1}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x6, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x2b}, {0x81, 0x8, 0x80000001, 0x1, 0x1, 0x3, 0x3, 0x363f}, {0x100000001, 0x5, 0x6, 0x8}, 0x1, 0x6e6bb6, 0x2, 0x1, 0x1}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0xc, @in6=@empty, 0x3501, 0x4, 0x0, 0x0, 0x8, 0xffff, 0x4}}, 0xe4) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 10.044205216s ago: executing program 4 (id=2344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 9.428433993s ago: executing program 3 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x40400c0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, &(0x7f0000000700)) r1 = openat$tun(0xffffff9c, 0x0, 0x404080, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x10) 8.706722236s ago: executing program 4 (id=2353): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001cc0)={0x84, &(0x7f0000001dc0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000440)={0x2, 0x0, 0x3, 0x3, 0xfffffffc}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[]) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x30bd2b, 0x0, {0x2, 0x0, 0x0, r4, 0x40, 0x10, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000) 7.775519395s ago: executing program 5 (id=2355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) listen(r6, 0xb) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 7.669034913s ago: executing program 5 (id=2356): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r10 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r10, 0x0, 0xfffffcd9) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 6.748859444s ago: executing program 4 (id=2358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4042, 0x17f) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.263388145s ago: executing program 3 (id=2359): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='7\x00\xa1q\x95\xe1\xc1\x91\x19\xd0\xd2 \xb3\xbb\xc8\xba\xcc\x04\xe5k\xf4\xf3\xdc*\x92j\x9b\xd8V\x8e\xd9\xddk\xc1\xa4\xe5\xd7\xa9\x93\xff\x95\x9f\'\x8d\xb6\x95P\x9a\x01J$o\xb0?\x04a\xa7\xe5/\x83\xed\x01P\x91\x83F\xfc\xe3J\n2o\xfc\xcd\x8e\x96\xe6\xb2D\x99\xea3T\xcf\xc9\x8f\xde\x06\x00\x00\xe7\x10\x90\x88[\x92\xc8)\n\xe7Ivh\x03Q\xd9\xcf\x96B\xc4\x97=\xd3\xa6/\x1f\xdac\a!\xceq\x06\x16\xe8\xa3\xbf\x04\x1bq4),Q\x1d\x19\xbf\x9d\xc0\x1a\xe4QTxxpz\xa6\xe9\x9d\xd2\xe9\x15\xbeg:\x99\x03[\xb4YS\xc1\x16\xf1\xa2\x8f\xa0\x94\xefP\xc0\xf8*\xd6\xe8\xb1H\x1c\xa6\xf4%3.\x1b\x12\xe0\x9c\xb1\x99@&\x1d\x01@\a\x97\x88/\xc3@\xe2\x9eg\xc9\xaeH\xfa\xc2b&\x0f9\xa1p-x{m\xb7\xfc9\xd0\x93\x94E,\t\xa1E!\x1dI\xa8\xd7S\x17\xfb\xcf\x02.\xcf\x9cE/^\x95=\xfa\xae\x8c<9K\xa0\x86\x02\xc2i\v\xf5\xb1VT\x17\xe2[\"\xb3\v.U4\xc88a\xa9') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f0000000100)=@caif=@dgm, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/49, 0x31}, {0x0}], 0x2, &(0x7f0000000680)=""/214, 0xd6}, 0x5}], 0x1, 0x140, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00') 6.260780681s ago: executing program 0 (id=2369): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x40, 0x11, 0x2, "9dde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.503564655s ago: executing program 5 (id=2361): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x9, 0x0, 0xf, 0x1000}]}) r9 = fanotify_init(0x200, 0x400) fanotify_mark(r9, 0x1, 0x3a, r8, 0x0) pipe2(&(0x7f0000000340), 0x80080) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x400, 0x1, 0x244}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r10, r11, 0x0) r12 = syz_open_procfs(0x0, 0x0) preadv(r12, &(0x7f00000003c0), 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400d0) 4.436114725s ago: executing program 4 (id=2362): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c000000000003000200345b3d16aaaa880e0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x1) 3.554678601s ago: executing program 5 (id=2363): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00005b1000/0x4000)=nil}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 3.486876102s ago: executing program 1 (id=2364): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000090, 0x0, 0x0) r3 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0x6a) set_mempolicy(0x1, 0x0, 0x81) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, &(0x7f00000000c0), 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfc, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x3, 0x5}}}}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r6, &(0x7f0000000fc0)=[{&(0x7f0000000440)="03865d13a45427378bd6169ab3b9fe6335", 0x11}], 0x1) 3.111164093s ago: executing program 3 (id=2365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2b, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x4, 0x10000000, 0x2, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x147}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 2.607721549s ago: executing program 5 (id=2366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000240), &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000000100)) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 2.008215351s ago: executing program 0 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002b40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r12, {}, {}, {0xa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x56}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 1.859337871s ago: executing program 1 (id=2368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0x1000d76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0x2000000d, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc6, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x4, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0x20000ff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0xc, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x5, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0xc}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 1.784263535s ago: executing program 0 (id=2370): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x40400c0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, &(0x7f0000000700)) r1 = openat$tun(0xffffff9c, 0x0, 0x404080, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x10) 1.675422667s ago: executing program 5 (id=2371): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000140)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000000)={0x40, 0x3, 0x2, {0x2, 0x7}}, 0x0}, &(0x7f0000000700)={0x10, &(0x7f0000000540)={0x40, 0x11}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000d40)={0x10, &(0x7f0000000740)={0x0, 0x0, 0x35, "3d83abe1f1935e95dbe72c86ef4a988748bbc4650ec3074e91829238d900ff0a1410b3d4934fed67c53aaa3482aab0e573b95ec3dd"}, 0x0, &(0x7f0000000d00)={0x21, 0x0, 0x4, "3033dbc4"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.639517129s ago: executing program 1 (id=2372): socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x10, 0x8001}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0x21da, 0x6}, 0x8) syz_ublk_setup_io_uring(0x7a2, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, 0x0, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.536250861s ago: executing program 1 (id=2373): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xd}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.450518984s ago: executing program 0 (id=2374): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) unshare(0x6020400) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 1.277145443s ago: executing program 1 (id=2375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) io_uring_setup(0x456, &(0x7f0000000340)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x141041, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.223414514s ago: executing program 4 (id=2376): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c00000000000690780a010102ac1414aa4404be030000", @ANYRES32=0x41424344], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = landlock_create_ruleset(&(0x7f0000001080)={0x1, 0x4, 0x5, 0x2002, 0x1, 0x2}, 0x30, 0x3) landlock_restrict_self(r2, 0xd) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') bind$packet(r3, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, 0x0, 0x20000100) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.144277942s ago: executing program 1 (id=2377): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 286.672024ms ago: executing program 0 (id=2378): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 167.981329ms ago: executing program 0 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x450201, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000740)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @llc={@snap={0x1, 0x0, "c3", "0e3d2c", 0x22f0}}}}, 0x1a) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x100000c) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) read$sequencer(r5, &(0x7f00000001c0)=""/213, 0xd5) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.913375ms ago: executing program 3 (id=2380): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="10"], 0x40c}}, 0x0) 0s ago: executing program 4 (id=2381): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40881) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000000c0)='=relative', 0x0, r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x12, 0x20, 0x70bd2b, 0x25dfdbfa, {0x22, 0x3, 0x2, 0xef, {0x4e21, 0x4e22, [0x80000001, 0xffffffff, 0xfffffeff, 0x8], [0x8, 0x9, 0x5, 0x8], 0x0, [0xfffffc78, 0x6bbb5f79]}, 0x80000000, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84f55b8"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "10ece88ef035908cce5817dde13d72d814846ce8c737500d22"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) close(0x3) kernel console output (not intermixed with test programs): rm state [ 666.637691][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 666.649082][ T5720] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 666.809578][ T5720] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 666.829559][ T5720] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 0 [ 666.843074][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 666.854657][ T5720] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.865402][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 666.875026][ T5720] usb 6-1: Product: syz [ 666.883469][ T5720] usb 6-1: Manufacturer: syz [ 666.889489][ T5720] usb 6-1: SerialNumber: syz [ 666.905150][ T5720] usb 6-1: config 0 descriptor?? [ 666.925531][ T5720] usb 6-1: selecting invalid altsetting 0 [ 667.117698][ T5692] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 667.280666][ T5719] usb 6-1: USB disconnect, device number 18 [ 667.297446][ T5692] usb 2-1: Using ep0 maxpacket: 8 [ 667.311555][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.325892][ T8601] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 667.342873][ T5692] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 667.361660][ T8601] usb 1-1: USB disconnect, device number 8 [ 667.368892][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.389481][ T5692] usb 2-1: config 0 descriptor?? [ 667.507435][ T5699] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 667.517643][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 667.611627][ T5692] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 667.660398][ T5699] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 667.669733][ T5699] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 667.681388][ T5699] usb 5-1: config 220 has no interface number 2 [ 667.689157][ T5699] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 667.703882][ T5699] usb 5-1: config 220 interface 0 has no altsetting 0 [ 667.712276][ T5699] usb 5-1: config 220 interface 76 has no altsetting 0 [ 667.719708][ T5699] usb 5-1: config 220 interface 1 has no altsetting 0 [ 667.731855][ T5699] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 667.741705][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.751131][ T5699] usb 5-1: Product: syz [ 667.755649][ T5699] usb 5-1: Manufacturer: syz [ 667.760564][ T5699] usb 5-1: SerialNumber: syz [ 667.980589][ T5699] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 667.989889][ T5699] uvcvideo 5-1:220.0: No valid video chain found. [ 668.003872][ T5699] usb 5-1: selecting invalid altsetting 0 [ 668.025735][ T5699] usb 5-1: selecting invalid altsetting 0 [ 668.031954][ T5699] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 668.057108][ T5699] usb 5-1: USB disconnect, device number 36 [ 668.146164][ T5734] usb 2-1: USB disconnect, device number 21 [ 668.199221][T12566] kvm: kvm [12565]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0xaf6a0000b00d [ 669.007382][ T5734] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 669.141484][T12578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 669.189078][ T5734] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 669.204439][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.219752][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.234083][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 669.263296][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 669.280467][ T5734] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 669.294225][ T5734] usb 5-1: Manufacturer: syz [ 669.315404][ T5734] usb 5-1: config 0 descriptor?? [ 669.752619][ T5734] appleir 0003:05AC:8243.0048: unknown main item tag 0x0 [ 669.765593][ T5734] appleir 0003:05AC:8243.0048: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 670.737195][ T5734] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 670.899398][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.909380][ T5734] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 670.919815][ T5734] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 670.932954][ T5734] usb 2-1: config 63 has no interface number 0 [ 670.939805][ T5734] usb 2-1: config 63 interface 66 has no altsetting 0 [ 670.949827][ T5734] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 670.961369][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.970521][ T5734] usb 2-1: Product: syz [ 670.975213][ T5734] usb 2-1: Manufacturer: syz [ 670.980512][ T5734] usb 2-1: SerialNumber: syz [ 671.200943][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.213156][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.236585][ T5734] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 671.259253][ T5734] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 671.270523][ T5734] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 671.281962][ T5734] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 671.293333][ T5734] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 671.303961][ T5734] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 671.315304][ T5734] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 671.324762][ T5734] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 671.345609][ T5734] usb 2-1: USB disconnect, device number 22 [ 671.389089][ T8609] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 671.571383][ T8609] usb 6-1: Using ep0 maxpacket: 32 [ 671.583717][ T8609] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 671.596205][ T8609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.613464][ T8609] usb 6-1: config 0 descriptor?? [ 671.749325][ T5734] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 671.773483][ T5692] usb 5-1: USB disconnect, device number 37 [ 671.836220][ T8609] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 671.847062][ T5699] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 671.872281][ T8609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.890909][ T8609] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 671.902225][ T8609] usb 6-1: media controller created [ 671.918763][ T8609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.933295][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 671.953034][ T5734] usb 2-1: not running at top speed; connect to a high speed hub [ 671.962768][ T5734] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 671.972193][ T5734] usb 2-1: config 63 has an invalid descriptor of length 42, skipping remainder of the config [ 671.984025][ T5734] usb 2-1: config 63 has no interface number 0 [ 671.991052][ T5734] usb 2-1: config 63 interface 66 has no altsetting 0 [ 672.002622][ T5734] usb 2-1: string descriptor 0 read error: -22 [ 672.009809][ T5734] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 672.019626][ T5699] usb 1-1: config 0 has no interfaces? [ 672.021545][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.031003][ T5699] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.051474][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.066143][ T5699] usb 1-1: config 0 descriptor?? [ 672.074831][ T5734] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 672.197289][ T5692] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 672.303586][ T5734] usb 1-1: USB disconnect, device number 9 [ 672.358047][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 672.368064][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.383493][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.396015][ T5692] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 672.409002][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.425846][ T5692] usb 5-1: config 0 descriptor?? [ 672.667902][ T8609] az6027: usb out operation failed. (-71) [ 672.674818][ T8609] stb0899_attach: Driver disabled by Kconfig [ 672.681743][ T8609] az6027: no front-end attached [ 672.681743][ T8609] [ 672.691098][ T8609] az6027: usb out operation failed. (-71) [ 672.699642][ T8609] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 672.709035][ T8609] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102 [ 672.728591][ T8609] dvb-usb: schedule remote query interval to 400 msecs. [ 672.736856][ T8609] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 672.761835][ T8609] usb 6-1: USB disconnect, device number 19 [ 672.821125][ T8609] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 672.853810][ T5692] ft260 0003:0403:6030.0049: unknown main item tag 0x0 [ 672.887971][ T5692] ft260 0003:0403:6030.0049: unknown main item tag 0x0 [ 673.043977][ T5692] ft260 0003:0403:6030.0049: chip code: 0000 0000 [ 673.246663][ T5692] ft260 0003:0403:6030.0049: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 673.449164][ T5692] ft260 0003:0403:6030.0049: failed to retrieve status: -32, no wakeup [ 673.461413][ T5692] ft260 0003:0403:6030.0049: failed to retrieve status: -32 [ 673.724277][ T5692] usb 5-1: USB disconnect, device number 38 [ 673.893977][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2079'. [ 674.227109][ T5692] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 674.387237][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 674.409803][ T5692] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 674.421131][ T5692] usb 1-1: config 0 has no interface number 0 [ 674.428753][ T5692] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 674.450936][ T5692] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 674.471312][ T5719] usb 2-1: USB disconnect, device number 23 [ 674.478078][ T5692] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 674.496841][ T5692] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 674.515836][ T5692] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 674.528219][ T8604] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 674.543429][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.557329][ T5692] usb 1-1: config 0 descriptor?? [ 674.569641][ T5692] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 674.687050][ T8604] usb 5-1: Using ep0 maxpacket: 8 [ 674.702407][ T8604] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 674.712833][ T8604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.725025][ T8604] usb 5-1: Product: syz [ 674.731595][ T8604] usb 5-1: Manufacturer: syz [ 674.738096][ T8604] usb 5-1: SerialNumber: syz [ 674.746477][ T8604] usb 5-1: config 0 descriptor?? [ 674.964259][ T8604] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 675.015093][T12647] syzkaller0: entered promiscuous mode [ 675.022988][T12647] syzkaller0: entered allmulticast mode [ 675.457576][ T5719] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 675.607099][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 675.615000][ T5719] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 675.624829][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.636855][ T5719] usb 6-1: config 0 descriptor?? [ 675.654693][ T5719] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 676.517188][ T5692] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 676.677064][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 676.684342][ T5692] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 676.694081][ T5692] usb 2-1: config 0 has no interface number 0 [ 676.700798][ T5692] usb 2-1: config 0 interface 12 has no altsetting 0 [ 676.711158][ T5692] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 676.721417][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.729987][ T5692] usb 2-1: Product: syz [ 676.734861][ T5692] usb 2-1: Manufacturer: syz [ 676.740494][ T5692] usb 2-1: SerialNumber: syz [ 676.751279][ T5692] usb 2-1: config 0 descriptor?? [ 676.784594][ T8604] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 676.807344][ T8604] usb 5-1: USB disconnect, device number 39 [ 676.826150][ T5734] usb 1-1: USB disconnect, device number 10 [ 676.840994][ T5734] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 677.395202][ T5692] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 677.412959][ T5692] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 677.425045][ T5692] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 677.434056][ T5692] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 677.457494][ T5692] usb 2-1: USB disconnect, device number 24 [ 677.637161][ T8604] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 677.810047][ T8604] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.823817][ T8604] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.836376][ T8604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 677.845815][ T8604] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 677.857229][ T8604] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 677.866402][ T8604] usb 1-1: Product: syz [ 677.871094][ T8604] usb 1-1: Manufacturer: syz [ 677.876263][ T8604] usb 1-1: SerialNumber: syz [ 677.889468][ T8604] usb 1-1: config 0 descriptor?? [ 677.898371][ T5719] gspca_sonixj: i2c_w8 err -71 [ 677.907632][ T8604] usb 1-1: selecting invalid altsetting 0 [ 677.907759][ T5719] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 677.936255][ T5719] usb 6-1: USB disconnect, device number 20 [ 678.110365][ T8604] usb 1-1: USB disconnect, device number 11 [ 678.123784][T12662] debugfs: 'netdev:nicvf0' already exists in 'phy5' [ 678.277266][ T5692] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 678.429739][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 678.440029][ T5692] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 678.450496][ T5692] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 678.461575][ T5692] usb 2-1: config 63 has no interface number 0 [ 678.469093][ T5692] usb 2-1: config 63 interface 66 has no altsetting 0 [ 678.479036][ T5692] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 678.498630][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.518985][ T5692] usb 2-1: Product: syz [ 678.527509][ T5692] usb 2-1: Manufacturer: syz [ 678.536413][ T5692] usb 2-1: SerialNumber: syz [ 678.605952][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 678.619069][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 678.630565][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 678.641822][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 678.653385][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 678.756295][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.767920][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.796206][ T5692] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 678.806848][ T5692] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 678.819961][ T5692] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 678.840139][ T5692] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 678.868067][ T5692] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 678.882603][ T5692] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 678.899533][ T5692] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 678.909820][ T5692] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 678.938401][ T5692] usb 2-1: USB disconnect, device number 25 [ 679.198663][ T5734] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 679.234014][T12685] kvm: pic: single mode not supported [ 679.234031][T12685] kvm: pic: level sensitive irq not supported [ 679.307500][ T5692] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 679.370453][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 679.389556][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 679.404972][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 679.422582][ T5734] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 679.433231][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.444451][ T5734] usb 6-1: Product: syz [ 679.449213][ T5734] usb 6-1: Manufacturer: syz [ 679.454651][ T5734] usb 6-1: SerialNumber: syz [ 679.465704][ T5734] usb 6-1: config 0 descriptor?? [ 679.467109][ T5719] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 679.472078][T12681] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 679.510914][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 679.524009][ T5692] usb 2-1: not running at top speed; connect to a high speed hub [ 679.536046][ T5692] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 679.547153][ T5734] rc_core: IR keymap rc-streamzap not found [ 679.555336][ T5734] Registered IR keymap rc-empty [ 679.558121][ T5692] usb 2-1: config 63 has an invalid descriptor of length 42, skipping remainder of the config [ 679.574158][ T5692] usb 2-1: config 63 has no interface number 0 [ 679.581746][ T5734] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 679.588067][ T5692] usb 2-1: config 63 interface 66 has no altsetting 0 [ 679.602235][ T5734] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104 [ 679.625649][ T5692] usb 2-1: string descriptor 0 read error: -22 [ 679.638543][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 679.645289][ T5692] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 679.663201][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.675655][ T5719] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 679.691675][ T5719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 679.700066][ T5719] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 679.710825][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.745755][ T5719] usb 1-1: config 0 descriptor?? [ 679.768406][ T5692] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 679.880934][ T5692] usb 6-1: USB disconnect, device number 21 [ 679.928618][ T5734] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 679.972323][ T5719] usbhid 1-1:0.0: can't add hid device: -71 [ 679.980154][ T5719] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 679.992391][ T5719] usb 1-1: USB disconnect, device number 12 [ 680.099078][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.110507][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.120792][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.134378][ T5734] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.144547][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.155648][ T5734] usb 5-1: config 0 descriptor?? [ 680.455993][T12697] syzkaller0: entered promiscuous mode [ 680.463541][T12697] syzkaller0: entered allmulticast mode [ 680.600739][ T8609] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 680.615144][ T5734] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 680.637464][ T8609] hid-generic 0000:0000:0000.004B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 680.839336][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.861793][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.937061][ T8609] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 681.097127][ T8609] usb 6-1: Using ep0 maxpacket: 8 [ 681.104180][ T8609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.116477][ T8609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25417, setting to 1024 [ 681.128379][ T8609] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 681.138123][ T8609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.148905][ T8609] usb 6-1: config 0 descriptor?? [ 681.361989][ T8609] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 681.366238][ T5719] usb 5-1: USB disconnect, device number 40 [ 681.591048][ T5734] usb 6-1: USB disconnect, device number 22 [ 681.973918][T12719] syzkaller0: entered promiscuous mode [ 681.982417][T12719] syzkaller0: entered allmulticast mode [ 682.042134][ T5719] usb 2-1: USB disconnect, device number 26 [ 682.431778][ T30] audit: type=1326 audit(1784348969.065:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.0.2113" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7fc00000 [ 682.637195][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 682.932281][T12742] bridge0: port 1(macvlan2) entered blocking state [ 682.943450][T12742] bridge0: port 1(macvlan2) entered disabled state [ 682.952523][T12740] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.953283][T12742] macvlan2: entered allmulticast mode [ 682.979947][T12742] ip6gretap0: entered allmulticast mode [ 682.992808][T12742] macvlan2: entered promiscuous mode [ 683.013034][T12742] bridge0: port 1(macvlan2) entered blocking state [ 683.020567][T12742] bridge0: port 1(macvlan2) entered forwarding state [ 683.345724][T12752] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2267849424 (4535698848 ns) > initial count (2845888360 ns). Using initial count to start timer. [ 683.484116][T12755] syzkaller0: entered promiscuous mode [ 683.499764][T12755] syzkaller0: entered allmulticast mode [ 683.509887][ T5734] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 683.546033][T12757] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 683.611925][T12757] bond1: entered promiscuous mode [ 683.627691][T12757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.671402][T12761] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 683.687966][T12761] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 683.716848][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short [ 683.726055][T12761] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 683.739867][ T5734] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 683.748645][ T5734] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 683.763616][ T5734] usb 6-1: config 63 has no interface number 0 [ 683.776867][ T5734] usb 6-1: config 63 interface 66 has no altsetting 0 [ 683.791586][T12757] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 683.804645][T12757] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 683.818582][ T5734] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 683.828106][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.840484][ T5734] usb 6-1: Product: syz [ 683.845966][ T5734] usb 6-1: Manufacturer: syz [ 683.851591][ T5734] usb 6-1: SerialNumber: syz [ 683.977275][ T8609] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 684.070225][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.079698][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.098795][ T5734] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 684.106911][ T5734] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 684.119174][ T5734] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 684.131371][ T5734] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 684.142893][ T8609] usb 1-1: Using ep0 maxpacket: 16 [ 684.149066][ T5734] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 684.160453][ T5734] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 684.171339][ T8609] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 684.183995][ T5734] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 684.192430][ T8609] usb 1-1: config 0 interface 0 has no altsetting 0 [ 684.199557][ T5734] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 684.209271][ T8609] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 684.219435][ T8609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.231023][ T5734] usb 6-1: USB disconnect, device number 23 [ 684.248824][ T8609] usb 1-1: config 0 descriptor?? [ 684.464615][ T8609] usbhid 1-1:0.0: can't add hid device: -71 [ 684.477711][ T8609] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 684.495294][ T8609] usb 1-1: USB disconnect, device number 13 [ 684.552478][T12771] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 684.607138][ T5734] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 684.781188][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short [ 684.799176][ T5734] usb 6-1: not running at top speed; connect to a high speed hub [ 684.811857][ T5734] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 684.821689][ T5734] usb 6-1: config 63 has an invalid descriptor of length 42, skipping remainder of the config [ 684.833668][ T5734] usb 6-1: config 63 has no interface number 0 [ 684.841761][ T5734] usb 6-1: config 63 interface 66 has no altsetting 0 [ 684.854843][ T5734] usb 6-1: string descriptor 0 read error: -22 [ 684.869066][ T5734] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 684.881708][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.891897][ T8604] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 684.914493][ T5734] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 684.932572][T12780] fuse: root generation should be zero [ 685.061631][ T8604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.075049][ T8604] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.085511][ T8604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.097445][ T8604] usb 2-1: config 0 descriptor?? [ 685.106598][ T8604] pwc: Askey VC010 type 2 USB webcam detected. [ 685.176349][T12787] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 685.192045][T12787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2141'. [ 685.227174][ T5734] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 685.409452][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.422339][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.434195][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 685.451279][ T5734] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 685.457405][ T5692] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 685.461687][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.480128][ T5734] usb 5-1: config 0 descriptor?? [ 685.511586][ T8604] pwc: recv_control_msg error -32 req 02 val 2b00 [ 685.520077][ T8604] pwc: recv_control_msg error -32 req 02 val 2700 [ 685.528987][ T8604] pwc: recv_control_msg error -32 req 02 val 2c00 [ 685.537045][ T8604] pwc: recv_control_msg error -32 req 04 val 1000 [ 685.544822][ T8604] pwc: recv_control_msg error -32 req 04 val 1300 [ 685.553327][ T8604] pwc: recv_control_msg error -32 req 04 val 1400 [ 685.561261][ T8604] pwc: recv_control_msg error -32 req 02 val 2000 [ 685.568523][ T8604] pwc: recv_control_msg error -32 req 02 val 2100 [ 685.576178][ T8604] pwc: recv_control_msg error -32 req 04 val 1500 [ 685.639088][ T5692] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 685.651644][ T5692] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 685.663936][ T5692] usb 1-1: config 0 interface 0 has no altsetting 0 [ 685.672965][ T5692] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 685.682969][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 685.693087][ T5692] usb 1-1: Product: syz [ 685.698686][ T5692] usb 1-1: Manufacturer: syz [ 685.703392][ T5692] usb 1-1: SerialNumber: syz [ 685.711752][ T5692] usb 1-1: config 0 descriptor?? [ 685.721849][ T5692] usb 1-1: selecting invalid altsetting 0 [ 685.792535][ T8604] pwc: recv_control_msg error -71 req 02 val 2400 [ 685.806478][ T8604] pwc: recv_control_msg error -71 req 02 val 2600 [ 685.817332][ T8604] pwc: recv_control_msg error -71 req 02 val 2900 [ 685.824618][ T8604] pwc: recv_control_msg error -71 req 02 val 2800 [ 685.833401][ T8604] pwc: recv_control_msg error -71 req 04 val 1100 [ 685.856027][ T8604] pwc: recv_control_msg error -71 req 04 val 1200 [ 685.878376][ T8604] pwc: Registered as video103. [ 685.903082][ T8604] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input106 [ 685.932716][ T5734] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 685.973263][ T8604] usb 2-1: USB disconnect, device number 27 [ 685.986828][ T5699] usb 1-1: USB disconnect, device number 14 [ 686.014143][T12787] debugfs: 'netdev:nicvf0' already exists in 'phy5' [ 686.032132][T12792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.061873][T12792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.479235][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.486371][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.636790][T12799] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 686.662156][T12799] kvm: pic: single mode not supported [ 686.662236][T12799] kvm: pic: non byte read [ 686.688115][T12799] kvm: pic: non byte read [ 686.699796][T12799] kvm: pic: non byte read [ 686.705261][T12799] kvm: pic: non byte read [ 686.715377][T12799] kvm: pic: non byte read [ 686.728132][T12799] kvm: pic: non byte read [ 686.742275][T12799] kvm: pic: non byte read [ 686.749033][T12799] kvm: pic: non byte read [ 686.754593][T12799] kvm: pic: level sensitive irq not supported [ 686.758488][T12799] kvm: pic: non byte read [ 686.773213][T12799] kvm: pic: non byte read [ 686.778388][T12799] kvm: pic: level sensitive irq not supported [ 686.778608][T12799] kvm: pic: single mode not supported [ 686.790749][T12799] kvm: pic: level sensitive irq not supported [ 686.802189][T12799] kvm: pic: level sensitive irq not supported [ 686.810258][T12799] kvm: pic: level sensitive irq not supported [ 686.817920][T12799] kvm: pic: single mode not supported [ 686.825077][T12799] kvm: pic: level sensitive irq not supported [ 686.831163][T12799] kvm: pic: single mode not supported [ 686.839800][T12799] kvm: pic: single mode not supported [ 686.917577][ T8604] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 687.045674][T12809] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 687.055428][T12809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2147'. [ 687.097397][ T8604] usb 1-1: Using ep0 maxpacket: 8 [ 687.104778][ T8604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.117185][ T8604] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 687.127773][ T8604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.140299][ T8604] usb 1-1: config 0 descriptor?? [ 687.307462][ T5692] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 687.357675][ T8606] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 687.377405][ T8604] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 687.416100][ T8604] usb 6-1: USB disconnect, device number 24 [ 687.461690][ T5692] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.476056][ T5692] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 687.489017][ T5692] usb 2-1: config 0 interface 0 has no altsetting 0 [ 687.505324][ T5692] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 687.517369][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 687.518674][ T8606] usb 5-1: device descriptor read/64, error -32 [ 687.525957][ T5692] usb 2-1: Product: syz [ 687.525977][ T5692] usb 2-1: Manufacturer: syz [ 687.543189][ T5692] usb 2-1: SerialNumber: syz [ 687.553670][ T5692] usb 2-1: config 0 descriptor?? [ 687.568837][ T5692] usb 2-1: selecting invalid altsetting 0 [ 687.686503][ T5692] usb 1-1: USB disconnect, device number 15 [ 687.801787][ T5719] usb 2-1: USB disconnect, device number 28 [ 687.820296][T12809] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 687.889854][ T8606] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 688.040523][ T8606] usb 5-1: device descriptor read/64, error -32 [ 688.287237][ T8606] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 688.390835][T12816] syzkaller0: entered promiscuous mode [ 688.401475][T12816] syzkaller0: entered allmulticast mode [ 688.517250][ T8606] usb 5-1: device not accepting address 41, error -71 [ 688.829811][ T5699] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 689.019200][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 689.077072][ T5699] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 689.089064][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.095841][ T5699] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 689.121642][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.150673][ T5699] usb 2-1: config 0 descriptor?? [ 689.421276][ T5734] usb 5-1: USB disconnect, device number 41 [ 690.427179][ T8606] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 690.599596][ T8606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.610929][ T8606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.622715][ T8606] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 690.632590][ T8606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.645646][ T8606] usb 1-1: SerialNumber: syz [ 690.871671][ T8606] usb 1-1: 0:2 : does not exist [ 690.917300][ T8606] usb 1-1: USB disconnect, device number 16 [ 690.960413][T11914] udevd[11914]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.857098][ T8606] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 692.030288][ T8606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.040645][ T8606] usb 1-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00 [ 692.050125][ T8606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.062311][ T8606] usb 1-1: config 0 descriptor?? [ 692.538301][ T8606] wacom 0003:056A:0117.004D: Unknown device_type for 'HID 056a:0117'. Ignoring. [ 692.778776][ T8606] usb 1-1: USB disconnect, device number 17 [ 693.655298][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 693.671549][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 693.713579][ T5699] usb 2-1: USB disconnect, device number 29 [ 693.823583][T12838] syzkaller0: entered promiscuous mode [ 693.829881][T12838] syzkaller0: entered allmulticast mode [ 694.048961][ T8604] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 694.241845][ T8604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 694.253657][ T8604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.264285][ T8604] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 694.292245][ T8604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.320148][ T8604] usb 5-1: config 0 descriptor?? [ 694.795801][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.809963][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.841424][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.851691][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.859007][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.866813][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.899438][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.930628][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.938908][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.946760][ T8604] lenovo 0003:17EF:60EE.004E: unknown main item tag 0x0 [ 694.986408][ T8604] lenovo 0003:17EF:60EE.004E: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 695.443191][ T8604] lenovo 0003:17EF:60EE.004E: Sensitivity setting failed: -71 [ 695.455454][ T8604] usb 5-1: USB disconnect, device number 42 [ 696.213895][T12861] binder: transaction release 67 bad handle 1, ret = -22 [ 696.942275][ T5699] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 697.097528][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 697.144603][ T5699] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 697.158047][ T5699] usb 5-1: config 0 interface 0 has no altsetting 0 [ 697.165906][ T5699] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 697.176216][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.226879][ T5699] usb 5-1: config 0 descriptor?? [ 697.271066][ T8604] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 697.452763][ T8604] usb 1-1: Using ep0 maxpacket: 16 [ 697.477723][ T8604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 697.508657][ T8604] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 697.518098][ T8604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.527052][ T8604] usb 1-1: Product: syz [ 697.531779][ T8604] usb 1-1: Manufacturer: syz [ 697.536600][ T8604] usb 1-1: SerialNumber: syz [ 697.545637][ T8604] usb 1-1: config 0 descriptor?? [ 697.555913][ T8604] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 697.588480][ T8604] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 698.176078][ T8604] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 699.699948][ T5699] usbhid 5-1:0.0: can't add hid device: -71 [ 699.717315][ T5699] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 699.752772][ T5699] usb 5-1: USB disconnect, device number 43 [ 699.875068][T12885] syzkaller0: entered promiscuous mode [ 699.882427][T12885] syzkaller0: entered allmulticast mode [ 700.037085][ T5692] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 700.261056][ T8604] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 700.270665][ T8604] em28xx 1-1:0.0: board has no eeprom [ 700.341674][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 700.350301][ T5692] usb 2-1: no configurations [ 700.355165][ T5692] usb 2-1: can't read configurations, error -22 [ 700.357122][ T8604] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 700.371787][ T8604] em28xx 1-1:0.0: dvb set to bulk mode. [ 700.380969][ T8606] em28xx 1-1:0.0: Binding DVB extension [ 700.395490][ T8604] usb 1-1: USB disconnect, device number 18 [ 700.431317][ T8604] em28xx 1-1:0.0: Disconnecting em28xx [ 700.514861][ T8606] em28xx 1-1:0.0: Registering input extension [ 700.521919][ T8604] em28xx 1-1:0.0: Closing input extension [ 700.546149][ T8604] em28xx 1-1:0.0: Freeing device [ 700.947268][ T8606] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 701.120326][ T8606] usb 5-1: Using ep0 maxpacket: 32 [ 701.132412][ T8606] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 701.154499][ T8606] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 701.169285][ T8606] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.183201][ T8606] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 701.202687][ T8606] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 701.225762][ T8606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.235581][ T8606] usb 5-1: Product: syz [ 701.242023][T12908] syzkaller0: entered promiscuous mode [ 701.248093][ T8606] usb 5-1: Manufacturer: syz [ 701.252795][T12908] syzkaller0: entered allmulticast mode [ 701.259128][ T8606] usb 5-1: SerialNumber: syz [ 701.299370][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 701.314764][ T8606] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input112 [ 701.497055][ T8606] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 701.514300][ T8606] (id 0x00) [ 701.597308][ T8606] rc_core: IR keymap rc-imon-pad not found [ 701.603726][ T8606] Registered IR keymap rc-empty [ 701.608782][ T8606] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 701.619935][ T8606] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 701.706609][ T8606] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 701.720145][ T8606] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input113 [ 701.738818][ T8606] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:44> initialized [ 701.807329][ T8604] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 701.967090][ T8604] usb 6-1: Using ep0 maxpacket: 16 [ 701.974238][ T8604] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 701.987624][ T8604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.002483][ T8604] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 702.013592][ T8604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.022335][ T8604] usb 6-1: Product: syz [ 702.027201][ T8604] usb 6-1: Manufacturer: syz [ 702.032679][ T8604] usb 6-1: SerialNumber: syz [ 702.039793][ T8604] usb 6-1: config 0 descriptor?? [ 702.050707][ T8604] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 702.061305][ T8604] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 702.660267][ T8604] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 702.681656][ T8604] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 703.284475][T12920] imon:send_packet: task interrupted [ 703.290649][T12920] imon:send_packet: packet tx failed (-512) [ 703.297953][ T8604] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 703.308144][T12920] imon:vfd_write: send packet #5 failed [ 703.317924][ T8604] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 703.324825][T12920] imon:send_packet: packet tx failed (-32) [ 703.332105][ T8604] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 703.347119][T12920] imon:vfd_write: send packet #0 failed [ 703.357257][ T8606] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 703.360485][ T5692] usb 5-1: USB disconnect, device number 44 [ 703.507205][ T8606] usb 1-1: Using ep0 maxpacket: 16 [ 703.514739][ T8606] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 703.524057][ T8606] usb 1-1: config 0 has no interface number 0 [ 703.530798][ T8606] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 703.541639][ T8606] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 703.554149][ T8604] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 703.563372][ T8604] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 703.571268][ T8604] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 703.579734][ T8606] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 703.589779][ T8606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.604716][ T8606] usb 1-1: Product: syz [ 703.610337][ T8604] usb 6-1: USB disconnect, device number 25 [ 703.616759][ T8606] usb 1-1: Manufacturer: syz [ 703.625013][ T8606] usb 1-1: SerialNumber: syz [ 703.641931][ T8606] usb 1-1: config 0 descriptor?? [ 703.648181][T12923] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 703.655750][T12923] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 703.871396][T12923] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 703.880507][T12923] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 704.094618][ T8606] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 704.207138][ T5692] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 704.287250][ T5719] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 704.367070][ T5692] usb 5-1: Using ep0 maxpacket: 16 [ 704.374259][ T5692] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 704.388023][ T5692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.395516][ T5692] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 704.405935][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.419834][ T5692] usb 5-1: config 0 descriptor?? [ 704.437047][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 704.444631][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 704.459903][ T5719] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 704.470635][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.479418][ T5719] usb 2-1: Product: syz [ 704.484452][ T5719] usb 2-1: Manufacturer: syz [ 704.489805][ T5719] usb 2-1: SerialNumber: syz [ 704.499199][ T5719] usb 2-1: config 0 descriptor?? [ 704.512224][ T5719] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 704.522308][ T5719] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 704.637809][ T5692] usbhid 5-1:0.0: can't add hid device: -71 [ 704.645111][ T5692] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 704.659769][ T5692] usb 5-1: USB disconnect, device number 45 [ 705.121094][ T5719] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 705.507421][ T8601] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 705.574835][T12943] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 705.586877][T12943] syzkaller0: entered promiscuous mode [ 705.593649][T12943] syzkaller0: entered allmulticast mode [ 705.678083][ T8601] usb 6-1: Using ep0 maxpacket: 32 [ 705.685921][ T8601] usb 6-1: unable to get BOS descriptor or descriptor too short [ 705.698972][ T8601] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 705.709126][ T8601] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 705.718001][ T8601] usb 6-1: config 14 has no interface number 0 [ 705.719559][ T8606] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 705.725020][ T8601] usb 6-1: config 14 has no interface number 1 [ 705.744405][ T8601] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 705.767063][ T8606] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 705.775104][ T8601] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 705.791634][ T8601] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 705.794692][ T8606] asix 1-1:0.34: probe with driver asix failed with error -71 [ 705.805865][ T8601] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 705.830258][ T8601] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 705.844869][ T8601] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.850077][ T8606] usb 1-1: USB disconnect, device number 19 [ 705.884032][ T8601] usb 6-1: config 14 interface 57 has no altsetting 0 [ 705.893692][ T8601] usb 6-1: config 14 interface 228 has no altsetting 0 [ 705.904173][ T8601] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 705.915001][ T8601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.924188][ T8601] usb 6-1: Product: syz [ 705.926023][T12945] syz_tun (unregistering): left allmulticast mode [ 705.932643][ T8601] usb 6-1: Manufacturer: syz [ 705.942881][ T8601] usb 6-1: SerialNumber: syz [ 706.112075][T12948] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 706.124087][T12948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2197'. [ 706.367397][ T8601] legousbtower 6-1:14.57: interrupt endpoints not found [ 706.377191][ T5692] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 706.396898][T12950] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 706.426492][T12950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.450341][T12950] bond2: (slave geneve2): making interface the new active one [ 706.463575][T12950] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 706.549723][ T5692] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.563012][ T5692] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 706.573299][ T5692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.584214][ T5692] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 706.593521][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 706.601920][ T5692] usb 5-1: Product: syz [ 706.606138][ T5692] usb 5-1: Manufacturer: syz [ 706.611367][ T5692] usb 5-1: SerialNumber: syz [ 706.618550][ T5692] usb 5-1: config 0 descriptor?? [ 706.630309][ T5692] usb 5-1: selecting invalid altsetting 0 [ 706.782733][ T8601] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 706.794450][ T8601] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 706.835149][ T8606] usb 5-1: USB disconnect, device number 46 [ 707.202283][ T5719] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 707.211666][ T5719] em28xx 2-1:0.0: board has no eeprom [ 707.277303][ T5719] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 707.285224][ T5719] em28xx 2-1:0.0: dvb set to bulk mode. [ 707.291027][ T8601] em28xx 2-1:0.0: Binding DVB extension [ 707.301620][ T5719] usb 2-1: USB disconnect, device number 32 [ 707.310043][ T5719] em28xx 2-1:0.0: Disconnecting em28xx [ 707.355077][ T8601] em28xx 2-1:0.0: Registering input extension [ 707.376525][ T5719] em28xx 2-1:0.0: Closing input extension [ 707.432245][ T5719] em28xx 2-1:0.0: Freeing device [ 707.494407][T12957] syzkaller0: entered promiscuous mode [ 707.502758][T12957] syzkaller0: entered allmulticast mode [ 707.658832][ T8606] usb 6-1: USB disconnect, device number 26 [ 707.691740][ T8606] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 708.117469][ T8604] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 708.197841][ T8606] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 708.266660][T12974] loop5: detected capacity change from 0 to 7 [ 708.267114][ T8604] usb 1-1: Using ep0 maxpacket: 16 [ 708.285765][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.297484][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.310688][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.315695][ T8604] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 708.320878][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.341581][ T8604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 708.348771][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.352515][ T8604] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 708.359272][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.364435][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.370437][ T8604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.377539][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.399044][ T8606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.408704][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.418992][ T8606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.425037][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.438240][ T8604] usb 1-1: config 0 descriptor?? [ 708.449129][T12974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.460241][T12974] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.469632][T12974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.508131][ T8606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.523069][ T8606] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.541793][T12974] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.558456][ T8606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.565486][T12974] ldm_validate_partition_table(): Disk read failed. [ 708.577196][T12974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.588782][ T8606] usb 2-1: config 0 descriptor?? [ 708.592166][T12974] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.603771][T12974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.618243][T12974] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.627150][T12974] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.638671][T12974] Buffer I/O error on dev loop5, logical block 0, async page read [ 708.647825][T12974] Dev loop5: unable to read RDB block 0 [ 708.654255][T12974] loop5: unable to read partition table [ 708.662298][T12974] loop5: partition table beyond EOD, truncated [ 708.669999][T12974] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 708.714206][ T8604] usbhid 1-1:0.0: can't add hid device: -71 [ 708.727156][ T8604] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 708.764219][ T8604] usb 1-1: USB disconnect, device number 20 [ 708.797630][ T5719] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 708.957062][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 708.965614][ T5719] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 708.975799][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.989141][ T5719] usb 5-1: config 0 descriptor?? [ 709.002383][ T5719] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 709.024891][ T8606] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 709.077339][ T5734] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 709.237186][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 709.246300][ T5734] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 709.258972][ T5734] usb 6-1: config 0 has no interface number 0 [ 709.265183][ T5734] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 709.280003][ T5734] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 709.299019][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.317458][ T5734] usb 6-1: Product: syz [ 709.325279][ T5734] usb 6-1: Manufacturer: syz [ 709.326878][T12983] netlink: 'syz.0.2211': attribute type 10 has an invalid length. [ 709.331251][ T5734] usb 6-1: SerialNumber: syz [ 709.342021][T12983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2211'. [ 709.355211][ T5734] usb 6-1: config 0 descriptor?? [ 709.371855][T12980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 709.590137][T12980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 709.598085][ T5692] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 709.759051][ T5692] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 709.771909][ T5692] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 709.783221][ T5692] usb 1-1: config 0 interface 0 has no altsetting 0 [ 709.793638][ T5692] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.803306][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 709.813036][ T5692] usb 1-1: Product: syz [ 709.820614][ T5692] usb 1-1: Manufacturer: syz [ 709.826467][ T5692] usb 1-1: SerialNumber: syz [ 709.835406][ T5692] usb 1-1: config 0 descriptor?? [ 709.851166][ T5692] usb 1-1: selecting invalid altsetting 0 [ 710.055641][ T8606] usb 1-1: USB disconnect, device number 21 [ 710.068735][T12983] debugfs: 'netdev:nicvf0' already exists in 'phy5' [ 710.497157][ T5692] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 710.627248][ T5692] usb 2-1: device descriptor read/64, error -32 [ 710.849192][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 710.862412][T12990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2213'. [ 710.877484][ T5692] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 710.933292][T12992] syzkaller0: entered promiscuous mode [ 710.939826][T12992] syzkaller0: entered allmulticast mode [ 711.027115][ T5692] usb 2-1: device descriptor read/64, error -32 [ 711.267199][ T5692] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 711.297705][ T5692] usb 2-1: device descriptor read/8, error -32 [ 711.645355][ T5719] gspca_sonixj: reg_w1 err -71 [ 711.649813][ T5734] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 711.666403][ T5734] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 711.680339][ T5719] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 711.690857][ T5734] asix 6-1:0.188: probe with driver asix failed with error -71 [ 711.712591][ T5734] usb 6-1: USB disconnect, device number 27 [ 711.713785][ T5719] usb 5-1: USB disconnect, device number 47 [ 711.772155][ T8601] usb 2-1: USB disconnect, device number 33 [ 711.929202][ T8601] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 712.098963][ T8601] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 712.107632][ T8601] usb 2-1: config 0 has no interface number 0 [ 712.114437][ T8601] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 712.127064][ T8601] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 712.139530][ T8601] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 712.151369][ T8601] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 712.161482][ T8601] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 712.170838][ T8601] usb 2-1: Product: syz [ 712.175547][ T8601] usb 2-1: SerialNumber: syz [ 712.182816][ T8601] usb 2-1: config 0 descriptor?? [ 712.193322][ T8601] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 712.203221][ T8601] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input115 [ 712.249545][ T5734] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 712.390499][T13004] syzkaller0: entered promiscuous mode [ 712.396856][T13004] syzkaller0: entered allmulticast mode [ 712.437051][ T5734] usb 1-1: Using ep0 maxpacket: 16 [ 712.450738][ T5734] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 712.474754][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 712.474808][ T5734] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 712.474833][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.484212][ T5734] usb 1-1: config 0 descriptor?? [ 713.357846][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 713.867900][ T5692] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 714.028933][ T5692] usb 5-1: Using ep0 maxpacket: 16 [ 714.049571][ T5692] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 714.069691][ T5692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.077285][ T5692] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 714.088142][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.141250][ T5692] usb 5-1: config 0 descriptor?? [ 717.523276][ T5734] usbhid 1-1:0.0: can't add hid device: -32 [ 717.561461][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 718.386775][ T5734] usb 1-1: USB disconnect, device number 22 [ 718.412848][ T5692] usbhid 5-1:0.0: can't add hid device: -71 [ 718.421371][ T5692] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 718.456553][ T5692] usb 5-1: USB disconnect, device number 48 [ 718.496494][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 718.496574][ T5706] usb 2-1: USB disconnect, device number 34 [ 718.504017][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 718.641646][ T5706] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 718.701799][T13019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 718.715188][T13027] binder: transaction release 98 bad handle 1, ret = -22 [ 718.784225][T13019] kvm: pic: single mode not supported [ 718.785246][T13019] picdev_read: 55 callbacks suppressed [ 718.785264][T13019] kvm: pic: non byte read [ 718.809178][T13019] kvm: pic: level sensitive irq not supported [ 718.809248][T13019] kvm: pic: non byte read [ 718.839022][T13019] kvm: pic: level sensitive irq not supported [ 718.839087][T13019] kvm: pic: non byte read [ 718.878358][T13019] kvm: pic: level sensitive irq not supported [ 718.878428][T13019] kvm: pic: non byte read [ 718.893394][T13019] kvm: pic: level sensitive irq not supported [ 718.893454][T13019] kvm: pic: non byte read [ 718.930226][T13019] kvm: pic: level sensitive irq not supported [ 718.930304][T13019] kvm: pic: non byte read [ 718.942211][T13019] kvm: pic: level sensitive irq not supported [ 718.942305][T13019] kvm: pic: non byte read [ 719.184883][ T30] audit: type=1326 audit(1784349005.815:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f090ec code=0x0 [ 719.497561][ T5706] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 719.667271][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 719.676169][ T5706] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 719.695318][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 719.702799][ T5706] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 719.712840][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.724226][ T5706] usb 1-1: config 0 descriptor?? [ 719.847344][ T5719] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 719.943507][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 719.953562][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 719.964465][ T5706] usb 1-1: USB disconnect, device number 23 [ 720.023212][ T5719] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 720.042008][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.056857][ T5719] usb 5-1: Product: syz [ 720.061849][ T5719] usb 5-1: Manufacturer: syz [ 720.066674][ T5719] usb 5-1: SerialNumber: syz [ 720.074735][ T5719] usb 5-1: config 0 descriptor?? [ 720.085613][ T5719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 720.135321][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 720.147173][ T5692] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 720.309591][ T5692] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.322668][ T5692] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.332976][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.345087][ T5692] usb 6-1: config 0 descriptor?? [ 720.355076][ T5692] pwc: Askey VC010 type 2 USB webcam detected. [ 720.769747][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00 [ 720.777893][ T5692] pwc: recv_control_msg error -32 req 02 val 2700 [ 720.786363][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00 [ 720.795259][ T5692] pwc: recv_control_msg error -32 req 04 val 1000 [ 720.802822][ T5692] pwc: recv_control_msg error -32 req 04 val 1300 [ 720.812216][ T5692] pwc: recv_control_msg error -32 req 04 val 1400 [ 720.819947][ T5692] pwc: recv_control_msg error -32 req 02 val 2000 [ 720.827850][ T5692] pwc: recv_control_msg error -32 req 02 val 2100 [ 720.835839][ T5692] pwc: recv_control_msg error -32 req 04 val 1500 [ 720.843500][ T5692] pwc: recv_control_msg error -32 req 02 val 2500 [ 720.853125][ T5692] pwc: recv_control_msg error -32 req 02 val 2400 [ 721.065366][ T5692] pwc: recv_control_msg error -71 req 02 val 2900 [ 721.074149][ T5692] pwc: recv_control_msg error -71 req 02 val 2800 [ 721.083155][ T5692] pwc: recv_control_msg error -71 req 04 val 1100 [ 721.090475][ T5692] pwc: recv_control_msg error -71 req 04 val 1200 [ 721.102498][ T5692] pwc: Registered as video103. [ 721.110767][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input116 [ 721.140209][ T5692] usb 6-1: USB disconnect, device number 28 [ 721.732207][T13066] binder: transaction release 105 bad handle 1, ret = -22 [ 721.947154][ T5734] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 721.967602][ T5706] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 722.027161][ T8606] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 722.097729][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 722.105215][ T5734] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 722.115028][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.123495][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 722.131784][ T5734] usb 2-1: config 0 descriptor?? [ 722.141529][ T5706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 722.153566][ T5734] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 722.165964][ T5706] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 722.176046][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 722.185221][ T5706] usb 1-1: Product: syz [ 722.190836][ T5706] usb 1-1: Manufacturer: syz [ 722.195910][ T5706] usb 1-1: SerialNumber: syz [ 722.201546][ T8606] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.213794][ T8606] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.224148][ T5706] usb 1-1: config 0 descriptor?? [ 722.230487][T13065] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 722.231039][ T8606] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 722.252920][ T5706] hub 1-1:0.0: bad descriptor, ignoring hub [ 722.259276][ T5706] hub 1-1:0.0: probe with driver hub failed with error -5 [ 722.268187][ T8606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 722.279650][ T8606] usb 6-1: SerialNumber: syz [ 722.410047][ T140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.533258][ T8606] usb 6-1: 0:2 : does not exist [ 722.586484][ T140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.623654][ T8606] usb 6-1: USB disconnect, device number 29 [ 722.665199][T13025] udevd[13025]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.761306][ T140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.876272][ T140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.912804][ T5719] gspca_stk1135: reg_w 0x351 err -71 [ 722.925712][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 722.936542][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.942510][ T5719] gspca_stk1135: Sensor write failed [ 722.952878][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.955304][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 722.989081][ T5719] gspca_stk1135: Sensor write failed [ 722.997841][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.018825][ T5719] gspca_stk1135: Sensor read failed [ 723.027908][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.047692][ T5719] gspca_stk1135: Sensor read failed [ 723.053095][ T5719] gspca_stk1135: Detected sensor type unknown (0x0) [ 723.076876][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.093487][ T5719] gspca_stk1135: Sensor read failed [ 723.108075][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.118123][ T5719] gspca_stk1135: Sensor read failed [ 723.131349][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.147217][ T5719] gspca_stk1135: Sensor write failed [ 723.164954][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 723.191373][ T5719] gspca_stk1135: Sensor write failed [ 723.208987][ T5719] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 723.236704][ T5719] usb 5-1: USB disconnect, device number 49 [ 723.832408][ T140] team0: Port device geneve1 removed [ 723.966023][ T140] bond0 (unregistering): Released all slaves [ 724.013486][ T140] bond1 (unregistering): Released all slaves [ 724.023765][ T5706] usb 1-1: USB disconnect, device number 24 [ 724.199016][ T5706] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 724.220685][ T140] tipc: Disabling bearer [ 724.278645][ T140] tipc: Left network mode [ 724.313034][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 724.410748][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 724.451325][ T5706] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 724.487781][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 724.500095][ T5706] usb 1-1: Product: syz [ 724.511616][ T5706] usb 1-1: Manufacturer: syz [ 724.516676][ T5706] usb 1-1: SerialNumber: syz [ 724.567058][ T5706] usb 1-1: config 0 descriptor?? [ 724.577885][T13070] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 724.594761][ T5706] hub 1-1:0.0: bad descriptor, ignoring hub [ 724.602176][ T5706] hub 1-1:0.0: probe with driver hub failed with error -5 [ 724.841953][ T5734] gspca_sonixj: reg_w1 err -71 [ 724.853039][ T5734] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 724.884801][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 724.922655][ T5734] usb 2-1: USB disconnect, device number 35 [ 724.986727][ T8606] usb 1-1: USB disconnect, device number 25 [ 725.711023][T13126] syzkaller0: entered promiscuous mode [ 725.724368][T13126] syzkaller0: entered allmulticast mode [ 725.752406][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 725.794118][T13126] tipc: Enabled bearer , priority 0 [ 725.885203][T13125] tipc: Resetting bearer [ 725.961484][T13125] tipc: Disabling bearer [ 726.068933][ T140] hsr_slave_0: left promiscuous mode [ 726.099814][ T140] hsr_slave_1: left promiscuous mode [ 726.153285][ T140] veth1_macvtap: left promiscuous mode [ 726.168918][ T140] veth0_macvtap: left promiscuous mode [ 727.329429][T13142] tipc: Enabling of bearer rejected, failed to enable media [ 727.808075][ T140] IPVS: stop unused estimator thread 0... [ 728.026793][T13166] syzkaller0: entered promiscuous mode [ 728.049257][T13166] syzkaller0: entered allmulticast mode [ 728.117726][ T5699] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 728.291165][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 728.311594][ T5699] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 728.346292][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.418058][ T5699] usb 6-1: config 0 descriptor?? [ 728.467978][ T5699] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 728.804310][T13178] syzkaller0: entered promiscuous mode [ 728.819411][T13178] syzkaller0: entered allmulticast mode [ 729.013870][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 729.452359][ T8606] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 729.627700][ T8606] usb 5-1: Using ep0 maxpacket: 16 [ 729.664412][ T8606] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 729.687041][ T8606] usb 5-1: config 0 interface 0 has no altsetting 0 [ 729.703748][ T8606] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 729.715244][ T8606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.734946][ T8606] usb 5-1: config 0 descriptor?? [ 729.788115][ T5720] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 729.860064][T13208] syzkaller0: entered promiscuous mode [ 729.865868][T13208] syzkaller0: entered allmulticast mode [ 729.885734][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 729.957135][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 729.966472][ T5720] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 729.977665][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.991695][ T5720] usb 1-1: config 0 descriptor?? [ 730.096472][ T8606] usbhid 5-1:0.0: can't add hid device: -71 [ 730.104699][ T8606] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 730.128067][ T8606] usb 5-1: USB disconnect, device number 50 [ 730.206473][ T5720] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 730.221748][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 730.247693][ T5720] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 730.267060][ T5720] usb 1-1: media controller created [ 730.317694][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 730.426431][ T5720] az6027: usb out operation failed. (-71) [ 730.436637][ T5720] az6027: usb out operation failed. (-71) [ 730.443411][ T5720] stb0899_attach: Driver disabled by Kconfig [ 730.451059][ T5720] az6027: no front-end attached [ 730.451059][ T5720] [ 730.459552][ T5720] az6027: usb out operation failed. (-71) [ 730.466119][ T5720] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 730.475256][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input117 [ 730.491022][ T5720] dvb-usb: schedule remote query interval to 400 msecs. [ 730.499847][ T5720] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 730.512848][ T5720] usb 1-1: USB disconnect, device number 26 [ 730.568379][ T5720] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 730.675144][T13219] syzkaller0: entered promiscuous mode [ 730.681009][T13219] syzkaller0: entered allmulticast mode [ 731.047067][ T5734] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 731.115960][ T5699] gspca_sonixj: reg_w1 err -71 [ 731.134416][ T5699] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 731.153909][ T5699] usb 6-1: USB disconnect, device number 30 [ 731.192085][T13225] syzkaller0: entered promiscuous mode [ 731.198761][T13225] syzkaller0: entered allmulticast mode [ 731.248689][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 731.290464][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.302493][ T5734] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 731.312578][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.328079][ T5734] usb 5-1: config 0 descriptor?? [ 731.729701][T13237] syzkaller0: entered promiscuous mode [ 731.735313][T13237] syzkaller0: entered allmulticast mode [ 731.876246][T13239] syzkaller0: entered promiscuous mode [ 731.883390][T13239] syzkaller0: entered allmulticast mode [ 731.887328][ T5699] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 731.900046][ T5720] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 731.938326][T13239] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2283'. [ 731.968048][ T5734] usb 5-1: language id specifier not provided by device, defaulting to English [ 732.057193][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 732.062521][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 732.072033][ T5699] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 732.082339][ T5699] usb 2-1: config 0 has no interface number 0 [ 732.089813][ T5699] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 732.102513][ T5720] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 732.112596][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.126506][ T5720] usb 1-1: Product: syz [ 732.131558][ T5720] usb 1-1: Manufacturer: syz [ 732.131580][ T5720] usb 1-1: SerialNumber: syz [ 732.133014][ T5699] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 732.133041][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.133061][ T5699] usb 2-1: Product: syz [ 732.133074][ T5699] usb 2-1: Manufacturer: syz [ 732.133087][ T5699] usb 2-1: SerialNumber: syz [ 732.135839][ T5699] usb 2-1: config 0 descriptor?? [ 732.177472][ T5734] uclogic 0003:256C:006D.0050: failed retrieving Huion firmware version: -71 [ 732.184371][T13233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 732.198248][ T5734] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 732.222229][ T5734] uclogic 0003:256C:006D.0050: probe with driver uclogic failed with error -71 [ 732.244683][ T5734] usb 5-1: USB disconnect, device number 51 [ 732.453319][T13233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 732.760920][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 732.831685][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 732.833240][T13249] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 732.842690][ T5720] usb 1-1: clock source 0 is not valid, cannot use [ 732.865068][ T5720] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 732.893853][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 733.095857][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 733.129974][ T5720] usb 1-1: clock source 0 is not valid, cannot use [ 733.156444][ T5720] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 733.167669][ T5720] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 733.230861][ T5720] usb 1-1: USB disconnect, device number 27 [ 733.302771][T13257] udevd[13257]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.417435][ T8606] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 733.425706][ T5734] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 733.577186][ T8606] usb 6-1: Using ep0 maxpacket: 32 [ 733.587579][ T8606] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 733.596736][ T5734] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 733.606647][ T8606] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 733.618169][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.626499][ T8606] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 733.638706][ T5734] usb 5-1: Product: syz [ 733.643819][ T5734] usb 5-1: Manufacturer: syz [ 733.649564][ T8606] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 733.663470][ T5734] usb 5-1: SerialNumber: syz [ 733.670441][ T8606] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.678375][ T5734] usb 5-1: config 0 descriptor?? [ 733.691629][ T5734] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 733.702858][ T8606] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 733.719910][ T8606] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 733.728793][ T8606] usb 6-1: Product: syz [ 733.746010][ T8606] usb 6-1: Manufacturer: syz [ 733.751032][ T8606] usb 6-1: SerialNumber: syz [ 733.768941][ T8606] usb 6-1: config 0 descriptor?? [ 733.781064][ T8606] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 733.795415][ T8606] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 734.085979][T13265] syzkaller0: entered promiscuous mode [ 734.094543][T13265] syzkaller0: entered allmulticast mode [ 734.139068][ T5720] usb 6-1: USB disconnect, device number 31 [ 734.155837][ T5720] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 734.517138][ T5719] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 734.667230][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 734.690225][ T5719] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 734.705196][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.722569][ T5719] usb 1-1: config 0 descriptor?? [ 734.736905][ T5719] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 735.325519][ T5699] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 735.344468][ T5699] asix 2-1:0.188: probe with driver asix failed with error -71 [ 735.363295][ T5699] usb 2-1: USB disconnect, device number 36 [ 735.847079][ T5699] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 736.007040][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 736.026381][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.049798][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.089777][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.167752][ T5699] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 736.201100][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.233461][ T5699] usb 6-1: config 0 descriptor?? [ 736.472774][T13287] syzkaller0: entered promiscuous mode [ 736.484319][T13287] syzkaller0: entered allmulticast mode [ 736.507582][ T5699] usbhid 6-1:0.0: can't add hid device: -71 [ 736.528180][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 736.548988][ T5699] usb 6-1: USB disconnect, device number 32 [ 736.768370][ T5734] gspca_stk1135: reg_w 0x352 err -71 [ 736.774978][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.792319][ T5734] gspca_stk1135: Sensor write failed [ 736.803398][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.811268][ T5734] gspca_stk1135: Sensor write failed [ 736.819411][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.827131][ T5734] gspca_stk1135: Sensor read failed [ 736.841388][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.851130][ T5734] gspca_stk1135: Sensor read failed [ 736.856602][ T5734] gspca_stk1135: Detected sensor type unknown (0x0) [ 736.864057][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.883289][ T5734] gspca_stk1135: Sensor read failed [ 736.890462][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.907478][ T5734] gspca_stk1135: Sensor read failed [ 736.913520][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.925659][ T5734] gspca_stk1135: Sensor write failed [ 736.933766][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 736.942035][ T5734] gspca_stk1135: Sensor write failed [ 736.955751][ T5734] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 736.968665][ T5734] usb 5-1: USB disconnect, device number 52 [ 737.390792][ T5719] gspca_sonixj: reg_w1 err -71 [ 737.397846][ T5719] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 737.418521][ T5719] usb 1-1: USB disconnect, device number 28 [ 737.807113][ T5734] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 737.969567][ T5734] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 738.000027][ T5734] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 738.018686][ T5734] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.034982][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.329635][T13308] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 738.343282][T13306] syzkaller0: entered promiscuous mode [ 738.349785][T13306] syzkaller0: entered allmulticast mode [ 738.370243][T13310] netlink: 'syz.5.2305': attribute type 10 has an invalid length. [ 738.390952][T13310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2305'. [ 738.423119][T13308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.488009][T13314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2303'. [ 738.522769][T13313] bond2: (slave veth5): Enslaving as an active interface with a down link [ 738.549949][T13310] team0: Port device geneve1 added [ 738.685173][T13308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.697234][ T8606] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 738.698109][T13308] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.757832][T13308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.818378][T13308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.830905][T13308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.851320][T13308] veth1_macvtap: left promiscuous mode [ 738.859514][ T8606] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.860412][T13308] veth0_macvtap: left promiscuous mode [ 738.880523][T13308] veth0_macvtap: entered promiscuous mode [ 738.887307][ T8606] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 738.888363][T13308] veth1_macvtap: entered promiscuous mode [ 738.911061][ T8606] usb 6-1: config 0 interface 0 has no altsetting 0 [ 738.913605][T13308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.928939][ T8606] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.931201][T13308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.939507][ T8606] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.960643][T13308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.974458][ T8606] usb 6-1: Product: syz [ 738.983211][T13308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.983402][ T8606] usb 6-1: Manufacturer: syz [ 738.996221][T13308] geneve2: left promiscuous mode [ 739.002042][T13308] geneve2: left allmulticast mode [ 739.003245][ T8606] usb 6-1: SerialNumber: syz [ 739.018575][T13308] bond1: left promiscuous mode [ 739.027574][ T8606] usb 6-1: config 0 descriptor?? [ 739.040297][ T8606] usb 6-1: selecting invalid altsetting 0 [ 739.057524][ T5719] usb 2-1: USB disconnect, device number 37 [ 739.074928][T13313] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 739.126501][T13313] bond2: (slave batadv1): making interface the new active one [ 739.140448][T13313] batadv1: entered promiscuous mode [ 739.146269][T13313] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 739.326324][ T36] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 739.352209][ T5734] usb 6-1: USB disconnect, device number 33 [ 739.687445][ T8606] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 739.839045][ T8606] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 739.851177][ T8606] usb 1-1: config 0 has no interface number 0 [ 739.862342][ T8606] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 739.876600][ T8606] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 739.901889][ T8606] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 739.917546][ T5699] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 739.929293][ T8606] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 739.948533][ T8606] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 739.960470][ T8606] usb 1-1: Product: syz [ 739.964693][ T8606] usb 1-1: SerialNumber: syz [ 739.979546][ T8606] usb 1-1: config 0 descriptor?? [ 740.007680][ T8606] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 740.025336][ T8606] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input118 [ 740.108018][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 740.126071][ T5699] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 740.143000][ T5699] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 740.157183][ T5699] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.170133][ T5699] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 740.189608][ T5699] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 740.199944][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.210190][ T5699] usb 2-1: Product: syz [ 740.221309][ T5699] usb 2-1: Manufacturer: syz [ 740.226584][ T5699] usb 2-1: SerialNumber: syz [ 740.227096][ T8604] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 740.268900][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 740.332619][ T5699] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input119 [ 740.412566][ T8604] usb 6-1: Using ep0 maxpacket: 16 [ 740.441100][ T8604] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 740.462824][ T8604] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.482337][ T8604] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 740.504620][ T8604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.539076][ T8604] usb 6-1: config 0 descriptor?? [ 740.551038][ T5699] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 740.588791][ T5699] (id 0x00) [ 740.640985][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.641448][ T5720] usb 1-1: USB disconnect, device number 29 [ 740.648155][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 740.693857][ T5720] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 740.777334][ T5699] rc_core: IR keymap rc-imon-pad not found [ 740.795274][ T5699] Registered IR keymap rc-empty [ 740.802906][ T8604] usbhid 6-1:0.0: can't add hid device: -71 [ 740.813189][ T5699] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 740.826306][ T8604] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 740.840812][ T5699] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 740.869679][ T8604] usb 6-1: USB disconnect, device number 34 [ 740.893632][ T5699] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 740.944517][ T5699] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input120 [ 740.999637][ T5699] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:38> initialized [ 741.557254][ T5699] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 741.727075][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 741.735856][ T5699] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 741.750970][ T5699] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 741.761300][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.770792][ T5699] usb 5-1: Product: syz [ 741.775414][ T5699] usb 5-1: Manufacturer: syz [ 741.782075][ T5699] usb 5-1: SerialNumber: syz [ 741.791805][ T5699] usb 5-1: config 0 descriptor?? [ 741.807880][ T5699] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 741.935383][T13371] imon:send_packet: packet tx failed (-71) [ 741.935878][ T5720] usb 2-1: USB disconnect, device number 38 [ 741.977192][T13371] imon:vfd_write: send packet #2 failed [ 742.667084][ T5720] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 742.720340][T13394] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 742.729089][T13394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 742.827095][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 742.836793][ T5720] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 742.846264][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.856081][ T5720] usb 6-1: Product: syz [ 742.861875][ T5720] usb 6-1: Manufacturer: syz [ 742.867235][ T5720] usb 6-1: SerialNumber: syz [ 742.977242][ T8606] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 743.129149][ T8606] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.142711][ T8606] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 743.153025][ T8606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 743.162558][ T8606] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 743.172382][ T8606] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 743.180882][ T8606] usb 2-1: Product: syz [ 743.185103][ T8606] usb 2-1: Manufacturer: syz [ 743.190033][ T8606] usb 2-1: SerialNumber: syz [ 743.199313][ T8606] usb 2-1: config 0 descriptor?? [ 743.276352][T13396] tipc: Enabled bearer , priority 0 [ 743.286882][T13396] syzkaller0: entered promiscuous mode [ 743.293380][T13396] syzkaller0: entered allmulticast mode [ 743.328032][T13396] tipc: Resetting bearer [ 743.339792][T13396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.350522][T13396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.361821][T13395] tipc: Resetting bearer [ 743.392448][T13395] tipc: Disabling bearer [ 743.418615][T13394] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 743.490155][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 743.509843][ T5720] usb 6-1: clock source 0 is not valid, cannot use [ 743.541028][ T5720] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 743.757560][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 743.778039][ T5720] usb 6-1: clock source 0 is not valid, cannot use [ 743.786095][ T5720] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 743.793541][ T5720] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 743.801336][ T8604] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 743.842938][ T5699] gspca_zc3xx: i2c_w status error 9d [ 743.880740][ T8606] usb 2-1: selecting invalid altsetting 0 [ 743.891217][ T5720] usb 6-1: USB disconnect, device number 35 [ 743.977424][ T8604] usb 1-1: Using ep0 maxpacket: 32 [ 743.984663][ T8606] usb 2-1: USB disconnect, device number 39 [ 744.026299][ T8604] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 744.042228][ T8604] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 744.055974][ T8604] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 744.110408][ T8604] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 744.130068][ T8604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 744.156560][ T8604] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 744.169141][T13259] udevd[13259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.193138][ T8604] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 744.204020][ T8604] usb 1-1: Product: syz [ 744.213971][ T8604] usb 1-1: Manufacturer: syz [ 744.221137][ T8604] usb 1-1: SerialNumber: syz [ 744.235261][ T8604] usb 1-1: config 0 descriptor?? [ 744.254960][ T8604] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 744.272639][ T8604] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 744.463664][ T5699] gspca_zc3xx: i2c_r status error 9d [ 744.479145][T13418] syzkaller0: entered promiscuous mode [ 744.485125][T13418] syzkaller0: entered allmulticast mode [ 744.497171][ T8606] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 744.566100][ T8604] usb 1-1: USB disconnect, device number 30 [ 744.583193][ T8604] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 744.649694][ T8606] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.676356][ T8606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 744.686595][ T8606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 744.697115][ T8606] usb 2-1: Product: syz [ 744.701739][ T8606] usb 2-1: Manufacturer: syz [ 744.706786][ T8606] usb 2-1: SerialNumber: syz [ 744.872095][ T5699] gspca_zc3xx: reg_r err -71 [ 744.884506][ T5699] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 744.907122][ T5699] usb 5-1: USB disconnect, device number 53 [ 744.932706][ T8606] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 744.954675][ T8606] usb 2-1: USB disconnect, device number 40 [ 744.973051][ T8606] usblp0: removed [ 745.077482][ T8604] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 745.237158][ T8604] usb 6-1: Using ep0 maxpacket: 16 [ 745.245571][ T8604] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 745.259115][ T8604] usb 6-1: config 0 interface 0 has no altsetting 0 [ 745.266214][ T8604] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 745.276564][ T8604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.289991][ T8604] usb 6-1: config 0 descriptor?? [ 745.407646][ T5699] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 745.528723][ T8604] usbhid 6-1:0.0: can't add hid device: -71 [ 745.544534][ T8604] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 745.566302][ T8604] usb 6-1: USB disconnect, device number 36 [ 745.577276][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 745.590539][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.605267][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.616607][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.633646][ T5699] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 745.643681][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.660616][ T5699] usb 1-1: config 0 descriptor?? [ 745.737151][ T5720] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 745.797094][ T8609] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 745.898031][ T5699] usbhid 1-1:0.0: can't add hid device: -71 [ 745.907822][ T5699] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 745.918923][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 745.928339][ T5699] usb 1-1: USB disconnect, device number 31 [ 745.934681][ T5720] usb 5-1: config 0 has no interfaces? [ 745.953612][ T5720] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 745.954111][ T8609] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.968865][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.990820][ T8609] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.002138][ T5720] usb 5-1: Product: syz [ 746.002162][ T5720] usb 5-1: Manufacturer: syz [ 746.002177][ T5720] usb 5-1: SerialNumber: syz [ 746.009810][ T5720] usb 5-1: config 0 descriptor?? [ 746.022671][ T8609] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.036391][ T8609] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 746.060350][ T8609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.095351][T13430] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 746.134766][T13433] syzkaller0: entered promiscuous mode [ 746.141632][T13433] syzkaller0: entered allmulticast mode [ 746.321030][T13435] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2332'. [ 746.336705][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2332'. [ 746.350967][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2332'. [ 746.657452][ T5699] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 746.829896][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 746.840226][ T5699] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 746.850755][ T5699] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 746.862130][ T5699] usb 6-1: config 63 has no interface number 0 [ 746.868939][ T5699] usb 6-1: config 63 interface 66 has no altsetting 0 [ 746.879206][ T5699] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 746.889784][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.900955][ T5699] usb 6-1: Product: syz [ 746.906741][ T5699] usb 6-1: Manufacturer: syz [ 746.912699][ T5699] usb 6-1: SerialNumber: syz [ 746.937258][ T8604] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 747.097124][ T8604] usb 1-1: Using ep0 maxpacket: 32 [ 747.104998][ T8604] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 747.119248][ T8604] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 747.132271][ T8604] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 747.135474][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.142977][ T8604] usb 1-1: Product: syz [ 747.157107][ T8604] usb 1-1: Manufacturer: syz [ 747.162040][ T8604] usb 1-1: SerialNumber: syz [ 747.170495][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.173236][ T8604] usb 1-1: config 0 descriptor?? [ 747.189450][T13440] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 747.203736][ T5699] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 747.216193][ T5699] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 747.229713][ T5699] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 747.247911][ T5699] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 747.264684][ T5699] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 747.278011][ T5699] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 747.289186][ T5699] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 747.299516][ T5699] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 747.316183][ T5699] usb 6-1: USB disconnect, device number 37 [ 747.630968][ T5720] usb 1-1: USB disconnect, device number 32 [ 747.727097][ T5699] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 747.890128][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 747.900357][ T5699] usb 6-1: not running at top speed; connect to a high speed hub [ 747.910146][ T5699] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 747.922401][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.930365][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.937177][ T5699] usb 6-1: config 63 has an invalid descriptor of length 42, skipping remainder of the config [ 747.949355][ T5699] usb 6-1: config 63 has no interface number 0 [ 747.956037][ T5699] usb 6-1: config 63 interface 66 has no altsetting 0 [ 747.965578][ T5699] usb 6-1: string descriptor 0 read error: -22 [ 747.972115][ T5699] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 747.981949][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.999839][ T5699] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 748.475919][ T8604] usb 5-1: USB disconnect, device number 54 [ 748.877919][ T8604] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 749.048534][ T8604] usb 5-1: Using ep0 maxpacket: 8 [ 749.051077][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.074987][ T8604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.099440][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.107290][ T8604] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.136492][ T8604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.167284][ T8604] usb 5-1: config 0 descriptor?? [ 749.392989][ T8604] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 749.895072][ T8609] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 749.904526][ T8609] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 749.914797][ T5699] usb 5-1: USB disconnect, device number 55 [ 749.937580][ T8609] usb 2-1: USB disconnect, device number 41 [ 750.350042][ T36] batadv1: left promiscuous mode [ 750.367268][ T5699] usb 6-1: USB disconnect, device number 38 [ 750.573998][T13458] syzkaller0: entered promiscuous mode [ 750.597672][T13458] syzkaller0: entered allmulticast mode [ 751.228286][ T5699] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 751.407840][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 751.415392][ T5699] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 751.425697][ T5699] usb 6-1: config 0 has no interface number 1 [ 751.438776][ T5699] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 751.455275][ T5699] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 751.469419][ T5699] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 751.478962][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.487407][ T5699] usb 6-1: Product: syz [ 751.492057][ T5699] usb 6-1: Manufacturer: syz [ 751.496663][ T5699] usb 6-1: SerialNumber: syz [ 751.503634][ T5699] usb 6-1: config 0 descriptor?? [ 751.516259][ T5699] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 751.742587][T13474] batadv_slave_1: entered promiscuous mode [ 751.800852][ T5699] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 751.817614][ T2368] pvrusb2: Invalid read control endpoint [ 751.834557][ T5699] usb 6-1: USB disconnect, device number 39 [ 751.869160][ T2368] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 751.879855][ T2368] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 752.557411][ T8604] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 752.567153][ T5734] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 752.607121][ T8609] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 752.697141][ T8604] usb 2-1: device descriptor read/64, error -71 [ 752.717444][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 752.727058][ T5734] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 752.736905][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.745287][ T5734] usb 5-1: Product: syz [ 752.750430][ T5734] usb 5-1: Manufacturer: syz [ 752.755676][ T5734] usb 5-1: SerialNumber: syz [ 752.777615][ T8609] usb 1-1: Using ep0 maxpacket: 8 [ 752.785277][ T8609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.797609][ T8609] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 752.807756][ T8609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.819125][ T8609] usb 1-1: config 0 descriptor?? [ 752.947110][ T8604] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 753.036577][ T8609] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 753.087749][ T8604] usb 2-1: device descriptor read/64, error -71 [ 753.207347][ T8604] usb usb2-port1: attempt power cycle [ 753.370666][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 753.380326][ T5734] usb 5-1: clock source 0 is not valid, cannot use [ 753.390273][ T5734] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 753.450561][T13504] netlink: 'syz.5.2356': attribute type 10 has an invalid length. [ 753.459536][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2356'. [ 753.565160][ T8609] usb 1-1: USB disconnect, device number 33 [ 753.573360][ T8604] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 753.609379][ T8604] usb 2-1: device descriptor read/8, error -71 [ 753.622940][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 753.634069][ T5734] usb 5-1: clock source 0 is not valid, cannot use [ 753.643198][ T5734] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 753.653042][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 753.720988][ T5734] usb 5-1: USB disconnect, device number 56 [ 753.870597][ T8604] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 753.907905][ T8604] usb 2-1: device descriptor read/8, error -71 [ 754.028906][ T8604] usb usb2-port1: unable to enumerate USB device Stopping sshd: stopped /usr/sbin/sshd (pid 5378) OK [ 754.270067][T13511] syzkaller0: entered promiscuous mode [ 754.292397][T13511] syzkaller0: entered allmulticast mode [ 754.342671][T13511] tipc: Enabled bearer , priority 0 Stopping crond: [ 754.415934][T13511] tipc: Resetting bearer [ 754.449867][T13510] tipc: Resetting bearer stopped /usr/sbin/crond (pid 5362) OK [ 754.518809][T13510] tipc: Disabling bearer [ 754.627085][ T5692] usb 5-1: new high-speed USB device number 57 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5287) [ 754.807902][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 754.820489][ T5692] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 754.849253][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.869142][ T5692] usb 5-1: config 0 descriptor?? Stopping network: [ 755.087046][ T5734] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 755.102645][ T5692] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 755.133805][ T5692] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.149849][ T5692] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 755.158110][ T5692] usb 5-1: media controller created [ 755.184806][ T5692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.257109][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 755.271543][ T5734] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 755.299366][ T5734] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 755.318646][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.341259][ T5734] usb 1-1: Product: syz [ 755.354715][ T5734] usb 1-1: Manufacturer: syz [ 755.361637][ T5734] usb 1-1: SerialNumber: syz [ 755.384185][ T5734] usb 1-1: config 0 descriptor?? [ 755.404468][ T5734] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae OK Stopping iptables: OK [ 755.747079][ T5720] usb 2-1: new high-speed USB device number 46 using dummy_hcd Stopping system message bus: [ 755.920325][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 755.926584][ T5692] az6027: usb out operation failed. (-71) [ 755.946280][ T5692] stb0899_attach: Driver disabled by Kconfig [ 755.955149][ T5692] az6027: no front-end attached [ 755.955149][ T5692] [ 755.966132][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 755.983505][ T5692] az6027: usb out operation failed. (-71) [ 755.993185][ T5720] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 756.002456][ T5692] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 756.010211][ T5720] usb 2-1: config 9 has no interface number 0 [ 756.019011][ T5720] usb 2-1: config 9 interface 57 has no altsetting 0 [ 756.026809][ T5692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input123 [ 756.051972][ T5720] usb 2-1: string descriptor 0 read error: -22 [ 756.073957][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 756.084741][ T5692] dvb-usb: schedule remote query interval to 400 msecs. [ 756.105816][ T5692] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 756.115325][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.142817][ T5692] usb 5-1: USB disconnect, device number 57 [ 756.249550][ T5692] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. done [ 756.837449][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.857956][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.895940][ T5720] video4linux radio48: keene_cmd_set failed (-71) [ 756.909963][ T5720] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 756.932221][ T5720] usb 2-1: USB disconnect, device number 46 [ 757.436465][ T5734] gspca_zc3xx: i2c_w status error 9d Stopping klogd: OK Stopping acpid: [ 757.827234][ T8604] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 758.010779][ T8604] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 758.025931][ T8604] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 758.036745][ T8604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.046333][ T5734] gspca_zc3xx: i2c_r status error 9d [ 758.052466][ T8604] usb 2-1: Product: syz [ 758.058856][ T8604] usb 2-1: Manufacturer: syz [ 758.063908][ T8604] usb 2-1: SerialNumber: syz [ 758.078744][ T8604] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 758.453163][ T5734] gspca_zc3xx: reg_r err -71 [ 758.460089][ T5734] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 758.482286][ T5734] usb 1-1: USB disconnect, device number 34 [ 758.482832][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.500237][ T8604] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 758.515253][ T8604] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 758.524730][ T8604] usb 2-1: media controller created [ 758.525037][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.561916][ T8604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.645276][ T8604] usb 2-1: USB disconnect, device number 47 OK Stopping syslogd: stopped /sbin/syslogd (pid 4975) OK [ 759.228530][T13594] tc action pedit offset must be on 32 bit boundaries [ 759.404597][T13597] syzkaller1: entered promiscuous mode [ 759.413353][T13597] syzkaller1: entered allmulticast mode [ 759.553811][T13604] syzkaller0: entered promiscuous mode [ 759.564966][T13604] syzkaller0: entered allmulticast mode umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 759.960723][T13613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 760.227677][ T5692] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 760.387100][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 760.406014][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 760.452709][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 760.479651][ T5692] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.498338][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.525084][ T5692] usb 2-1: Product: syz [ 760.529621][ T5692] usb 2-1: Manufacturer: syz [ 760.541363][ T5692] usb 2-1: SerialNumber: syz [ 760.574780][ T5692] usb 2-1: config 0 descriptor?? [ 760.593346][ T5692] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 760.617140][ T5692] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 761.137124][ T8604] usb 1-1: new high-speed USB device number 35 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 761.203011][ T4993] udevd[4993]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 761.347438][ T8604] usb 1-1: device descriptor read/all, error -71 [ 761.371518][ T5692] em28xx 2-1:0.0: unknown em28xx chip ID (0) Connection to 10.128.0.23 closed by remote host. [ 761.398507][ T5692] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 761.407004][ T5692] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 761.415471][ T5692] em28xx 2-1:0.0: No AC97 audio processor [ 761.431885][ T5692] usb 2-1: USB disconnect, device number 48 [ 761.443639][ T5692] em28xx 2-1:0.0: Disconnecting em28xx [ 761.460555][ T5692] em28xx 2-1:0.0: Freeing device [ 761.658016][ T5692] usb 4-1: USB disconnect, device number 9 [ 762.087571][ T7679] syz_tun (unregistering): left allmulticast mode [ 762.370486][T11852] syz_tun (unregistering): left allmulticast mode Sent SIGKILL to all processes Requesting system poweroff [ 762.670579][T11495] syz_tun (unregistering): left allmulticast mode [ 762.736657][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.751010][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.865365][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.879286][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.971166][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.982860][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.119191][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.130248][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.433857][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 763.447381][ T13] team0: Port device geneve1 removed [ 763.460264][ T13] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 763.494451][ T13] bond0 (unregistering): Released all slaves [ 763.506104][ T13] bond1 (unregistering): (slave veth5): Releasing active interface [ 763.514764][ T13] batadv1: entered promiscuous mode [ 763.537375][T13624] smc: removing smcd device lo [ 763.560710][ T13] bond1 (unregistering): (slave batadv1): Releasing active interface [ 763.561309][ T2368] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 763.585132][ T2368] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 763.596132][ T2368] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 763.603065][ T13] bond1 (unregistering): Released all slaves [ 763.607364][ T2368] pvrusb2: Failure uploading firmware1 [ 763.618929][ T2368] pvrusb2: Device initialization was not successful. [ 763.625672][ T2368] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 763.628249][ T13] bond2 (unregistering): Released all slaves [ 763.637661][ T5699] pvrusb2: Device being rendered inoperable [ 763.648793][ T2368] pvrusb2: Failed to submit write-control URB status=-19 [ 763.656884][ T2368] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 763.670067][ T2368] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 763.681341][ T2368] ------------[ cut here ]------------ [ 763.688030][ T2368] ret [ 763.688060][ T2368] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#1: pvrusb2-context/2368 [ 763.705069][ T2368] Modules linked in: [ 763.709766][ T2368] CPU: 1 UID: 0 PID: 2368 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 763.721894][ T2368] Tainted: [L]=SOFTLOCKUP [ 763.726597][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.738014][ T2368] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 763.744970][ T2368] Code: 9a fb e9 48 fc ff ff e8 f9 12 9a fb c6 05 c9 a8 14 0a 01 48 c7 c7 40 2f 76 8c e8 96 60 fb fa e9 70 fc ff ff e8 dc 12 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 30 76 8c 4c 89 e2 e8 36 d9 ff fa e9 [ 763.765606][ T2368] RSP: 0018:ffffc900067df680 EFLAGS: 00010293 [ 763.771776][ T2368] RAX: ffffffff862c5ea4 RBX: dffffc0000000000 RCX: ffff88802c170000 [ 763.780503][ T2368] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 763.789151][ T2368] RBP: 0000000000000001 R08: ffffffff905783f7 R09: 1ffffffff20af07e [ 763.797687][ T2368] R10: dffffc0000000000 R11: fffffbfff20af07f R12: ffffffff8cd10960 [ 763.805853][ T2368] R13: 0000000000001770 R14: ffff8880289340b0 R15: 00000000fffffff5 [ 763.815250][ T2368] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 763.824481][ T2368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.831345][ T2368] CR2: 0000000056e941d4 CR3: 00000000355dc000 CR4: 00000000003526f0 [ 763.840110][ T2368] Call Trace: [ 763.843496][ T2368] [ 763.846555][ T2368] ? kfree+0x1c5/0x640 [ 763.850932][ T2368] _request_firmware+0x1049/0x1780 [ 763.856385][ T2368] ? __pfx__request_firmware+0x10/0x10 [ 763.862294][ T2368] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 763.868753][ T2368] request_firmware+0x36/0x50 [ 763.873458][ T2368] pvr2_locate_firmware+0xb3/0x500 [ 763.879075][ T2368] pvr2_upload_firmware1+0x1bd/0x940 [ 763.884808][ T2368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 763.891004][ T2368] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 763.898135][ T2368] pvr2_hdw_initialize+0x425/0x3c60 [ 763.903373][ T2368] ? __mutex_trylock_common+0x15f/0x270 [ 763.909401][ T2368] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 763.915308][ T2368] ? rcu_is_watching+0x15/0xb0 [ 763.920276][ T2368] ? trace_contention_end+0x3d/0x140 [ 763.925600][ T2368] ? pvr2_context_thread_func+0x279/0xc10 [ 763.931454][ T2368] ? __mutex_unlock_slowpath+0x731/0x900 [ 763.937265][ T2368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 763.943526][ T2368] ? schedule+0x90/0x2b0 [ 763.948164][ T2368] ? schedule+0x16e/0x2b0 [ 763.952580][ T2368] pvr2_context_thread_func+0x504/0xc10 [ 763.958470][ T2368] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 763.965495][ T2368] ? __pfx_autoremove_wake_function+0x10/0x10 [ 763.971743][ T2368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 763.978006][ T2368] ? __kthread_parkme+0x71/0x1f0 [ 763.983042][ T2368] ? __kthread_parkme+0x196/0x1f0 [ 763.988236][ T2368] kthread+0x388/0x470 [ 763.993036][ T2368] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 763.999548][ T2368] ? __pfx_kthread+0x10/0x10 [ 764.004165][ T2368] ret_from_fork+0x514/0xb70 [ 764.009375][ T2368] ? __pfx_ret_from_fork+0x10/0x10 [ 764.014647][ T2368] ? __switch_to+0xc89/0x1420 [ 764.019448][ T2368] ? __pfx_kthread+0x10/0x10 [ 764.024500][ T2368] ret_from_fork_asm+0x1a/0x30 [ 764.029659][ T2368] [ 764.032696][ T2368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 764.040064][ T2368] CPU: 1 UID: 0 PID: 2368 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 764.051458][ T2368] Tainted: [L]=SOFTLOCKUP [ 764.055972][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.066281][ T2368] Call Trace: [ 764.069564][ T2368] [ 764.072504][ T2368] vpanic+0x56c/0xa60 [ 764.076610][ T2368] ? __pfx__printk+0x10/0x10 [ 764.081292][ T2368] ? __pfx_vpanic+0x10/0x10 [ 764.086087][ T2368] ? is_bpf_text_address+0x292/0x2b0 [ 764.091578][ T2368] ? is_bpf_text_address+0x26/0x2b0 [ 764.097491][ T2368] panic+0xc5/0xd0 [ 764.101331][ T2368] ? __pfx_panic+0x10/0x10 [ 764.106029][ T2368] ? ret_from_fork_asm+0x1a/0x30 [ 764.111170][ T2368] __warn+0x315/0x4c0 [ 764.115347][ T2368] ? firmware_fallback_sysfs+0x755/0xa40 [ 764.121630][ T2368] ? firmware_fallback_sysfs+0x755/0xa40 [ 764.127361][ T2368] __report_bug+0x276/0x570 [ 764.132138][ T2368] ? firmware_fallback_sysfs+0x755/0xa40 [ 764.138964][ T2368] ? __pfx___report_bug+0x10/0x10 [ 764.144906][ T2368] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.150828][ T2368] ? __up_read+0x29c/0x930 [ 764.155946][ T2368] ? firmware_fallback_sysfs+0x755/0xa40 [ 764.162453][ T2368] report_bug+0x16a/0x220 [ 764.167621][ T2368] ? firmware_fallback_sysfs+0x755/0xa40 [ 764.173602][ T2368] ? firmware_fallback_sysfs+0x757/0xa40 [ 764.179867][ T2368] handle_bug+0x9c/0x200 [ 764.184109][ T2368] exc_invalid_op+0x1a/0x50 [ 764.188603][ T2368] asm_exc_invalid_op+0x1a/0x20 [ 764.193974][ T2368] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 764.200769][ T2368] Code: 9a fb e9 48 fc ff ff e8 f9 12 9a fb c6 05 c9 a8 14 0a 01 48 c7 c7 40 2f 76 8c e8 96 60 fb fa e9 70 fc ff ff e8 dc 12 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 30 76 8c 4c 89 e2 e8 36 d9 ff fa e9 [ 764.221772][ T2368] RSP: 0018:ffffc900067df680 EFLAGS: 00010293 [ 764.228134][ T2368] RAX: ffffffff862c5ea4 RBX: dffffc0000000000 RCX: ffff88802c170000 [ 764.236302][ T2368] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 764.245228][ T2368] RBP: 0000000000000001 R08: ffffffff905783f7 R09: 1ffffffff20af07e [ 764.254165][ T2368] R10: dffffc0000000000 R11: fffffbfff20af07f R12: ffffffff8cd10960 [ 764.262233][ T2368] R13: 0000000000001770 R14: ffff8880289340b0 R15: 00000000fffffff5 [ 764.270387][ T2368] ? firmware_fallback_sysfs+0x754/0xa40 [ 764.276095][ T2368] ? kfree+0x1c5/0x640 [ 764.280169][ T2368] _request_firmware+0x1049/0x1780 [ 764.285896][ T2368] ? __pfx__request_firmware+0x10/0x10 [ 764.291668][ T2368] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 764.297414][ T2368] request_firmware+0x36/0x50 [ 764.302102][ T2368] pvr2_locate_firmware+0xb3/0x500 [ 764.307215][ T2368] pvr2_upload_firmware1+0x1bd/0x940 [ 764.312499][ T2368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.318480][ T2368] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 764.324303][ T2368] pvr2_hdw_initialize+0x425/0x3c60 [ 764.329731][ T2368] ? __mutex_trylock_common+0x15f/0x270 [ 764.335467][ T2368] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 764.341207][ T2368] ? rcu_is_watching+0x15/0xb0 [ 764.345992][ T2368] ? trace_contention_end+0x3d/0x140 [ 764.351280][ T2368] ? pvr2_context_thread_func+0x279/0xc10 [ 764.357817][ T2368] ? __mutex_unlock_slowpath+0x731/0x900 [ 764.363474][ T2368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.369644][ T2368] ? schedule+0x90/0x2b0 [ 764.374584][ T2368] ? schedule+0x16e/0x2b0 [ 764.380831][ T2368] pvr2_context_thread_func+0x504/0xc10 [ 764.389009][ T2368] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 764.396137][ T2368] ? __pfx_autoremove_wake_function+0x10/0x10 [ 764.402223][ T2368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 764.408155][ T2368] ? __kthread_parkme+0x71/0x1f0 [ 764.413437][ T2368] ? __kthread_parkme+0x196/0x1f0 [ 764.418649][ T2368] kthread+0x388/0x470 [ 764.422925][ T2368] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 764.429278][ T2368] ? __pfx_kthread+0x10/0x10 [ 764.434216][ T2368] ret_from_fork+0x514/0xb70 [ 764.438816][ T2368] ? __pfx_ret_from_fork+0x10/0x10 [ 764.444089][ T2368] ? __switch_to+0xc89/0x1420 [ 764.449037][ T2368] ? __pfx_kthread+0x10/0x10 [ 764.453914][ T2368] ret_from_fork_asm+0x1a/0x30 [ 764.459436][ T2368] [ 764.463301][ T2368] Kernel Offset: disabled [ 764.467646][ T2368] Rebooting in 86400 seconds..