last executing test programs: 11.396303091s ago: executing program 0 (id=397): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x92e2, 0x40400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0xfffffffd, 0xa, 0x0, 0x9, 0x1}) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x20000000003, &(0x7f0000000140)="853a1b9afbbd28d424ce2b3687e9bf94648974a58085583067f405bc7d") ptrace$cont(0x21, r1, 0x80000001, 0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) mmap(&(0x7f00001b1000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x52ccd000) (async, rerun: 32) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 32) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r1) (rerun: 32) 10.777293815s ago: executing program 0 (id=400): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x8080, 0xb0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x14, "a922c296ef4b1c505fecac73b9eb7100cde2c695"}, 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) landlock_restrict_self(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x1, 0x0, 0x0, r2}]) 8.606974334s ago: executing program 0 (id=405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r3, 0x940, 0x22a65}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8814) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x4, 0x14, 0x1b, 0xa, 0x6, 0x9, 0x8, 0xfffffffd, 0x7fffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r9, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 7.43516321s ago: executing program 2 (id=411): syz_clone(0x24000880, &(0x7f0000000000)="db2c502783be7fdf04da03c75ebeb12894b4567e4ba629", 0x17, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="868185caf5b939aac68e14c9c71c9549eb3028f3a105b7ebfe976eeb8517d1f39da655c5c87a165dcbd2a25e32080e4d9f8d5be0acfdd2e1e26e83c62e5640bbf2579bdd11e3876ea26277e9914d4b01aa060f5c0bcc190559fd3dc46311a062268077ec6b06b0adf0d70751787c7f332e07b95f60025a63bea35e01") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$pagemap(r0, &(0x7f00000003c0)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 6.908896673s ago: executing program 3 (id=413): io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@wr_drn={0x68, 0x20, {0x7}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x8a77, 0x0, 0x5}}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @rdmsr={0x66, 0x18, {0x974}}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x8000000000000001}}, @out_dx={0x6a, 0x28, {0xce1f, 0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @wr_drn={0x68, 0x20, {0x1, 0xd966}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x9db, 0x8e}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x52, {"b805000000b9000000000f01d9430f2366650f01cb66baa000b800900000ef430f78745000c4e13dd550003e65360f32c4a231bc3366ba4100b048eef30fc77500"}}, @code={0xa, 0x70, {"c441396a7a2bf37e08c744240000980000c744240222339ebdc7442406000000000f0114248fa810cc05000000000f48b800000000010000000f23c80f21f8350800f0000f23f8c4a14b5ef045810914080000d21e450f01c81b831abc0000"}}, @cpuid={0x64, 0x18, {0x2}}], 0x2b2}) ioctl$KVM_NMI(r0, 0xae9a) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100), &(0x7f0000000140)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000140)=0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x39, 0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x7, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb1d6a2033ce5f1f409cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="21012cbd7000fbdbdf251400000008000300", @ANYRES32=r6, @ANYBLOB="3a90bc5985e9d379ea41129d4ab32674b9e919f11235991b5d978352dbb116a45f1632447d616db6331697784be9aecee707d6c7aecaac2db15e7009ba7b2537c0e8e63c298ed4e65788a9eca46b61f2b4503c23afc2972f702ec388a603653b07136bb8abe82a66f08fd2ca2f6fcf5eeff4aeae2ee411792ca32ec0c33053fb616f4fd1e5303957546c831f78fc1af807541d255805487a1a7328c5aa059e4113e55d37acf89b44e0583471490631"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x84, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x59}}}}, [@NL80211_ATTR_IE={0x1c, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0xa, 0x61}}, @chsw_timing={0x68, 0x4, {0x6, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0xfff}}, @ibss={0x6, 0x2, 0x7}, @rann={0x7e, 0x15, {{0x1, 0x50}, 0x6, 0x8, @device_b, 0x94, 0x5b, 0x6}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x14, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x58080) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r7, r7}, &(0x7f0000000100)=""/58, 0x3a, &(0x7f0000000000)={&(0x7f0000000080)={'sha256\x00'}}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0xfffffeb2, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x0, 0x1, 0x59}, @void, @val={0x0, 0x99, {0xff, 0x3d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x16000040}, 0xd880) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.339253198s ago: executing program 2 (id=414): unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r3, 0x1, 0x100000000, 0x10000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) fanotify_mark(0xffffffffffffffff, 0x1, 0x74e364f20890bb6e, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) unshare(0x400) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) (async) fallocate(r3, 0x1, 0x100000000, 0x10000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) (async) fanotify_mark(0xffffffffffffffff, 0x1, 0x74e364f20890bb6e, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async) io_setup(0x1, &(0x7f00000004c0)) (async) io_submit(r5, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) 5.680074673s ago: executing program 4 (id=417): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2281) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) r4 = dup3(r2, r1, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xffffffffffffff5c, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}]}, 0x6c}}, 0x20004084) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) (async) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r10, 0x0, 0x0) (async) syz_usb_ep_write(r9, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000110000082dbd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="000800000082020008001f000000000008001f000100000008001c00", @ANYRES32=r8, @ANYBLOB="24000e00000000000000000004000000000000000100000000000000ff0f08080000000008002e000600000008002c00070000004f8daf6fc5192678b6aeffa654bc9fe89f038233c5185f4310bdda8b0ec0a68ccd7fa97f010dffd7a9c7f222d1d9b3b1f5601d385bb68b975c94be5ced44e2c26f5dd26259bdb7d0981fd640cd6f1817ea3cc739a9f616f6bb8500db1e6212f8e0aeca1fb5c182081cae12d7589e92760ed825715a4784cd11c0c4e22af0efcbb64c"], 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x14) (rerun: 64) close_range(r5, 0xffffffffffffffff, 0x0) 5.594159859s ago: executing program 3 (id=418): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="ffdf17c4bf9a63f0a7a4ff3918ae3193cf5a933b7e172503edd589b0869639e3dc03e31a40f58f4d1141a22155e17886a2cdadf5147df29a", 0x38}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5.372992297s ago: executing program 3 (id=420): r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0xc80, 0x480) write$ppp(r0, &(0x7f0000000000)="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"/461, 0x1cd) 5.059358214s ago: executing program 3 (id=421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0x6973, 0x100, 0x8, 0x43}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000300)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x3, 0x5}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) (async) socket(0x28, 0x1, 0x0) (async) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0x6973, 0x100, 0x8, 0x43}, &(0x7f0000000240), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) (async) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000300)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x3, 0x5}, 0x90) (async) 4.891030932s ago: executing program 4 (id=423): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001", @ANYBLOB="40b3"], 0x110}}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x6, 0x7ffc0001}]}) r2 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)=',+$,-{R\x00', 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xd9) memfd_secret(0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="1207da22000000086b1d01014000085c0ed1090289000301f580040904000000010120000a240107000e020102072408020500090c2402020002220106007f3309040100000102000009040101010102000009050109080000610207"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4.769525551s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000019300)=[{{&(0x7f0000019140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000001b800)=[{&(0x7f000001b880)="5e7078051b5d8a2e97e0c4f539013fa56f7d5f43b8f3d8b1f82c789c54997648e9802b11d59dce85aa0609dee58acb40ffe866486df6205d294a3e2c0c3538594f8a4b38d5450f97da0234d4da0c946c391ac289a9f9a03120f9070b6b8ce920d66a763f3cfc38bc116bd3f8865a368c795aaf4453605e45ba9e39758d8c4c7151391708beb2b1b88fa8288142e50979b7e9464c13075ec91abff5e015de87a28363e1c7184993fbb674beb8f07a74f4ee4e55940715c75c08f7a6783f8a2de39f26c4eddb5f8808acb8", 0xca}, {&(0x7f000001a640)="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", 0x1000}, {&(0x7f000001a380)="ca7d087efdf75fe14e401fd86f86bfd375301dc47c6f0ec792d1d24ecfd4f27fd3f2854bb7a5af9dcc27d722c6c628dc86210166273cdc44bb4bb694e7e9cb099e42c852dfa11459e544dd88c3a11c0df58bd156a47a405b3d5f38b8c4efc9e7f915f5cb281ae9c551ebe8be114cd029114d0f8d704b6207501ca55fa0ff950e084a5e67", 0x84}, {&(0x7f0000019280)="4ed0090a39c1d44e638e6fb048ae6268a9102bc4eacbc32c7f3f2ede80add76f9cfea0810145af623fcbf39398f915a05bcbd96d1e", 0x35}, {&(0x7f000001b640)="6b1de6aef7008f92e3fd2ca302ec4ccbc94e48b34609571953c2cb2fc64751197f02489483cd66052175a69bd39e2924f316144d7c1323c8ac258b9aa1a9dec4001768b2410c269bcf6d08310cb063f7f574566568bd4d3658f8f3307b92b00a4bd7347ae6c0306cfd3848d24890ab10b034d7859c9a9faa6030f4a5213db0f4633ce752ab83226cbab5", 0x8a}, {&(0x7f000001b700)="a488caee309cc491491752f001209784abb874f0b9a6f9cf2d34a6eb3e1c042493db639af30ff89ea3c3911de37c73af65b0c5504fd3efcbe16df56cd914409776db6b37ef9667abfead79843d36313ff9d09217b20c3d4dd8ed569b7dbcfac926927bdef8832c7a1e4f76712039942b6f601c95909854a1795738ec06599cbdcd9feced4422656384b0b3d6457a020d7c0480ac65cb45ba2d173edff1784fc9c289ab8dcbc9978078055c8ffc17932a091b28cdc7e420e851afa4edb2b8aaf6da8da883f23c9b8a6510dad7af3b0158c8de17f365feac3e4be234fefaa337bf59511f", 0xe3}], 0x6, 0x0, 0x0, 0x20008800}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0xffffffffffffffea, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x6, @loopback, 0x3}, 0x1c) writev(r4, &(0x7f00000192c0)=[{&(0x7f0000019380)="8492956181f597fb0ffb48658363a2a01c96049e2e9fd2a3e2e7be731a73ddea38e7ac4a3086bb42d7d8a3a640886432488ab2f34452de7280f9588015069553e24c9763fea9281e607f90155ec28699d4ef97e057f34607536543735c4962f95e6bd27486ff53e9ba7adc7f8631cdfb6d48cabde8f13ec182e08fca6f232e1008af46a9d3b53b22d819deaa5cf6f97a8d50a58ef8efab2b188030b082c0084ba17ddfa97c2fcc41de17db855ba3e7431343c9ad296952ddba0b08d6ed111d5f389ed743e990d25f88f2e305de633716dee9303e188ec4fd69d31893f61d2d259af7418c31d9b6e9ea12b6cc0eb3ab4ab1b3be887c25f5a537a8c030f7b0b841cbfef61db5f34da24d3e4115d9e82fdcaa3e26df08a58682700180aec0de731382b0580c75abe9d0dec6b7610a6f4a5039cf2413f8acd013f15a0118a1640d94113167b77dc0a38d014fa637d057c3d283b68d6d2dbed065a2ca23e7a87469396f21651029aa79cfd98650189bff70ede2571ff7280195cfe32a932e955618d8dbfc904a989f7da4b81a05efdef30440a0f05153ea81fd0cf742ab5520a7220c3986bee179f5e06408173e166f35212b493966e6224c7e5d29030643c86b27808b2be56d439a3ab1a59424c95972fa25c6fa6e57bb6aa7a5892515a35a75e814db9c5caa93f67e49229ffe3b05f1f76c59ba63166b4df5c98c1036f8a284cbaa6b62976bbb0dd39352473406376fe3aa33b6ea6a7376f6704490331eb2a013131aa15d4d0fa6b637fa9bf84ae1ff322dbadfc94478d7f1895a2d0b0d7cee96169877cde72792f01ee551a8a1cec1e54c8656d245d0747c001f0cd439cd31d9b9697ec588b59242340743e6b9eb46a2090b13044dce9cc5ecacc3bf38c5e52f2fb5d834eb7de3436ca787d1d3b7f98860628df0d59d7611fe9d109a1bf67447e68c37534ffd13a05e8b87570a18a640f6fbd16716d4c0fc34c94c8a9b5fd12f7f961cadede6763539d805828d75966795c956e8cd5e815bbd92345f93ed888203d50ca3420cf78d80be67d0719a53ef7665812b54993f2197c9534f80fc0e3c98ea3863df45388ed3e16895919c8ac8deed340fc1d50eea8e9e5b1d221854ce1c480afad4fa46d57e6327951182eab7f2fc4bdf75dbd4a31f0a132fee680f25cd25fc6cfa1d2ec1dc9c10fa1ac0273847ca56004a0c1d3727c7a5829f518602b04b7c7488391e16c93f6122ad22fc0e84f88f5ecd2e3c15b23588f2a7985f5a25b9632079f9b86da3b36424c9a80f3668fedaeb2c974ef735c7a89f7238c48e9991ca446d954003134e44476b73ba46cb9d1aa4810ecd784229af6f007e81e0b01761e190c04e8fd5ba1a64259ad0bf11d7b614d6ee7b4618636b3418e38e6e439259a0806cdc2613d797233e87f1c922f426608ec40a0384c269bcf019bc5f29fc2362a5497aa329ae0769beb61d3986d1511f862cc496b8d6e7ac5efdc40b5309d2a1535b0fc08f23c3257794137a9516b661b63ea2eb5ea479cbf0876afe938f59f6736c591ec6bf094e34e0607b7e878812d84712f84decd2099c9f8cd1a3aa62c2bc57e0b18a6efcacb90e3531356736e7e7fe2f8f5b59737fd44e3610282556dc6e73e4730f4e2dd3d3a7ca8d140483a89851ea41c7d1bf72a1b83e25cee0ccc213bf876ddc876f496d331d1114f0641015e21241231f227d159d4c74af4962a25a13510180860f695b47218aebc41baeaf2d863a3c997a52290bc9ff74e90ba192b932e8ed9f343feb126beed1d0832e3df77ddbc32472b319b2cfd8555a48765da164698f0b1a73d59759b25bfa643a376546ae6c7639a2c990e59dd0a37f3e06fd61fe6ebe597422f46559d4aaf2a000d5b7cd52c3825712ff171650a2baf86eadcb22a9c674ea664377e06414baad8fb28df1e8190f8a4a421cf866b7eb685810d6e6dab58264a527676abed7ba2397ca416e4fe68b1ec40edd51793f620ae12ed4aef283ef8501be06280c7405ccb74317047e227d1c3ce2cc97b210717dc6c712c6ded8cbd933c8f086f025e116cf30f6af3482090e9bf436ce5d9164ed4934f9dc808541d0a011abd06c3fa830d1962904370878b701baa146444fe495a7689a2aeda1be44fa384132fd4fd53739e0b067af953ea777b0a0057f9b15f0c47efb902a086cde26d3f99a756fffc9852b19a7923f7b1bf256770acabcdbf4fb85f41c6987da5f3d9a4ff77486b7552d81437962d9f27157b062a8ec2e4a730ddcfbcba5e9e7c1df04c8390b770248bc78b14fe51282640322a3a0dd887760f70a55b7a0f083ce40687ba3cab7d771951da78ebdc262e0616932bb7491780d7ea78ad191130b02b2d789726830a11949831933526b4edf0c6cbd9ab7656a78381161ddc38771b1fd9c5e4b1f3b2349c5d9c060b3b0e16779bf9a933052e89d6eafe1811e302ec31cd0256b3694784cec79c35536f304161fd622d4f6c31b16a4b50a395265dc4b5ecc47b54ac7f77de691aa61fbac135ffc395e1013ca11e8f6c14e8dee1edfacda95c1b4f5e4ab2bd3d7bf1fb04d86817b7247a8e4d8125addd72d9a2da2a8d66213e163cee56b8b2181c031b5e3da046a0699c4e17f28490f5f6a31199619dd83c39e34796f5d886a8bb8bfef189d0174aedc1e9453ed60ea21e2415b008658fc5dd5ff9a41c2aec53eb8c22dd9934d5e26054c464af5dd6ff61b154c163684d5c6c30665663278e33675dc95146a1e02c9eed91422290fc614a6c2f9c656b423834d22ae7213fa2ac6024af7d211bcf41995c5020aa47b5a9cbf9b163514878fe02a586aea758068af1d3168a94ff3d2f9229fab999e597ac027b6d8257806d426fe2e48fc8fd359bbb9885cd082182e2b64fac5bc45be45f958883ac6864628ecbf4e35f4e0e019ed70820ff82c7ba111631f465ad1f55fcdb340a4f21e26932643b4e88c09e3f006db65a2a559a990035926b3b37a12f3bcacaed37427d43cac399714b6b6612ac0c719c6583e908e23c81ecf8f602207661ce2c85cf6c3d56d49528e941c738c04c87480d61b78af74679fbb7536bd34ba5a22490838d0e7ae1e79d2fea0235eb2707def3f878e34386fb034b0d94055de011ac67cd54a23cb03f950176be68878648bd57c2b5ad7c7232aaa26d20b05807da23a7aa0522470bd607cd97c3998012a7c5d781676f1c19b9eeae3f8f427f281af4474ac01ca5b6c8acf4cb2e8dd94f37a222705857392c0b694b374c7e5bb997c0fcd817fb48c768335e8050b9706590b391b2eff06c27fefa11e924e90fb6f8eb33ebb494bc67c99b3bea7bd6e2222e934a9083dfcb5fa397704a3ad99fa3f2ecb7ff1b876d8b8a4eeaa3061a49d1da75be6d3230e9bbc4c61259fad23784db637a60419254fd8be027bba34f9c785cd2f4edd71361c162d2ba0eef94aba9ef61628ad7d8b90d735852601583ff5eb1005230ca3d78173fff8fa48af82c8e38914081d0b52d36ce820923844cb0d9ef132647e4af900e9984d3e7855076ab9c08b5bd428b7acc6bd6c6dd59849bd42ab7ccec7ff792abc04aa72b6eb2fb316779294fceb3db4c701051c5cdb2a9ccf16c3af92afcbb93581adf95c79fd8456ed4178db2808c0b46f29a8ae9f8de805904f218a76994a51788dda6460a756a16f414ea3bde0301aeada169efafeae2cd73802318d436e6628325218227d96d9fa0eacb0dd64fbe4433507d7fc6952839bfe4d971fe3dad27e603468765afd26576ee12dfb0fcdeaf2414206b89b93fb5dae6421a52a896e1e19d3701901ac072abf4d75719879d1feba3484dfff251f419b70d23e80e5b78ae9ff39f414eba3bf842cf84950101887b6af5c737049e2aae25299ab2f1bf23b7780b440aae8f0664d292753b74253782c69b1045ad0de3a97a7d4839c1f4c8133a22a0952a4df8bb3b59eafae98a38e034b95159da03106b61a233123ac65fcb1de5db1ba2cb7969399f9b67acfb3869919dfe4f1620f2b696dd3b3f02ceb5e95fcb4b3200b8a400aef74afe657aace520913fd61d2d3ffe757c4947f7cce05ced20ac5ed7f5d714be504fbe9aff83674e53af6b67110fb211431236f24b179f7aacebdb802cf926980cd4cab595d0867663f007cb4085f739de134be8fbc8b10d39097b30b22ae9b69ae6d6ca72321ddc191df3c23963bd3c78b712692b249025de21dda3f54eac08d2849163989a6351a61dd923292fea5585006e40c5d7aad555d7fecbe001a51e66bbffa07d9f5b631b4ad0730b51fb52b9a5d70ce707e191a63fcbef8c6f563442460147455d1a834fa69fe3eb5e5afbf59753021979c894cfb18de812a450ed32675058f94858fea2328bf591eeafa11e4f3b6646700c5116ee74fab229b873e958a60b6ea57cb6a94fe7162b6070ed2efeed9a35b554009f543b078496693e4420149477dd3222aae3562bc962121de94cfb51e31a62fd05e377a0c5e5273fd3c3ae42494db21a64a5ca5bd921eb4f4f66696fdd2ebe3ccc6e7561e2349ad175bc264d97a97a1aecd8f45e0e35bb1ccf6f1dbd2cf5674f5e30e75151ea5e883a5ef6c0bd6e850da5a4c705ddb523857ac0c23e9b7eadb9e90bcdab98a01e0d35460d3ceff9ebcb40ef913e71bae7e738b96486926f3c9274bb65a0f5a756d2a9c32d641cd2ab39dfa6321de3a62653682a445ccff3ed1e1290f55a2fd3a12a809a98649a94d4be5bf6b62c02c0c98a77e5590f7cb0c06432acd11afbf6c1322649c3509dd946a7615c9b72de5ba425bc132aaac381dfaf674e7a251ee6abcac829d867d325ea0d61f93e4e27eff81b61666adae432eb27fdc68611a5329bb1b940f9f68a5cabf0eb54f998a38c8bf46b02c66cf8229d7d6596a6730fd9d0e28a4ddbd40cb25f5f6c928b92a1d0ba171abda3e33de4869ac74ba0fa3522f41b5c8e0a1d409433baeeb9a8086103fb91aa714141e84ce931f97124e3ff045d205a3586680f21f511a9e0d70e318fe9ec20712ef905910714d4bc2043696b7172ce0f83d6c8b03b45a0688d9f14b2d3cf99cc3c5898bcf8896bbd4a275c9faef8e7f99ddcf72345833bfbc41e8a0a39262aeedb6e3c356a3a965ab2962da7df20466795c6aed813ebaf131fdc7cf7597ae7fd46aa587f6afcd72d4c17e2349fe66bbd5a6ff7ee052f560732657369e2a1522b2bf1d19bbab9beefd140e278dd3a72c1cf64233d318d6a89cc17f044e3ba00e4a7406696adb2ef604fbbc25bf0655d110e350274e946cd4cbcd1e370b70fd167d8019950c2eea3a79a00290b0f0e373f421bc07007317e1d777a5c5730ed6857efed27b381499e665a7dfd9843df6558b39a8faa674dd7c3dd0e15ea439c96c3955396cd5eb1702f52b942cc515fa846ceb6a27fbbf3fdd90a2e89147830e1ebccb0cc2fff898697c9df79633b1e2e809ce9c72dbaae3e22b317ec802529c9aa28295ba4dd3e8ef9a75cbe98177e7c282bcb582800ab1a27893451059f07e9aafe3835db6a989714c41583c3d9f34e1561637d03b93a93094b2fbe1887f810b00a1a53d50c27c04b5162491494633bea9fc686b64a16a0751be411bbf3452fcbc13c14f391642a3b94c81ec1870a03c4354529bd3e0f1f7ad32e176681ac8877bbd1b6e22450953761cbb89f4b8f29b9dfab27836e34d7d1e5b1f021167074a21a365eab97f508043f1cbcf818ea2e524e6a39d3a47c9e980efe0a898cbed23bb5bbbd2d17ccd48e46dce7f6dcddda7297a215e61ccb43fbb1f49a0cd37c0d4c3", 0xffb}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 4.632816588s ago: executing program 0 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090029000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a502ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0x28, "4b486913b1f26cbc055a65ad9ad1617d4ead7297c4d1387d5406af2231c211ea47bea33588320c62"}, 0x0, 0x0, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x2}, 0x0, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r3, 0x2e325de103bab63f}], 0x1, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1d}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xc45}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b15, 0x0) 4.149442678s ago: executing program 3 (id=426): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980912}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) 3.460323732s ago: executing program 1 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}}, 0xea5bc50b6199d77e) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') r7 = open(&(0x7f0000000200)='./file0\x00', 0x18000, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x9) fchdir(r8) r9 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000140)=0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000280)=@RTM_NEWNSID={0x4c, 0x58, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) 3.280467274s ago: executing program 2 (id=428): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14140c"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0xff, 0x203}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x24010001) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket(0x22, 0x80000, 0x10000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r10, 0xdbd22000) 2.816949386s ago: executing program 1 (id=429): r0 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) io_uring_enter(r0, 0x47b8, 0x2669, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24a000, 0x8) openat$incfs(r3, &(0x7f00000000c0)='.pending_reads\x00', 0x1, 0x21) 2.039052784s ago: executing program 1 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f00000000c0)=0x90000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f00000001c0)) (async) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r8 = dup(r7) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) socket(0x6, 0x80000, 0x6) (async) socket(0x6, 0x80000, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000280)) (async) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f00000003c0)={r9}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f00000003c0)={r9}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x102, 0xf) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.752652963s ago: executing program 3 (id=431): sendmsg(0xffffffffffffffff, 0x0, 0x24044000) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='2', 0x1, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$P9_RCREATE(r1, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x80}, 0xf}}, 0x18) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000500)={0x4, 0x0, [{0x40000001, 0x3, 0x1, 0x80000002, 0x9, 0x3, 0x4}, {0x40000001, 0xb, 0x2, 0x7f, 0xd11, 0x6, 0xa}, {0x40000001, 0x9, 0x1, 0x7, 0x2000080, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x80005, 0x2, 0x4, 0x4ad6d281}]}) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="49237a9eeabc0672ba84a8a1823820a10dc7a3d0ea37b078ddcc8a7cdd78cd99b5096f37838f2365fd67944f0b3f063be0cc5194592f60a5e0f10a29708a3d43398b817c7d1016117f212d0e486141ac88d77ac0e08095df59a5b6caffaf5b6cd8cd2b21ed683fcd40edecc6d2d4280967bc42747d024c1836a8858cebcef4", 0x7f, r0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000014000", 0x58}], 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000240)={0x1}) syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0}) 1.69272421s ago: executing program 4 (id=432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48015) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) read$dsp(0xffffffffffffffff, &(0x7f0000000140)=""/21, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0xa0}}, 0x20000004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) (async) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) 1.474172109s ago: executing program 2 (id=433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff047, 0x8, 0x8}) prctl$PR_CAPBSET_DROP(0x18, 0x11) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4060000000000000140012800840010067726500080002800400120008000300f3f0bdcf267532198ce6ab1a594389a263fc6e8b0f3bf68cdf23f46db7dcd24b748a55998a26fbec33d11c032c75cb7fec2a25", @ANYRES8=0x0, @ANYBLOB], 0x3c}}, 0x4000014) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 955.096245ms ago: executing program 2 (id=434): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x3, 0x0, 0x80a0000, 0x1000, &(0x7f00001c8000/0x1000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fe}}}, &(0x7f0000003c00)=0x88) 897.433039ms ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) pwritev2(r5, &(0x7f0000000580)=[{&(0x7f0000000380)="a649edf062d6800e62d51ac6732c05e01e761a11de14b9619fed1a1ccad3976f82adb82e5279cf173eeb95df275b2654c8ae3c56d91d0c81e65d3cf228b1bde3875800bc646edcd8f96e43fa8fb41096f3d4dd24c36d84f7707d7b3d071507faf92a9e4bb001794b2b8672b5d205b7e3a3d820ee0a200a188e72820b37bcbdbaebf57353d58fdeb3c72f06fc2812eb6079eac06c6915ba0e478224b0a4b4ff959945351ea7eb0b8fd398c42bccaa799756cdc82b007092030fc9d3892fdb4b3925ac022b1dfa8c20d8665f", 0xcb}, {&(0x7f0000000480)="1351dde9ad9847796f8c5812d36d2627530e5907215786008ff31bdd3385ef538faf46f68b7bf0cf0ae99db30aab5a2583c86976f113920c5642f006ca474a75b5bc775bdaa0c9b5efc892385fd242c968fd1a2ed96df48ded3c4d7e8c9af50606350378e38a969694e373f7efd5e0d3ccb7753e5637b2e8fe5eda386fa532cbeb88a920ff85d0e3ab1f81d21be2ead86d07a1b52db221839074a38ffcd77d52868431eeea0b80dae3a3ef5633581282428c5e5cf7e963fb151b4e796b181c6f660bec8506a8067a9c5153e20af737dd50", 0xd1}, {&(0x7f00000001c0)="4e313e041f932242f7a612cb0e6973e1af6cbf53d2dd9db5347550c07d6e1c7211e87eabdabb942c", 0x28}, {&(0x7f0000000240)}, {&(0x7f0000000280)="8b73cf32ffeeb7395aad10d9571be37bae9a7fa9d250417aab87bd154235f76644bbcbfc106d8c20b304337544319e569d47d8d177003a48be091e8f607f0404fa043a6ba3f806db4e65711fa5d65b0ea15d8eea28585555d46d7752d2833a3d97940d41", 0x64}], 0x5, 0x3, 0x26aa, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x20000080) 789.810985ms ago: executing program 0 (id=436): r0 = socket$inet6(0xa, 0x3, 0x2) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 776.769495ms ago: executing program 4 (id=437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x1}) 662.965361ms ago: executing program 1 (id=438): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0xffffffffffffff6e, 0x6, 0x44, 0x3, 0x0, 0x4000000000009, 0x0, 0x31, 0x1, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x42090) socket(0x15, 0x5, 0x0) 426.537466ms ago: executing program 4 (id=439): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r3, &(0x7f0000001200)='./file0\x00') (async) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) 265.048158ms ago: executing program 4 (id=440): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000280)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpgid(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="1ee17b1a5b37", 0x0, 0x2, 0x0, 0xfffffffd, 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x20000004) listen(r0, 0x207) listen(r4, 0x364) 152.944761ms ago: executing program 0 (id=441): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x7f, 0x10, 0x72, 0x40, 0xc45, 0x6280, 0xd5fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xfb, 0x0, 0x0, 0x27, 0x30, 0x47}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x28e, 0x0, 0x2}]}) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x9, 0xb}) (rerun: 32) 0s ago: executing program 2 (id=442): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000140)={0x21, 0x20, &(0x7f0000000040)="6bca6eec91bd67de85f1b38635352131b9d02c65e420503b701d7a398ea2d59e828cc3f6a51e21b78d0a8cb8c2272206cbbc225417ced793bedbdbb46fe7b8819b98a93390d042551ba5bda8a486afa216e66d2fdb8b0013d3b558fa312081ae7a88c9208ae53802117993244fd8eb8ff044", {0x6, 0x1, 0x3831354f, 0x0, 0x5, 0x1ff, 0x8, 0x6}}) kernel console output (not intermixed with test programs): ][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.902281][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.930249][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.939476][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.950955][ T9] usb 2-1: config 0 descriptor?? [ 130.228782][ T5924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.462522][ T5924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.476879][ T5924] usb 5-1: config 0 has no interface number 0 [ 130.493642][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.503567][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.520050][ T5924] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.534819][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.553431][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.568143][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.576508][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.584223][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.588764][ T5924] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.592594][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.621207][ T5924] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.623449][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.655008][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 130.677560][ T5924] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 130.693748][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input10 [ 130.718728][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.743170][ T5924] usb 5-1: config 0 descriptor?? [ 130.794222][ T9] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 130.969203][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 131.125993][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 131.128734][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 131.169003][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 131.183633][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.210213][ T10] usb 1-1: Product: syz [ 131.233409][ T10] usb 1-1: Manufacturer: syz [ 131.244332][ T10] usb 1-1: SerialNumber: syz [ 131.261913][ T10] usb 1-1: config 0 descriptor?? [ 131.369893][ T5924] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.000A/input/input11 [ 131.474810][ T5924] uclogic 0003:28BD:0042.000A: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 131.479663][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.510151][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 131.586579][ T9] usb 5-1: USB disconnect, device number 12 [ 131.669326][ T6452] fido_id[6452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 131.939494][ T5940] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 132.198050][ T6469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.140'. [ 132.207729][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 132.541498][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.550896][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.563397][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.590807][ T10] usb 1-1: USB disconnect, device number 16 [ 132.598759][ T5921] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.780484][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 132.786744][ T5921] usb 5-1: no configurations [ 132.795774][ T5921] usb 5-1: can't read configurations, error -22 [ 132.939640][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 132.949846][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.962012][ T6478] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.108739][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 133.130727][ T5921] usb 5-1: no configurations [ 133.135381][ T5921] usb 5-1: can't read configurations, error -22 [ 133.156774][ T5921] usb usb5-port1: attempt power cycle [ 133.426969][ T6488] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 133.491609][ T5824] usb 2-1: USB disconnect, device number 14 [ 133.529203][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.559575][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 133.565543][ T5921] usb 5-1: no configurations [ 133.578227][ T5921] usb 5-1: can't read configurations, error -22 [ 133.670737][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.759213][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.804055][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 133.828312][ T5921] usb 5-1: no configurations [ 133.837009][ T5921] usb 5-1: can't read configurations, error -22 [ 133.849535][ T5921] usb usb5-port1: unable to enumerate USB device [ 133.850362][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 133.873762][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.887331][ T24] usb 1-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 133.900457][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.911526][ T24] usb 1-1: config 1 has no interface number 1 [ 133.917706][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.940971][ T6500] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 133.948055][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 828, setting to 64 [ 133.966759][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.976477][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.985153][ T24] usb 1-1: Product: syz [ 133.990808][ T24] usb 1-1: Manufacturer: syz [ 133.995454][ T24] usb 1-1: SerialNumber: syz [ 134.068973][ T5824] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 134.230981][ T5824] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 134.240952][ T24] usb 1-1: USB disconnect, device number 17 [ 134.248801][ T5924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.264174][ T5824] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 134.285746][ T5824] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 134.287887][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.297261][ T5824] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.335646][ T5824] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.346523][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.355214][ T5824] usb 2-1: Product: syz [ 134.360537][ T5824] usb 2-1: Manufacturer: syz [ 134.365186][ T5824] usb 2-1: SerialNumber: syz [ 134.373091][ T5824] usb 2-1: config 0 descriptor?? [ 134.379015][ T6493] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.390574][ T5824] usb 2-1: selecting invalid altsetting 0 [ 134.408956][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 134.420348][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.435275][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.460414][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 134.473415][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.491933][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.502034][ T5924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.510296][ T5924] usb 4-1: Manufacturer: syz [ 134.517308][ T5924] usb 4-1: config 0 descriptor?? [ 134.590244][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.598553][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.606761][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.614926][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.624917][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.632965][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.641084][ T6493] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.660984][ T24] usb 2-1: USB disconnect, device number 15 [ 134.862330][ T5824] usb 4-1: USB disconnect, device number 15 [ 134.876780][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 134.893050][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 135.286806][ T6516] netlink: 'syz.2.154': attribute type 13 has an invalid length. [ 135.692259][ T6196] bond1: (slave bridge1): link status up again after 0 ms [ 135.702798][ T6196] bond1: (slave bridge1): failed to get link speed/duplex [ 135.854761][ T6196] bond1: (slave bridge1): failed to get link speed/duplex [ 135.918847][ T5924] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 135.982204][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 136.123223][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 136.140484][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 136.155265][ T5924] usb 5-1: config 1 interface 0 has no altsetting 0 [ 136.171880][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 136.203864][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.239886][ T5924] usb 5-1: Product: Ѝ [ 136.250453][ T5924] usb 5-1: Manufacturer: 맰윟ℸ턅䂔緟饆䮧昉㴐M萼炕⴮㜃콙䁭㙎ヒ詡៹䳞᎝湍恽埵އ㐰献쮔枬ᕻ젼㤰ᔠ롚嚲콞茖ἠ檨굢 [ 136.265805][ T6052] bond1: (slave bridge1): failed to get link speed/duplex [ 136.368849][ T4405] bond1: (slave bridge1): failed to get link speed/duplex [ 136.377574][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.388708][ T6530] batadv_slave_0: entered promiscuous mode [ 136.396227][ T6530] batadv_slave_0: entered allmulticast mode [ 136.438840][ T5940] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 136.490049][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 136.574156][ T5924] usb 5-1: USB disconnect, device number 17 [ 136.610054][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 136.630340][ T5940] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 136.658169][ T5940] usb 3-1: config 0 has no interface number 0 [ 136.697593][ T5940] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 136.716969][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.747308][ T5940] usb 3-1: Product: syz [ 136.760139][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 136.773256][ T5940] usb 3-1: Manufacturer: syz [ 136.798004][ T5940] usb 3-1: SerialNumber: syz [ 136.809115][ T5940] usb 3-1: config 0 descriptor?? [ 137.081798][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.120150][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 137.162339][ T6538] netlink: 80 bytes leftover after parsing attributes in process `syz.1.161'. [ 137.199672][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 137.208595][ T6538] netlink: 80 bytes leftover after parsing attributes in process `syz.1.161'. [ 137.258794][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 137.263284][ T6543] netlink: 'syz.4.162': attribute type 8 has an invalid length. [ 137.281306][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.311038][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.342695][ T5924] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.372183][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.389060][ T6539] Cannot find add_set index 0 as target [ 137.400344][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.410288][ T5924] usb 4-1: Product: syz [ 137.414526][ T5924] usb 4-1: Manufacturer: syz [ 137.428032][ T5924] usb 4-1: SerialNumber: syz [ 137.438842][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.588915][ T5923] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 137.667516][ T5940] usb 3-1: Firmware version (0.0) predates our first public release. [ 137.689366][ T5940] usb 3-1: Please update to version 0.2 or newer [ 137.748832][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 137.760979][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.780403][ T5923] usb 5-1: config 11 has an invalid interface number: 242 but max is 0 [ 137.791702][ T5923] usb 5-1: config 11 has no interface number 0 [ 137.801159][ T5923] usb 5-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB [ 137.813557][ T5923] usb 5-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8 [ 137.826007][ T5923] usb 5-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 64 [ 137.838220][ T5923] usb 5-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0 [ 137.850938][ T5923] usb 5-1: config 11 interface 242 has no altsetting 0 [ 137.861349][ T5923] usb 5-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 137.871029][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.879191][ T5923] usb 5-1: Product: syz [ 137.883765][ T5923] usb 5-1: Manufacturer: syz [ 137.888439][ T5923] usb 5-1: SerialNumber: syz [ 137.900605][ T6543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 137.926864][ T6550] syz.0.164 uses obsolete (PF_INET,SOCK_PACKET) [ 138.025142][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.032015][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.175987][ T5923] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 138.195654][ T5923] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 138.214840][ T5923] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 138.240772][ T5923] usb 5-1: USB disconnect, device number 18 [ 138.325067][ T6558] fuse: Unknown parameter 'rootmC}00000000000000000040000' [ 139.098943][ T5940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 139.121972][ T6576] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 139.142742][ T6576] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 139.593327][ T5922] usb 3-1: USB disconnect, device number 20 [ 139.702586][ T5940] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.752584][ T5940] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.814415][ T5940] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.928086][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.052359][ T6563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.061115][ T5924] usb 4-1: skipping empty audio interface (v1) [ 140.272822][ T5924] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.310570][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.450459][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 140.468662][ T5924] usb 4-1: USB disconnect, device number 16 [ 140.488432][ T6606] netlink: 'syz.3.172': attribute type 11 has an invalid length. [ 140.561893][ T5940] usb 1-1: USB disconnect, device number 18 [ 140.616996][ T6614] IPv6: Can't replace route, no match found [ 140.618457][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.668937][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 140.764209][ T3654] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.816794][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.825075][ T3654] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.919015][ T3654] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.948128][ T3654] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.980786][ T5941] net_ratelimit: 28 callbacks suppressed [ 140.980802][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 141.160557][ T6631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.176'. [ 141.199770][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 141.394307][ T6196] bond1: (slave bridge1): failed to get link speed/duplex [ 141.525581][ T6196] bond1: (slave bridge1): failed to get link speed/duplex [ 141.669070][ T3720] bond1: (slave bridge1): failed to get link speed/duplex [ 141.748286][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.779254][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.799035][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 141.967151][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 141.978806][ T5922] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 142.089216][ T6052] bond1: (slave bridge1): failed to get link speed/duplex [ 142.295062][ T6052] bond1: (slave bridge1): failed to get link speed/duplex [ 142.431798][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 142.499037][ T5922] usb 1-1: device not accepting address 19, error -71 [ 142.528763][ T5905] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.703264][ T5905] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.744621][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.795899][ T5905] usb 2-1: Product: syz [ 142.808683][ T5905] usb 2-1: Manufacturer: syz [ 142.826316][ T5905] usb 2-1: SerialNumber: syz [ 143.281650][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 143.348752][ T5940] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 143.391814][ T6663] netlink: 'syz.2.186': attribute type 303 has an invalid length. [ 143.509158][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 143.521917][ T5940] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.541973][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.563881][ T5940] usb 5-1: Product: syz [ 143.572403][ T5940] usb 5-1: Manufacturer: syz [ 143.583018][ T5940] usb 5-1: SerialNumber: syz [ 143.595194][ T5940] usb 5-1: config 0 descriptor?? [ 143.697004][ T5922] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 143.805639][ T5940] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.865824][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 143.878085][ T5922] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 143.899818][ T5922] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 143.917135][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 143.943155][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 143.943174][ T30] audit: type=1326 audit(1765848350.611:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 143.975896][ T5922] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 143.985891][ T30] audit: type=1326 audit(1765848350.611:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 143.991513][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.030686][ T5922] usb 4-1: config 0 descriptor?? [ 144.358802][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 144.511107][ T10] usb 1-1: config 1 interface 0 altsetting 124 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 144.522494][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 144.533280][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 144.542863][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.550971][ T10] usb 1-1: Product: syz [ 144.557092][ T10] usb 1-1: Manufacturer: syz [ 144.561849][ T10] usb 1-1: SerialNumber: syz [ 144.573977][ T6678] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 144.837878][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 144.878242][ T5182] bcm5974 1-1:1.0: could not read from device [ 144.908163][ T5182] bcm5974 1-1:1.0: could not read from device [ 144.922847][ T5182] bcm5974 1-1:1.0: could not read from device [ 144.932272][ T5182] bcm5974 1-1:1.0: could not read from device [ 144.941268][ T10] usb 1-1: USB disconnect, device number 21 [ 144.987808][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.004824][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.042962][ T5905] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 145.074414][ T5905] usb 2-1: USB disconnect, device number 16 [ 145.225365][ T5940] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.249448][ T5940] usb 5-1: USB disconnect, device number 19 [ 145.269384][ T5889] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 145.431073][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.452176][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.474300][ T5889] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 145.484973][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.497079][ T5889] usb 3-1: config 0 descriptor?? [ 145.712637][ T5889] ath6kl: Failed to submit usb control message: -71 [ 145.740917][ T5889] ath6kl: unable to send the bmi data to the device: -71 [ 145.758948][ T5889] ath6kl: Unable to send get target info: -71 [ 145.768026][ T5889] ath6kl: Failed to init ath6kl core: -71 [ 145.804077][ T5889] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 145.846725][ T5889] usb 3-1: USB disconnect, device number 21 [ 146.018858][ T5941] net_ratelimit: 34 callbacks suppressed [ 146.018880][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 146.068797][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 146.160043][ T5985] bond1: (slave bridge1): failed to get link speed/duplex [ 146.218736][ T5905] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 146.238509][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 146.261670][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.279061][ T5985] bond1: (slave bridge1): failed to get link speed/duplex [ 146.314791][ T10] usb 1-1: config 0 descriptor?? [ 146.409732][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 146.428778][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 146.477020][ T5889] usb 4-1: USB disconnect, device number 17 [ 146.506436][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 146.528775][ T3720] bond1: (slave bridge1): failed to get link speed/duplex [ 146.548758][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.586466][ T5905] usb 5-1: config 0 descriptor?? [ 146.646481][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 146.800000][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 146.970130][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 147.043997][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.053076][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.076013][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 147.082190][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.098812][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 147.124119][ T5905] usb 5-1: USB disconnect, device number 20 [ 147.218785][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 147.218805][ T5940] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 147.362553][ T6730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 147.378775][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 147.386114][ T5940] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 147.395519][ T5940] usb 3-1: config 0 has no interface number 0 [ 147.408986][ T5940] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.424345][ T5940] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 147.433953][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.443019][ T5940] usb 3-1: Product: syz [ 147.447405][ T5940] usb 3-1: Manufacturer: syz [ 147.452769][ T5940] usb 3-1: SerialNumber: syz [ 147.461716][ T5940] usb 3-1: config 0 descriptor?? [ 147.479885][ T5940] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 147.491583][ T5940] em28xx 3-1:0.132: Video interface 132 found: [ 147.500150][ T5889] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.585244][ T10] usb 1-1: Cannot read MAC address [ 147.590939][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 147.616097][ T10] usb 1-1: USB disconnect, device number 22 [ 147.659713][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 147.695713][ T5889] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 147.719282][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.727351][ T5889] usb 2-1: Product: syz [ 147.742607][ T5889] usb 2-1: Manufacturer: syz [ 147.747376][ T5940] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 147.754018][ T5889] usb 2-1: SerialNumber: syz [ 147.769386][ T5889] usb 2-1: config 0 descriptor?? [ 147.783936][ T5889] gspca_main: sq905-2.14.0 probing 2770:9120 [ 147.834801][ T5940] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 147.845796][ T5940] em28xx 3-1:0.132: board has no eeprom [ 147.928073][ T6740] input: syz1 as /devices/virtual/input/input13 [ 147.935039][ T5940] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 147.935071][ T5940] em28xx 3-1:0.132: analog set to bulk mode. [ 147.951319][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 147.997850][ T5940] usb 3-1: USB disconnect, device number 22 [ 148.013861][ T5940] em28xx 3-1:0.132: Disconnecting em28xx [ 148.108968][ T5922] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 148.145717][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 148.153350][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 148.161456][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 148.199546][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.219976][ T10] usb 3-1: Decoder not found [ 148.239011][ T10] em28xx 3-1:0.132: failed to create media graph [ 148.246895][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.259578][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 148.304256][ T5922] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.311920][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 148.337683][ T5940] em28xx 3-1:0.132: Closing input extension [ 148.350066][ T5922] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.374964][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.396616][ T30] audit: type=1326 audit(1765848355.061:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 148.400059][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.431322][ T5940] em28xx 3-1:0.132: Freeing device [ 148.480321][ T5889] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 148.488083][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.512815][ T5922] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.528961][ T5889] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 148.549236][ T30] audit: type=1326 audit(1765848355.061:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 148.578676][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.598795][ T5922] usb 4-1: Product: syz [ 148.603004][ T5922] usb 4-1: Manufacturer: syz [ 148.651624][ T30] audit: type=1326 audit(1765848355.121:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 148.655657][ T5889] usb 2-1: USB disconnect, device number 17 [ 148.697209][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 148.723853][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 148.788289][ T5922] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 148.800003][ T30] audit: type=1326 audit(1765848355.121:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 148.808930][ T5940] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 148.848680][ T5922] cdc_wdm 4-1:1.0: Unknown control protocol [ 148.952117][ T30] audit: type=1326 audit(1765848355.121:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.075276][ T30] audit: type=1326 audit(1765848355.121:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.109855][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 149.135591][ T30] audit: type=1326 audit(1765848355.121:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.168764][ T5889] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 149.227357][ T30] audit: type=1326 audit(1765848355.121:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.302192][ T30] audit: type=1326 audit(1765848355.121:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.302416][ T5940] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 149.378095][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 149.396745][ T30] audit: type=1326 audit(1765848355.121:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.427295][ T5940] usb 3-1: Product: syz [ 149.431657][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 149.437548][ T5940] usb 3-1: Manufacturer: syz [ 149.453589][ T30] audit: type=1326 audit(1765848355.121:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.453792][ T5889] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 149.488764][ T5940] usb 3-1: SerialNumber: syz [ 149.506652][ T30] audit: type=1326 audit(1765848355.121:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58f749 code=0x7ffc0000 [ 149.512932][ T6755] GUP no longer grows the stack in syz.3.206 (6755): 200000011000-200000018000 (20000000e000) [ 149.550825][ T5940] usb 3-1: config 0 descriptor?? [ 149.551584][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.575449][ T30] audit: type=1326 audit(1765848355.121:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f585e58df90 code=0x7ffc0000 [ 149.601598][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) [ 149.601628][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.601648][ T6755] Call Trace: [ 149.601656][ T6755] [ 149.601664][ T6755] dump_stack_lvl+0x189/0x250 [ 149.601698][ T6755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.601722][ T6755] ? __pfx__printk+0x10/0x10 [ 149.601754][ T6755] ? find_vma+0xe7/0x160 [ 149.601799][ T6755] __get_user_pages+0x2465/0x29f0 [ 149.601848][ T6755] get_user_pages_remote+0x2f1/0xac0 [ 149.601871][ T6755] ? __pfx_mtree_load+0x10/0x10 [ 149.601914][ T6755] ? __pfx_get_user_pages_remote+0x10/0x10 [ 149.601947][ T6755] ? __access_remote_vm+0x367/0x7d0 [ 149.601981][ T6755] __access_remote_vm+0x211/0x7d0 [ 149.602013][ T6755] ? __pfx___access_remote_vm+0x10/0x10 [ 149.602047][ T6755] ? alloc_pages_noprof+0xbe/0x190 [ 149.602080][ T6755] proc_pid_cmdline_read+0x430/0x810 [ 149.602110][ T6755] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 149.602130][ T6755] ? rw_verify_area+0x2a6/0x4d0 [ 149.602160][ T6755] vfs_readv+0x5aa/0x850 [ 149.602182][ T6755] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 149.602208][ T6755] ? __pfx_vfs_readv+0x10/0x10 [ 149.602251][ T6755] ? __fget_files+0x2a/0x420 [ 149.602280][ T6755] ? __fget_files+0x3a0/0x420 [ 149.602299][ T6755] ? __fget_files+0x2a/0x420 [ 149.602325][ T6755] __x64_sys_preadv+0x197/0x2a0 [ 149.602353][ T6755] ? __pfx___x64_sys_preadv+0x10/0x10 [ 149.602382][ T6755] ? do_syscall_64+0xbe/0xf80 [ 149.602408][ T6755] do_syscall_64+0xfa/0xf80 [ 149.602429][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.602445][ T6755] ? clear_bhb_loop+0x60/0xb0 [ 149.602464][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.602479][ T6755] RIP: 0033:0x7f8f4d78f749 [ 149.602506][ T6755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.602525][ T6755] RSP: 002b:00007f8f4e570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.602551][ T6755] RAX: ffffffffffffffda RBX: 00007f8f4d9e6090 RCX: 00007f8f4d78f749 [ 149.602567][ T6755] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 149.602579][ T6755] RBP: 00007f8f4d813f91 R08: 0000000000006a76 R09: 0000000000000000 [ 149.602589][ T6755] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 149.602598][ T6755] R13: 00007f8f4d9e6128 R14: 00007f8f4d9e6090 R15: 00007f8f4db0fa28 [ 149.602623][ T6755] [ 150.027719][ T30] audit: type=1326 audit(1765848355.121:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f585e58f34b code=0x7ffc0000 [ 150.110932][ T5889] usb 5-1: config 0 has no interface number 0 [ 150.117126][ T5889] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 150.141028][ T5940] usb 3-1: USB disconnect, device number 23 [ 150.162642][ T10] usb 4-1: USB disconnect, device number 18 [ 150.206632][ T5889] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 150.216199][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.273078][ T5889] usb 5-1: Product: syz [ 150.277582][ T5889] usb 5-1: Manufacturer: syz [ 150.283547][ T5889] usb 5-1: SerialNumber: syz [ 150.307776][ T5889] usb 5-1: config 0 descriptor?? [ 150.315754][ T6754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.438807][ T5922] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 150.468726][ T5988] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 150.529420][ T6765] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.601357][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.612425][ T5922] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 150.623383][ T5988] usb 2-1: Using ep0 maxpacket: 16 [ 150.628855][ T5922] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 150.642862][ T5988] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.654508][ T5988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.654799][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.670807][ T5988] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 150.680170][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.688431][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.712153][ T5922] usb 1-1: Product: syz [ 150.717916][ T5988] usb 2-1: config 0 descriptor?? [ 150.728830][ T5922] usb 1-1: Manufacturer: syz [ 150.733515][ T5922] usb 1-1: SerialNumber: syz [ 150.739501][ T5889] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 150.778255][ T6764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.786351][ T5889] asix 5-1:0.188: probe with driver asix failed with error -32 [ 151.130465][ T1330] net_ratelimit: 29 callbacks suppressed [ 151.130487][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 151.220420][ T5940] usb 5-1: USB disconnect, device number 21 [ 151.278031][ T5922] cdc_ncm 1-1:1.0: bind() failure [ 151.308810][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 151.348917][ T5922] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 151.379194][ T5922] cdc_ncm 1-1:1.1: bind() failure [ 151.427006][ T5922] usb 1-1: USB disconnect, device number 23 [ 151.438771][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 151.580930][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 151.630804][ T6786] hfs: unable to load iocharset "io#harset" [ 151.740129][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 151.790680][ T5988] usbhid 2-1:0.0: can't add hid device: -71 [ 151.796865][ T5988] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 151.833425][ T5988] usb 2-1: USB disconnect, device number 18 [ 151.858774][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 151.997485][ T5922] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 152.003487][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 152.083361][ T5905] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 152.093320][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 152.148817][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 152.178919][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 152.191917][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.231092][ T5922] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 152.241380][ T24] usb 3-1: device descriptor read/64, error -71 [ 152.242943][ T6798] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 152.258782][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 152.272629][ T6799] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.219'. [ 152.282023][ T5922] usb 1-1: config 1 has no interface number 0 [ 152.294768][ T5905] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.310164][ T5922] usb 1-1: string descriptor 0 read error: -22 [ 152.322047][ T5922] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 152.348711][ T5905] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.363341][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.437957][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 152.458290][ T5905] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 152.497192][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 152.538391][ T5922] uvcvideo 1-1:1.206: probe with driver uvcvideo failed with error -22 [ 152.549853][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.696404][ T6794] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 152.703790][ T24] usb 3-1: device descriptor read/64, error -71 [ 152.803383][ T6795] binder: 6787:6795 ioctl c018620c 200000000000 returned -22 [ 152.816075][ T6792] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.838137][ T5905] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.919428][ T24] usb usb3-port1: attempt power cycle [ 153.191570][ T6811] tap0: tun_chr_ioctl cmd 1074025677 [ 153.222667][ T6811] tap0: linktype set to 773 [ 153.280666][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 153.309658][ T24] usb 3-1: device descriptor read/8, error -71 [ 153.558875][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 153.599495][ T24] usb 3-1: device descriptor read/8, error -71 [ 153.720536][ T24] usb usb3-port1: unable to enumerate USB device [ 153.998761][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.138715][ T24] usb 2-1: device descriptor read/64, error -71 [ 154.388808][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 154.481681][ T5905] usb 1-1: USB disconnect, device number 24 [ 154.528749][ T24] usb 2-1: device descriptor read/64, error -71 [ 154.640180][ T24] usb usb2-port1: attempt power cycle [ 154.761975][ T6823] netlink: 'syz.0.224': attribute type 4 has an invalid length. [ 154.799567][ T6825] capability: warning: `syz.2.225' uses 32-bit capabilities (legacy support in use) [ 154.842796][ T5889] usb 5-1: USB disconnect, device number 22 [ 154.941524][ T6826] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 154.999905][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 155.020176][ T24] usb 2-1: device descriptor read/8, error -71 [ 155.031938][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 155.068868][ T5905] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 155.209205][ T5889] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 155.243317][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 155.253866][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 155.265087][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 155.273671][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 155.295159][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 155.309364][ T24] usb 2-1: device descriptor read/8, error -71 [ 155.344678][ T5905] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 155.390778][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.403376][ T5905] usb 3-1: Product: syz [ 155.413649][ T5889] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 155.423704][ T5889] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 155.429249][ T24] usb usb2-port1: unable to enumerate USB device [ 155.440554][ T5889] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 155.441212][ T5905] usb 3-1: Manufacturer: syz [ 155.460982][ T5889] usb 4-1: config 150 has no interface number 0 [ 155.467479][ T5905] usb 3-1: SerialNumber: syz [ 155.467484][ T5889] usb 4-1: config 150 interface 204 has no altsetting 0 [ 155.492242][ T5889] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 155.518093][ T5905] usb 3-1: config 0 descriptor?? [ 155.523155][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.523195][ T5889] usb 4-1: Product: syz [ 155.523217][ T5889] usb 4-1: Manufacturer: syz [ 155.523234][ T5889] usb 4-1: SerialNumber: syz [ 155.567964][ T5905] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 155.585760][ T5905] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 155.777854][ T5889] usb 4-1: USB disconnect, device number 19 [ 155.786399][ T24] usb 3-1: USB disconnect, device number 28 [ 155.918747][ T5905] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 156.092648][ T5905] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.127562][ T5905] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.144592][ T5905] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.159248][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.177111][ T6838] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 156.198908][ T13] net_ratelimit: 33 callbacks suppressed [ 156.198928][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 156.201614][ T5905] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.338743][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 156.469754][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 156.546348][ T5905] usb 1-1: USB disconnect, device number 25 [ 156.600098][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 156.707546][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 156.744338][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 156.755295][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 156.870203][ T6052] bond1: (slave bridge1): failed to get link speed/duplex [ 156.918908][ T5905] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 156.980599][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 157.048947][ T5824] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 157.078860][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 157.098909][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 157.108772][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.141755][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.171013][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 157.213877][ T5905] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 157.235554][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 157.240954][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 157.258215][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.261938][ T5824] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 157.290550][ T5824] usb 3-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.302417][ T5905] usb 1-1: config 0 descriptor?? [ 157.324552][ T5824] usb 3-1: config 1 interface 0 has no altsetting 0 [ 157.341075][ T5824] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 157.352267][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.363458][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 157.378698][ T5824] usb 3-1: Product: 辆᠋벝毦鵆甁毴ᡄ䶬䙮⹸ [ 157.392789][ T5824] usb 3-1: Manufacturer: 䐊 [ 157.407911][ T5824] usb 3-1: SerialNumber: Ṋ떪싡ﾅꀓ㒸Ȣ캯ꃵ⯰퉷㙚쟾墉̛朄꾱콟枆﵇洓ᠨ앱Ἡﻳ㽗佚穮㵯렵擆샆㯯棺염誦꩝欵暠绥돣䱢跔짠ፋ勅뮊꒾ꊲ芘뎵 [ 157.713873][ T5824] usbhid 3-1:1.0: can't add hid device: -71 [ 157.747160][ T5824] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 157.772754][ T5905] sony 0003:054C:0268.000B: unknown main item tag 0x0 [ 157.779322][ T5824] usb 3-1: USB disconnect, device number 29 [ 157.794256][ T5905] sony 0003:054C:0268.000B: unknown main item tag 0x0 [ 157.806601][ T6861] input: syz0 as /devices/virtual/input/input14 [ 157.844241][ T5905] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 157.892719][ T5905] sony 0003:054C:0268.000B: failed to claim input [ 158.044039][ T5824] usb 1-1: USB disconnect, device number 26 [ 158.088737][ T5905] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 158.264281][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.274467][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 158.287716][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 158.306715][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 158.316701][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 158.328009][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.369737][ T5905] usb 4-1: config 0 descriptor?? [ 158.495333][ T6878] x_tables: duplicate underflow at hook 1 [ 158.605089][ T5905] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 158.638694][ T5905] hdpvr 4-1:0.0: device init failed [ 158.681667][ T5905] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 159.711909][ T5824] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 159.918868][ T5924] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 160.123336][ T5924] usb 2-1: config 5 has an invalid interface number: 53 but max is 3 [ 160.138580][ T5924] usb 2-1: config 5 has an invalid interface number: 85 but max is 3 [ 160.168400][ T5924] usb 2-1: config 5 has an invalid interface number: 27 but max is 3 [ 160.199030][ T5924] usb 2-1: config 5 has an invalid interface number: 108 but max is 3 [ 160.230376][ T5924] usb 2-1: config 5 has an invalid interface number: 184 but max is 3 [ 160.261938][ T5924] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 160.282341][ T5924] usb 2-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 160.306472][ T5924] usb 2-1: config 5 has no interface number 0 [ 160.336005][ T5924] usb 2-1: config 5 has no interface number 1 [ 160.362140][ T5924] usb 2-1: config 5 has no interface number 2 [ 160.368553][ T5924] usb 2-1: config 5 has no interface number 3 [ 160.391491][ T5924] usb 2-1: config 5 has no interface number 4 [ 160.397805][ T5924] usb 2-1: config 5 interface 53 altsetting 240 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 160.418528][ T5924] usb 2-1: config 5 interface 85 altsetting 255 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 160.434965][ T5924] usb 2-1: config 5 interface 27 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 160.477418][ T5924] usb 2-1: config 5 interface 27 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 160.518044][ T5924] usb 2-1: too many endpoints for config 5 interface 108 altsetting 88: 230, using maximum allowed: 30 [ 160.546278][ T5924] usb 2-1: config 5 interface 108 altsetting 88 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 160.586063][ T5924] usb 2-1: config 5 interface 108 altsetting 88 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 160.614901][ T5924] usb 2-1: config 5 interface 108 altsetting 88 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 160.645591][ T5924] usb 2-1: config 5 interface 108 altsetting 88 endpoint 0x8A has an invalid bInterval 116, changing to 10 [ 160.662297][ T6919] netlink: 404 bytes leftover after parsing attributes in process `syz.4.247'. [ 160.673067][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.247'. [ 160.682431][ T5924] usb 2-1: config 5 interface 108 altsetting 88 endpoint 0x8A has invalid maxpacket 9374, setting to 1024 [ 160.698815][ T5924] usb 2-1: config 5 interface 108 altsetting 88 has a duplicate endpoint with address 0x6, skipping [ 160.723106][ T5924] usb 2-1: config 5 interface 108 altsetting 88 has an invalid descriptor for endpoint zero, skipping [ 160.736141][ T5924] usb 2-1: config 5 interface 108 altsetting 88 has 7 endpoint descriptors, different from the interface descriptor's value: 230 [ 160.782124][ T40] usb 4-1: USB disconnect, device number 20 [ 160.788586][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 160.828419][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 160.852471][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 160.864048][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 160.875500][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 160.889541][ T5924] usb 2-1: config 5 interface 184 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 160.948854][ T5924] usb 2-1: config 5 interface 53 has no altsetting 0 [ 160.955631][ T5924] usb 2-1: config 5 interface 85 has no altsetting 0 [ 160.979247][ T5924] usb 2-1: config 5 interface 27 has no altsetting 0 [ 160.985996][ T5924] usb 2-1: config 5 interface 108 has no altsetting 0 [ 160.989153][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 161.001965][ T5924] usb 2-1: config 5 interface 184 has no altsetting 0 [ 161.014116][ T5924] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=ab.63 [ 161.058920][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.085206][ T5924] usb 2-1: Product: я [ 161.112522][ T5924] usb 2-1: Manufacturer: Й [ 161.117110][ T5924] usb 2-1: SerialNumber: 푕뭣턦腤셅ݔשׁ伹ੀ㉀鯪햗᪨휕뒤뚱봄嫙讫ꙡ䊊푿ቒ쮵쨉잤涵ᕷ朷ퟲ突–᭺◙ୄ堆떉ଊ汛탯歝薂ỎᓯҒ爸轨啂鱇塟ⱐ姞ﶖ抦㯰皁ᥖ짟썸혾敒壇ꒂ扰無뱏礶๡놾墫քꡪꯔᢠἜ㼯鵠 [ 161.189395][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 161.201115][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.212491][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.251155][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.267877][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.292970][ T10] usb 5-1: Product: syz [ 161.298076][ T10] usb 5-1: Manufacturer: syz [ 161.308682][ T10] usb 5-1: SerialNumber: syz [ 161.313479][ T6170] net_ratelimit: 33 callbacks suppressed [ 161.313499][ T6170] bond1: (slave bridge1): failed to get link speed/duplex [ 161.405008][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 161.449138][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 161.501604][ T5924] usb 2-1: USB disconnect, device number 23 [ 161.543596][ T10] usb 5-1: 0:2 : does not exist [ 161.559113][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 161.576055][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 161.628583][ T10] usb 5-1: USB disconnect, device number 23 [ 161.687531][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.707963][ T6170] bond1: (slave bridge1): failed to get link speed/duplex [ 161.819560][ T4405] bond1: (slave bridge1): failed to get link speed/duplex [ 161.938811][ T4405] bond1: (slave bridge1): failed to get link speed/duplex [ 162.058834][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 162.178875][ T4405] bond1: (slave bridge1): failed to get link speed/duplex [ 162.322302][ T5824] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 162.331360][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 162.372160][ T6958] binder: 6950:6958 ioctl 4018620d 0 returned -22 [ 162.380210][ T6958] binder: 6950:6958 ioctl c018620c 200000000380 returned -1 [ 162.405858][ T6958] loop9: detected capacity change from 0 to 7 [ 162.443055][ T6604] bond1: (slave bridge1): failed to get link speed/duplex [ 162.461432][ T6958] Dev loop9: unable to read RDB block 7 [ 162.478202][ T6958] loop9: unable to read partition table [ 162.502132][ T6958] loop9: partition table beyond EOD, truncated [ 162.509385][ T6958] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 162.624242][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 162.635852][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.647417][ T5824] usb 1-1: config 127 has an invalid interface number: 158 but max is 0 [ 162.656555][ T5824] usb 1-1: config 127 has no interface number 0 [ 162.676659][ T5824] usb 1-1: config 127 interface 158 has no altsetting 0 [ 162.694631][ T5824] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 162.728729][ T5924] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 162.731341][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.746674][ T5824] usb 1-1: Product: syz [ 162.751031][ T5824] usb 1-1: Manufacturer: syz [ 162.801975][ T5824] usb 1-1: SerialNumber: syz [ 162.868986][ T5924] usb 5-1: device descriptor read/64, error -71 [ 162.958787][ T5889] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 163.035812][ T5824] comedi comedi5: could not switch to alternate setting 1 [ 163.050081][ T5824] usbduxfast 1-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 163.072906][ T5824] usb 1-1: USB disconnect, device number 28 [ 163.110748][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.124941][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 163.139089][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 163.158724][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 163.179285][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 163.198719][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.222082][ T5889] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 163.240425][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.255160][ T5889] usb 4-1: Product: syz [ 163.263062][ T5889] usb 4-1: Manufacturer: syz [ 163.274330][ T5889] usb 4-1: SerialNumber: syz [ 163.286776][ T5889] usb 4-1: config 0 descriptor?? [ 163.301646][ T5924] usb 5-1: device descriptor read/64, error -71 [ 163.306242][ T5889] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 163.332271][ T5889] imon 4-1:0.0: unable to initialize intf0, err -90 [ 163.348814][ T5889] imon:imon_probe: failed to initialize context! [ 163.358385][ T5889] imon 4-1:0.0: unable to register, err -19 [ 163.413252][ T5924] usb usb5-port1: attempt power cycle [ 163.508528][ T5889] usb 4-1: USB disconnect, device number 21 [ 163.532739][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 163.759754][ T6972] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 163.845449][ T5924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 163.902128][ T5924] usb 5-1: device descriptor read/8, error -71 [ 164.558701][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 164.592510][ T5924] usb 5-1: device descriptor read/8, error -71 [ 164.720097][ T5924] usb usb5-port1: unable to enumerate USB device [ 165.167498][ T40] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 165.628736][ T40] usb 1-1: device descriptor read/64, error -71 [ 166.124320][ T40] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 166.327544][ T7001] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 166.346370][ T7002] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 166.371124][ T13] net_ratelimit: 20 callbacks suppressed [ 166.371143][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 166.384108][ T40] usb 1-1: device descriptor read/64, error -71 [ 166.500538][ T40] usb usb1-port1: attempt power cycle [ 166.528789][ T5987] bond1: (slave bridge1): failed to get link speed/duplex [ 166.638874][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 166.759410][ T5987] bond1: (slave bridge1): failed to get link speed/duplex [ 166.859581][ T40] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 166.882383][ T3439] bond1: (slave bridge1): failed to get link speed/duplex [ 166.898340][ T40] usb 1-1: device descriptor read/8, error -71 [ 166.931115][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 166.959417][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 167.003819][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 167.059329][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 167.098847][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 167.158743][ T40] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 167.189459][ T40] usb 1-1: device descriptor read/8, error -71 [ 167.219042][ T5987] bond1: (slave bridge1): failed to get link speed/duplex [ 167.300003][ T40] usb usb1-port1: unable to enumerate USB device [ 167.328786][ T5987] bond1: (slave bridge1): failed to get link speed/duplex [ 167.476924][ T6196] bond1: (slave bridge1): failed to get link speed/duplex [ 167.578761][ T5921] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 167.591435][ T7026] netlink: 464 bytes leftover after parsing attributes in process `syz.4.275'. [ 167.619175][ T7026] netlink: 124 bytes leftover after parsing attributes in process `syz.4.275'. [ 167.631351][ T1004] bond1: (slave bridge1): failed to get link speed/duplex [ 167.793656][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.806734][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 167.818860][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 167.840888][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 167.851233][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.986782][ T5921] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 168.017715][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 168.170921][ T5921] usb 3-1: Product: syz [ 168.175125][ T5921] usb 3-1: Manufacturer: syz [ 168.187343][ T7031] fuse: Unknown parameter 'u԰Eser_id' [ 168.202111][ T7031] random: crng reseeded on system resumption [ 168.229089][ T5921] usb 3-1: SerialNumber: syz [ 168.247995][ T5921] usb 3-1: config 0 descriptor?? [ 168.581266][ T5921] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 168.624770][ T5921] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 168.783945][ T5921] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 168.791685][ T5921] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 169.039481][ T5921] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 169.209578][ T5921] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 169.556000][ T7044] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 169.706582][ T7044] bond1: entered promiscuous mode [ 169.738930][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 169.781226][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.050333][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.072206][ T7046] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 170.112230][ T7046] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 170.129069][ T5922] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 170.145249][ T7046] bond1: (slave ip6gre1): making interface the new active one [ 170.218731][ T7046] ip6gre1: entered promiscuous mode [ 170.237696][ T7046] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 170.325358][ T5922] usb 2-1: device descriptor read/64, error -71 [ 170.592746][ T7047] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 170.598769][ T5922] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 170.620336][ T7047] ip6gre1: left promiscuous mode [ 170.638547][ T7047] bond1 (unregistering): Released all slaves [ 170.748707][ T5922] usb 2-1: device descriptor read/64, error -71 [ 170.753206][ T5921] usb 3-1: USB disconnect, device number 30 [ 170.890099][ T5922] usb usb2-port1: attempt power cycle [ 171.060684][ T7067] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.071390][ T7067] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.239060][ T5922] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 171.259672][ T5922] usb 2-1: device descriptor read/8, error -71 [ 171.278717][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 171.418786][ T24] usb 5-1: device descriptor read/64, error -71 [ 171.478811][ T5941] net_ratelimit: 13 callbacks suppressed [ 171.478893][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 171.499189][ T5922] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 171.546208][ T5922] usb 2-1: device descriptor read/8, error -71 [ 171.619211][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 171.659172][ T5922] usb usb2-port1: unable to enumerate USB device [ 171.677362][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 171.729216][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 171.799180][ T5889] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 171.809031][ T24] usb 5-1: device descriptor read/64, error -71 [ 171.839137][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 171.919942][ T24] usb usb5-port1: attempt power cycle [ 171.949098][ T7079] bond1: (slave bridge1): failed to get link speed/duplex [ 171.958935][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 171.966861][ T5889] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 171.977704][ T5889] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 171.986994][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 171.996571][ T5889] usb 3-1: config 1 has no interface number 0 [ 172.005403][ T5889] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.017433][ T5889] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 172.031256][ T5889] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 172.041107][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.064256][ T5889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 172.070931][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 172.179038][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 172.260576][ T5889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 172.269386][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 172.289089][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 172.310583][ T24] usb 5-1: device descriptor read/8, error -71 [ 172.399702][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 172.462255][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.471288][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.518823][ T5982] bond1: (slave bridge1): failed to get link speed/duplex [ 172.548731][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 172.570432][ T24] usb 5-1: device descriptor read/8, error -71 [ 172.629233][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 172.689136][ T24] usb usb5-port1: unable to enumerate USB device [ 172.712857][ T24] usb 3-1: USB disconnect, device number 31 [ 172.730049][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 172.793186][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.805195][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.823781][ T5924] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 172.833526][ T5924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.841995][ T5924] usb 4-1: Manufacturer: syz [ 172.875535][ T5924] usb 4-1: config 0 descriptor?? [ 173.332460][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.359020][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.366420][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.374742][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.382598][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.391266][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.398303][ T5924] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 173.422159][ T5924] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 173.788759][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 173.951956][ T5924] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 173.972052][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.980436][ T5924] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 173.994877][ T7113] team0: Port device batadv1 added [ 174.006007][ T5924] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -5 [ 174.028775][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 174.040687][ T5889] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 174.057350][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.087586][ T5889] usb 2-1: config 0 descriptor?? [ 174.375434][ T5889] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 174.483520][ T5889] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 174.514043][ T5889] dib0700: firmware download failed at 7 with -22 [ 174.577762][ T5905] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.648827][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 174.778010][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 174.802860][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 174.802919][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.825248][ T9] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 174.833904][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.844270][ T9] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 174.853762][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.855917][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 174.875394][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.920610][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.923017][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 174.949006][ T9] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 174.959160][ T9] usb 5-1: Product: syz [ 174.963469][ T9] usb 5-1: Manufacturer: syz [ 174.965235][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.996707][ T5905] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.997417][ T9] usb 5-1: config 0 descriptor?? [ 175.023733][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 175.034351][ T5905] usb 1-1: Manufacturer: syz [ 175.043042][ T9] usb 5-1: Detected FT2232C/D [ 175.057791][ T5905] usb 1-1: config 0 descriptor?? [ 175.429348][ T5905] rc_core: IR keymap rc-hauppauge not found [ 175.435341][ T5905] Registered IR keymap rc-empty [ 175.445155][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.489341][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.522694][ T5889] usb 4-1: USB disconnect, device number 22 [ 175.552165][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 175.610808][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 175.732455][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.770533][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.798785][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.819041][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.838822][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.868787][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.889546][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.920153][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.958765][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.978834][ T5905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.004634][ T5905] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 176.031958][ T5905] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.058739][ T5889] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.065591][ T5905] usb 1-1: USB disconnect, device number 33 [ 176.179122][ T40] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 176.224789][ T5889] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 176.238196][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.263970][ T5889] usb 4-1: Product: syz [ 176.271840][ T5889] usb 4-1: Manufacturer: syz [ 176.282686][ T5889] usb 4-1: SerialNumber: syz [ 176.301398][ T5889] usb 4-1: config 0 descriptor?? [ 176.317287][ T5889] ch341 4-1:0.0: ch341-uart converter detected [ 176.318768][ T40] usb 3-1: device descriptor read/64, error -71 [ 176.569091][ T40] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 176.588909][ T13] net_ratelimit: 33 callbacks suppressed [ 176.588932][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 176.698939][ T40] usb 3-1: device descriptor read/64, error -71 [ 176.710028][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 176.809596][ T40] usb usb3-port1: attempt power cycle [ 176.828847][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 176.950083][ T7078] bond1: (slave bridge1): failed to get link speed/duplex [ 177.059284][ T7078] bond1: (slave bridge1): failed to get link speed/duplex [ 177.159624][ T40] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 177.168820][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 177.179538][ T40] usb 3-1: device descriptor read/8, error -71 [ 177.278788][ T7078] bond1: (slave bridge1): failed to get link speed/duplex [ 177.295552][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 177.325791][ T5889] ch341-uart ttyUSB1: break control not supported, using simulated break [ 177.339882][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 177.363834][ T5889] usb 4-1: ch341-uart converter now attached to ttyUSB1 [ 177.371221][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 177.404920][ T5889] usb 4-1: USB disconnect, device number 23 [ 177.414375][ T9] usb 5-1: USB disconnect, device number 32 [ 177.429558][ T40] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 177.441523][ T5889] ch341-uart ttyUSB1: ch341-uart converter now disconnected from ttyUSB1 [ 177.453555][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 177.463718][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.484897][ T5889] ch341 4-1:0.0: device disconnected [ 177.500537][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.509655][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 177.520168][ T9] ftdi_sio 5-1:0.0: device disconnected [ 177.559311][ T10] usb 2-1: USB disconnect, device number 28 [ 177.569101][ T40] usb 3-1: device descriptor read/8, error -71 [ 177.670203][ T7078] bond1: (slave bridge1): failed to get link speed/duplex [ 177.709193][ T40] usb usb3-port1: unable to enumerate USB device [ 177.799059][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 177.888848][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 178.048733][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 178.056539][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 178.069775][ T9] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 178.084673][ T9] usb 5-1: config 0 has no interface number 1 [ 178.108844][ T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 178.118287][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.126608][ T9] usb 5-1: Product: syz [ 178.131367][ T9] usb 5-1: Manufacturer: syz [ 178.136124][ T9] usb 5-1: SerialNumber: syz [ 178.153550][ T9] usb 5-1: config 0 descriptor?? [ 178.214418][ T9] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 178.230691][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 178.244430][ T10] usb 2-1: config 0 has no interface number 0 [ 178.262191][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.271681][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.281154][ T10] usb 2-1: Product: syz [ 178.285678][ T10] usb 2-1: Manufacturer: syz [ 178.292273][ T10] usb 2-1: SerialNumber: syz [ 178.313026][ T10] usb 2-1: config 0 descriptor?? [ 178.319045][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.380185][ T9] usb 5-1: USB disconnect, device number 33 [ 178.890795][ T10] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 179.468757][ T5922] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 179.730819][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.747621][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.762916][ T5922] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 179.772664][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.872285][ T5922] usb 5-1: config 0 descriptor?? [ 179.936909][ T10] usb 2-1: failed to fetch extended address, random address set [ 180.057621][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 180.297049][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.470267][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.558047][ T5922] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 180.636956][ T5922] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 180.684199][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000D/input/input17 [ 180.771614][ T5922] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 180.796022][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.806989][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.953753][ T5924] usb 2-1: USB disconnect, device number 29 [ 180.993394][ T5922] usb 5-1: USB disconnect, device number 34 [ 180.997480][ T7192] netlink: 'syz.0.313': attribute type 21 has an invalid length. [ 181.056035][ T7192] netlink: 128 bytes leftover after parsing attributes in process `syz.0.313'. [ 181.226661][ T7192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.313'. [ 181.404275][ T7191] fido_id[7191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 181.449144][ T7197] syzkaller1: entered promiscuous mode [ 181.464862][ T7197] syzkaller1: entered allmulticast mode [ 181.516774][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 181.716564][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.840052][ T7199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.849566][ T7199] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 181.904022][ T7199] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 181.918770][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 181.988764][ T3654] net_ratelimit: 28 callbacks suppressed [ 181.988789][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 182.149010][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 182.178857][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 182.190261][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.233023][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 182.259106][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 182.268664][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 182.310074][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 182.337736][ T9] usb 5-1: config 128 has no interface number 0 [ 182.358859][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 182.378828][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 182.426575][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 182.474570][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 182.488993][ T6598] bond1: (slave bridge1): failed to get link speed/duplex [ 182.499617][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.524040][ T9] usb 5-1: Product: syz [ 182.539407][ T9] usb 5-1: Manufacturer: syz [ 182.544129][ T9] usb 5-1: SerialNumber: syz [ 182.584521][ T7201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.628770][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 182.733397][ T7218] bond2: option primary_reselect: invalid value (13) [ 182.784439][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 182.805399][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.836484][ T7218] bond2 (unregistering): Released all slaves [ 182.870639][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.947926][ T7230] netlink: 'syz.2.324': attribute type 8 has an invalid length. [ 182.958230][ T9] usb 5-1: USB disconnect, device number 35 [ 182.964566][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 182.971825][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 182.974255][ T5924] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 182.999236][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 183.024450][ T5924] usb 2-1: config 0 has no interface number 0 [ 183.039931][ T5924] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 183.076984][ T5924] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 183.079397][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.096639][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.125901][ T5924] usb 2-1: Product: syz [ 183.131989][ T7230] bond0: entered promiscuous mode [ 183.138720][ T7230] bond_slave_0: entered promiscuous mode [ 183.144801][ T7230] bond_slave_1: entered promiscuous mode [ 183.182505][ T5924] usb 2-1: Manufacturer: syz [ 183.189961][ T7230] bond0: left promiscuous mode [ 183.194812][ T7230] bond_slave_0: left promiscuous mode [ 183.200528][ T5924] usb 2-1: SerialNumber: syz [ 183.208329][ T5924] usb 2-1: config 0 descriptor?? [ 183.214511][ T7230] bond_slave_1: left promiscuous mode [ 183.221527][ T7216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.258785][ T6598] bond1: (slave bridge1): failed to get link speed/duplex [ 183.299605][ T7236] netlink: 27 bytes leftover after parsing attributes in process `syz.3.325'. [ 183.368958][ T1330] bond1: (slave bridge1): failed to get link speed/duplex [ 183.441365][ T7216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.500107][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 183.529230][ T40] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 183.642314][ T7250] tipc: Started in network mode [ 183.647489][ T7250] tipc: Node identity e6b3c1b0f5df, cluster identity 4711 [ 183.655289][ T7250] tipc: Enabled bearer , priority 0 [ 183.663854][ T7250] syzkaller0: entered promiscuous mode [ 183.670161][ T7250] syzkaller0: entered allmulticast mode [ 183.689642][ T40] usb 1-1: device descriptor read/64, error -71 [ 183.700317][ T7250] tipc: Resetting bearer [ 183.709752][ T7249] tipc: Resetting bearer [ 183.735938][ T7249] tipc: Disabling bearer [ 183.818783][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 183.878280][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.331'. [ 183.941152][ T40] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 183.992997][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 184.002564][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.011463][ T24] usb 5-1: Product: syz [ 184.018721][ T24] usb 5-1: Manufacturer: syz [ 184.023442][ T24] usb 5-1: SerialNumber: syz [ 184.045491][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 184.073241][ T5922] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.089559][ T40] usb 1-1: device descriptor read/64, error -71 [ 184.138783][ T5988] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 184.209288][ T40] usb usb1-port1: attempt power cycle [ 184.296053][ T7248] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 184.311475][ T5988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.322136][ T5988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.334579][ T5988] usb 3-1: config 1 has no interface number 0 [ 184.341225][ T5988] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.361840][ T5988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.366906][ T7248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.372173][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.395915][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 184.405676][ T5988] usb 3-1: Product: syz [ 184.413763][ T5988] usb 3-1: Manufacturer: syz [ 184.424934][ T5988] usb 3-1: SerialNumber: syz [ 184.444781][ T5988] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 184.461978][ T5988] cdc_ncm 3-1:1.1: bind() failure [ 184.510230][ T5921] usb 5-1: USB disconnect, device number 36 [ 184.549113][ T40] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 184.571335][ T40] usb 1-1: device descriptor read/8, error -71 [ 184.578329][ T7263] netlink: 'syz.3.336': attribute type 43 has an invalid length. [ 184.651336][ T9] usb 3-1: USB disconnect, device number 36 [ 184.808772][ T40] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 184.839498][ T40] usb 1-1: device descriptor read/8, error -71 [ 184.949125][ T40] usb usb1-port1: unable to enumerate USB device [ 185.129000][ T5922] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 185.195584][ T5922] ath9k_htc: Failed to initialize the device [ 185.256503][ T5921] usb 5-1: ath9k_htc: USB layer deinitialized [ 185.278496][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.327491][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.668791][ T5922] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 185.798931][ T5921] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 185.816476][ T5922] usb 3-1: device descriptor read/64, error -71 [ 185.828788][ T5924] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 185.859125][ T5924] asix 2-1:0.188: probe with driver asix failed with error -71 [ 185.894061][ T5924] usb 2-1: USB disconnect, device number 30 [ 185.954816][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 185.967815][ T5921] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 185.980270][ T5921] usb 5-1: config 0 has no interface number 0 [ 185.991673][ T5921] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 186.001122][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.010331][ T5921] usb 5-1: Product: syz [ 186.018720][ T5921] usb 5-1: Manufacturer: syz [ 186.025229][ T5921] usb 5-1: SerialNumber: syz [ 186.038857][ T5921] usb 5-1: config 0 descriptor?? [ 186.047565][ T5921] ttusb_dec_send_command: command bulk message failed: error -22 [ 186.056792][ T5921] ttusb-dec 5-1:0.248: probe with driver ttusb-dec failed with error -22 [ 186.088866][ T5922] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 186.238703][ T5922] usb 3-1: device descriptor read/64, error -71 [ 186.281149][ T5924] usb 5-1: USB disconnect, device number 37 [ 186.399139][ T5922] usb usb3-port1: attempt power cycle [ 186.748752][ T5922] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 186.779591][ T5922] usb 3-1: device descriptor read/8, error -71 [ 187.018803][ T5922] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 187.027529][ T13] net_ratelimit: 26 callbacks suppressed [ 187.027545][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 187.077762][ T5922] usb 3-1: device descriptor read/8, error -71 [ 187.148744][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 187.199055][ T5922] usb usb3-port1: unable to enumerate USB device [ 187.252144][ T40] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 187.268717][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 187.388780][ T37] bond1: (slave bridge1): failed to get link speed/duplex [ 187.422014][ T5922] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 187.448862][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 187.456608][ T40] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 187.468775][ T40] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.498709][ T40] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.506948][ T40] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.508790][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 187.536607][ T40] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.558841][ T40] usb 5-1: config 0 has no interface number 0 [ 187.573387][ T40] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 187.588361][ T5922] usb 2-1: device descriptor read/64, error -71 [ 187.615027][ T40] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 187.635350][ T40] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.655686][ T40] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.679140][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 187.696596][ T40] usb 5-1: too many endpoints for config 0 interface 125 altsetting 2: 253, using maximum allowed: 30 [ 187.737247][ T40] usb 5-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 187.770535][ T40] usb 5-1: config 0 interface 125 has no altsetting 0 [ 187.784513][ T40] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 187.810660][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.821980][ T40] usb 5-1: Product: syz [ 187.830338][ T40] usb 5-1: Manufacturer: syz [ 187.835719][ T40] usb 5-1: SerialNumber: syz [ 187.838886][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 187.841482][ T5922] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 187.866463][ T40] usb 5-1: config 0 descriptor?? [ 187.887236][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'. [ 187.958885][ T5941] bond1: (slave bridge1): failed to get link speed/duplex [ 188.020209][ T5922] usb 2-1: device descriptor read/64, error -71 [ 188.068872][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 188.090867][ C1] usb 5-1: async_complete: urb error -71 [ 188.096865][ C1] usb 5-1: async_complete: urb error -71 [ 188.118268][ C1] usb 5-1: async_complete: urb error -71 [ 188.124111][ C1] usb 5-1: async_complete: urb error -71 [ 188.138558][ T40] get_1284_register: usb error -71 [ 188.144258][ T5922] usb usb2-port1: attempt power cycle [ 188.155366][ T40] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 188.188859][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 188.222147][ T40] usb 5-1: USB disconnect, device number 38 [ 188.508907][ T5922] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 188.539462][ T5922] usb 2-1: device descriptor read/8, error -71 [ 188.786077][ T5922] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 188.829374][ T5922] usb 2-1: device descriptor read/8, error -71 [ 188.939317][ T5922] usb usb2-port1: unable to enumerate USB device [ 189.178721][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 189.331152][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.338470][ T9] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 189.349807][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.367400][ T9] usb 5-1: config 0 descriptor?? [ 189.715865][ T7347] syz.0.358 (7347): attempted to duplicate a private mapping with mremap. This is not supported. [ 189.816902][ T9] sony 0003:1430:07BB.000E: unknown main item tag 0x0 [ 189.859926][ T9] sony 0003:1430:07BB.000E: unknown main item tag 0x0 [ 189.866791][ T9] sony 0003:1430:07BB.000E: unknown main item tag 0x0 [ 189.889309][ T9] sony 0003:1430:07BB.000E: hidraw0: USB HID v0.06 Device [HID 1430:07bb] on usb-dummy_hcd.4-1/input0 [ 189.918071][ T9] sony 0003:1430:07BB.000E: failed to claim input [ 190.013071][ T9] usb 5-1: USB disconnect, device number 39 [ 190.039915][ T7348] fido_id[7348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 191.257913][ T7372] kvm: pic: level sensitive irq not supported [ 191.258338][ T7372] kvm: pic: non byte read [ 191.270128][ T7372] kvm: pic: level sensitive irq not supported [ 191.270208][ T7372] kvm: pic: non byte read [ 192.059018][ T3720] net_ratelimit: 33 callbacks suppressed [ 192.059035][ T3720] bond1: (slave bridge1): failed to get link speed/duplex [ 192.189044][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 192.332121][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 192.449150][ T3720] bond1: (slave bridge1): failed to get link speed/duplex [ 192.478842][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 192.569936][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 192.629174][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 192.638252][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.652724][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 192.667351][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.684972][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 58176, setting to 1024 [ 192.698452][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 192.710504][ T24] usb 4-1: config 1 interface 2 has no altsetting 0 [ 192.723288][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.735945][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.744853][ T24] usb 4-1: Product: syz [ 192.751255][ T24] usb 4-1: Manufacturer: syz [ 192.756173][ T24] usb 4-1: SerialNumber: syz [ 192.818744][ T7082] bond1: (slave bridge1): failed to get link speed/duplex [ 192.827006][ T5889] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 192.938746][ T7082] bond1: (slave bridge1): failed to get link speed/duplex [ 192.998809][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 193.013280][ T5889] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 193.031259][ T5889] usb 2-1: config 0 has no interface number 0 [ 193.057033][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 193.068751][ T3720] bond1: (slave bridge1): failed to get link speed/duplex [ 193.086749][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.088280][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 193.096533][ T5889] usb 2-1: Product: syz [ 193.096555][ T5889] usb 2-1: Manufacturer: syz [ 193.096573][ T5889] usb 2-1: SerialNumber: syz [ 193.132029][ T5889] usb 2-1: config 0 descriptor?? [ 193.145858][ T5889] hub 2-1:0.132: bad descriptor, ignoring hub [ 193.161834][ T24] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 193.168443][ T5889] hub 2-1:0.132: probe with driver hub failed with error -5 [ 193.177774][ T24] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 193.186706][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 193.196871][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 193.204730][ T24] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 193.205359][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input18 [ 193.223637][ T24] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 193.225092][ T7389] fuse: Unknown parameter '0x0000000000000003' [ 193.241281][ T24] usb 4-1: selecting invalid altsetting 0 [ 193.249373][ T24] usb 4-1: selecting invalid altsetting 0 [ 193.307011][ T24] usb 4-1: USB disconnect, device number 24 [ 193.459136][ T7393] hub 9-0:1.0: USB hub found [ 193.483915][ T7393] hub 9-0:1.0: 1 port detected [ 193.792574][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 194.047811][ T7406] sctp: [Deprecated]: syz.2.372 (pid 7406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.047811][ T7406] Use struct sctp_sack_info instead [ 194.617281][ T7411] cifs: Unknown parameter 'fd' [ 194.668746][ T5897] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 194.689539][ T7416] cifs: Unknown parameter 'fd' [ 194.856580][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 194.873292][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 194.895600][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.915720][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.976585][ T7409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.991257][ T7409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.022631][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.274979][ T5897] usb 4-1: USB disconnect, device number 25 [ 195.882810][ T7437] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 195.978768][ T10] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 196.141708][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.650824][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.667777][ T10] usb 1-1: config 0 has no interface number 0 [ 196.679875][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.694730][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 196.705802][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 196.717227][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.853619][ T10] usb 1-1: config 0 descriptor?? [ 196.869666][ T10] ldusb 1-1:0.55: Interrupt in endpoint not found [ 196.958753][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 197.066296][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.076282][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.088493][ T10] usb 1-1: USB disconnect, device number 38 [ 197.163385][ T13] net_ratelimit: 28 callbacks suppressed [ 197.163402][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 197.289001][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 197.389563][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 197.400120][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 197.518806][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 197.568824][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 197.576320][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.584947][ T10] usb 1-1: config 0 has no interface number 0 [ 197.591333][ T10] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 197.604171][ T10] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 197.614532][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 197.625682][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 197.635061][ T7082] bond1: (slave bridge1): failed to get link speed/duplex [ 197.642433][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.650675][ T10] usb 1-1: SerialNumber: syz [ 197.657669][ T10] usb 1-1: config 0 descriptor?? [ 197.672555][ T10] hso 1-1:0.1: Failed to find BULK OUT ep [ 197.748769][ T5982] bond1: (slave bridge1): failed to get link speed/duplex [ 197.793745][ T5889] usb 2-1: USB disconnect, device number 35 [ 197.860759][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 197.878804][ T10] usb 1-1: USB disconnect, device number 39 [ 197.998929][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 198.012012][ T9] usb 4-1: device descriptor read/64, error -71 [ 198.118753][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 198.228849][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 198.258758][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 198.398803][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 198.407221][ T9] usb 4-1: device descriptor read/64, error -71 [ 198.530191][ T9] usb usb4-port1: attempt power cycle [ 198.571066][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 198.587038][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.608936][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.619662][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 198.630609][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.647193][ T10] usb 3-1: config 0 descriptor?? [ 198.669631][ T7463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.387'. [ 198.889223][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 198.919592][ T9] usb 4-1: device descriptor read/8, error -71 [ 199.192027][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 199.220959][ T9] usb 4-1: device descriptor read/8, error -71 [ 199.341454][ T9] usb usb4-port1: unable to enumerate USB device [ 199.418792][ T5924] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 199.452385][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.459353][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.581458][ T5924] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.591272][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.611747][ T5924] usb 5-1: config 0 descriptor?? [ 199.627824][ T5924] cp210x 5-1:0.0: cp210x converter detected [ 199.640118][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 199.801827][ T9] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 199.854740][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.907024][ T9] usb 1-1: config 0 has no interface number 0 [ 199.916084][ T9] usb 1-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 199.945529][ T9] usb 1-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 199.979068][ T9] usb 1-1: config 0 interface 48 has no altsetting 0 [ 199.988807][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 2.df [ 199.998360][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.052240][ T9] usb 1-1: config 0 descriptor?? [ 200.098383][ T5924] usb 5-1: cp210x converter now attached to ttyUSB0 [ 200.130919][ T5924] usb 5-1: USB disconnect, device number 40 [ 200.194307][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.219263][ T5924] cp210x 5-1:0.0: device disconnected [ 200.762181][ T5924] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 201.482988][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 201.530679][ T5924] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.550892][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.551916][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.603112][ T5924] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.634293][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 201.656979][ T10] usb 3-1: USB disconnect, device number 41 [ 201.679907][ T5924] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.735905][ T5924] usb 5-1: Manufacturer: syz [ 201.752475][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.857778][ T5924] usb 5-1: config 0 descriptor?? [ 201.876468][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.924501][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.040064][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.098766][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 202.168794][ T5924] rc_core: IR keymap rc-hauppauge not found [ 202.183623][ T5924] Registered IR keymap rc-empty [ 202.196167][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.231475][ T5924] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 202.258973][ T36] net_ratelimit: 26 callbacks suppressed [ 202.259024][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 202.260838][ T7502] capability: warning: `syz.3.396' uses deprecated v2 capabilities in a way that may be insecure [ 202.303498][ T5924] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 202.341651][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.370515][ T10] usb 3-1: config index 0 descriptor too short (expected 36, got 18) [ 202.430280][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 202.487401][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.564188][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.573849][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.605466][ T5982] bond1: (slave bridge1): failed to get link speed/duplex [ 202.609855][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.733472][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 202.855958][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.859308][ T9] usb 1-1: string descriptor 0 read error: -71 [ 202.887995][ T6598] bond1: (slave bridge1): failed to get link speed/duplex [ 202.895462][ T10] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 202.993003][ T10] usb 3-1: Manufacturer: syz [ 203.037825][ T10] usb 3-1: config 0 descriptor?? [ 203.041087][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 203.047107][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.098953][ T9] usb 1-1: USB disconnect, device number 40 [ 203.117453][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.125156][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 203.159674][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 203.169079][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 203.291243][ T1533] bond1: (slave bridge1): failed to get link speed/duplex [ 203.421590][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 203.504362][ T10] usb 3-1: USB disconnect, device number 42 [ 203.589296][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 203.629337][ T5923] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 203.708861][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 203.807141][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.818772][ T7082] bond1: (slave bridge1): failed to get link speed/duplex [ 203.846397][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.856801][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.876262][ T5923] usb 4-1: Product: syz [ 203.886391][ T5923] usb 4-1: Manufacturer: syz [ 203.896495][ T5923] usb 4-1: SerialNumber: syz [ 203.970298][ T5922] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 204.039771][ T5923] usb 4-1: config 0 descriptor?? [ 204.128755][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 204.173363][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.197328][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.217691][ T5922] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 204.257985][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.277292][ T9] usb 5-1: USB disconnect, device number 41 [ 204.283775][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 204.291982][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 204.329350][ T5922] usb 1-1: config 0 descriptor?? [ 204.347347][ T10] usb 3-1: config 0 has no interface number 0 [ 204.378742][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.438340][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.480534][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 204.523748][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.609249][ T10] usb 3-1: config 0 descriptor?? [ 204.968010][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.991557][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.016933][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 205.028536][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.073176][ T5922] usb 1-1: USB disconnect, device number 41 [ 205.232971][ T5923] usb 3-1: USB disconnect, device number 43 [ 206.006601][ T7540] netlink: 'syz.4.407': attribute type 6 has an invalid length. [ 206.100624][ T5922] usb 4-1: USB disconnect, device number 30 [ 206.165419][ T7548] netlink: 'syz.0.405': attribute type 4 has an invalid length. [ 206.310285][ T7549] trusted_key: syz.0.405 sent an empty control message without MSG_MORE. [ 207.031703][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 207.031718][ T30] audit: type=1326 audit(1765848413.701:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.2.411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585e58f749 code=0x0 [ 207.169779][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 207.368732][ T36] net_ratelimit: 29 callbacks suppressed [ 207.368754][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 207.430743][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 207.508934][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 207.619244][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 207.619469][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 207.675238][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 207.710270][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 207.734242][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.779273][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 207.788270][ T24] usb 5-1: config 0 descriptor?? [ 207.888745][ T7077] bond1: (slave bridge1): failed to get link speed/duplex [ 208.011251][ T24] ath6kl: Failed to submit usb control message: -71 [ 208.028971][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 208.067124][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 208.099066][ T24] ath6kl: Unable to send get target info: -71 [ 208.188731][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 208.206948][ T24] ath6kl: Failed to init ath6kl core: -71 [ 208.216715][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 208.262268][ T24] usb 5-1: USB disconnect, device number 42 [ 208.319113][ T7082] bond1: (slave bridge1): failed to get link speed/duplex [ 208.450374][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 208.454453][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 208.628712][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 208.902932][ T7586] netlink: 'syz.4.417': attribute type 10 has an invalid length. [ 209.155277][ T7586] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.668707][ T30] audit: type=1326 audit(1765848416.301:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 209.837920][ T30] audit: type=1326 audit(1765848416.311:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 209.894849][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 209.978691][ T30] audit: type=1326 audit(1765848416.311:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.048760][ T30] audit: type=1326 audit(1765848416.311:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.048818][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.198740][ T30] audit: type=1326 audit(1765848416.321:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.221441][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 210.296635][ T30] audit: type=1326 audit(1765848416.321:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.366727][ T30] audit: type=1326 audit(1765848416.321:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.389153][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 210.418721][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 210.447637][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 210.456904][ T30] audit: type=1326 audit(1765848416.321:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.549292][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.558798][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.595037][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.609698][ T30] audit: type=1326 audit(1765848416.321:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2e58f749 code=0x7ffc0000 [ 210.638657][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.667423][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.681096][ T10] usb usb5-port1: attempt power cycle [ 210.697997][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.714912][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.028717][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 211.127350][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.452076][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 211.506197][ T7625] team0: Port device batadv2 added [ 211.538814][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 211.583346][ T40] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 211.596086][ T40] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.610532][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.740423][ T10] usb usb5-port1: unable to enumerate USB device [ 211.780592][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.786798][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 211.792933][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 211.799104][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.813458][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 211.828285][ T7626] hub 9-0:1.0: USB hub found [ 211.835085][ T7626] hub 9-0:1.0: 1 port detected [ 212.458883][ T5982] net_ratelimit: 27 callbacks suppressed [ 212.458905][ T5982] bond1: (slave bridge1): failed to get link speed/duplex [ 212.597664][ T7627] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 212.608744][ T6598] bond1: (slave bridge1): failed to get link speed/duplex [ 212.728933][ T1533] bond1: (slave bridge1): failed to get link speed/duplex [ 212.854051][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 212.862093][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 212.988762][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 213.008722][ T10] usb 4-1: device descriptor read/64, error -71 [ 213.099139][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 213.153116][ T5922] usb 1-1: USB disconnect, device number 42 [ 213.218757][ T3654] bond1: (slave bridge1): failed to get link speed/duplex [ 213.249489][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 213.339058][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 213.418754][ T10] usb 4-1: device descriptor read/64, error -71 [ 213.478768][ T5982] bond1: (slave bridge1): failed to get link speed/duplex [ 213.533584][ T10] usb usb4-port1: attempt power cycle [ 213.628893][ T1533] bond1: (slave bridge1): failed to get link speed/duplex [ 214.048806][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 214.069499][ T10] usb 4-1: device descriptor read/8, error -71 [ 214.318706][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 214.339891][ T10] usb 4-1: device descriptor read/8, error -71 [ 214.352241][ T7674] ------------[ cut here ]------------ [ 214.357801][ T7674] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x4b/0x60, CPU#1: syz.2.442/7674 [ 214.368828][ T5889] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 214.369750][ T7674] Modules linked in: [ 214.381055][ T7674] CPU: 1 UID: 0 PID: 7674 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 214.390352][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.401269][ T7674] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 214.408012][ T7674] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 3d 19 ed fc 48 83 3b 00 75 0c e8 62 c2 86 fc 5b e9 fc ac 23 06 cc e8 56 c2 86 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 214.428454][ T7674] RSP: 0018:ffffc9000214fc20 EFLAGS: 00010287 [ 214.434718][ T7674] RAX: ffffffff853aeeaa RBX: ffff888057148410 RCX: 0000000000080000 [ 214.442929][ T7674] RDX: ffffc9000c9f9000 RSI: 0000000000000c05 RDI: 0000000000000c06 [ 214.451341][ T7674] RBP: ffff8880571482c8 R08: ffffc9000214fba7 R09: 1ffff92000429f74 [ 214.455902][ T10] usb usb4-port1: unable to enumerate USB device [ 214.459410][ T7674] R10: dffffc0000000000 R11: fffff52000429f75 R12: dffffc0000000000 [ 214.459434][ T7674] R13: dead000000000100 R14: 0000000000000000 R15: ffff8880571482d8 [ 214.459452][ T7674] FS: 00007f585f4626c0(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 214.459473][ T7674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.459491][ T7674] CR2: 000000110c38d76d CR3: 00000000334f6000 CR4: 00000000003526f0 [ 214.459512][ T7674] Call Trace: [ 214.459522][ T7674] [ 214.459535][ T7674] drm_file_free+0x7f2/0xa00 [ 214.517896][ T7674] drm_release+0x2de/0x3f0 [ 214.522420][ T7674] ? __pfx_drm_release+0x10/0x10 [ 214.527400][ T7674] __fput+0x44c/0xa70 [ 214.531521][ T7674] task_work_run+0x1d4/0x260 [ 214.536178][ T7674] ? __pfx_task_work_run+0x10/0x10 [ 214.541411][ T7674] ? __se_sys_close_range+0x4ed/0x650 [ 214.546833][ T7674] ? exit_to_user_mode_loop+0x55/0x4f0 [ 214.552412][ T7674] exit_to_user_mode_loop+0xff/0x4f0 [ 214.559019][ T7674] ? rcu_is_watching+0x15/0xb0 [ 214.563862][ T7674] do_syscall_64+0x2d0/0xf80 [ 214.568497][ T7674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.574720][ T7674] ? clear_bhb_loop+0x60/0xb0 [ 214.579491][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.583747][ T5889] usb 1-1: config 252 has an invalid interface number: 251 but max is 0 [ 214.585413][ T7674] RIP: 0033:0x7f585e58f749 [ 214.585441][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.600048][ T5889] usb 1-1: config 252 has no interface number 0 [ 214.619584][ T7674] RSP: 002b:00007f585f462038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 214.628331][ T5889] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 214.634200][ T7674] RAX: 0000000000000000 RBX: 00007f585e7e5fa0 RCX: 00007f585e58f749 [ 214.643722][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.651268][ T7674] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 214.651290][ T7674] RBP: 00007f585e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.651306][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.651320][ T7674] R13: 00007f585e7e6038 R14: 00007f585e7e5fa0 R15: 00007f585e90fa28 [ 214.651355][ T7674] [ 214.651369][ T7674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.651388][ T7674] CPU: 1 UID: 0 PID: 7674 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 214.651411][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.651428][ T7674] Call Trace: [ 214.651439][ T7674] [ 214.651451][ T7674] dump_stack_lvl+0x99/0x250 [ 214.651491][ T7674] ? __asan_memcpy+0x40/0x70 [ 214.651516][ T7674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.651550][ T7674] ? __pfx__printk+0x10/0x10 [ 214.651605][ T7674] vpanic+0x237/0x6d0 [ 214.651639][ T7674] ? __pfx_vpanic+0x10/0x10 [ 214.651668][ T7674] ? is_bpf_text_address+0x292/0x2b0 [ 214.651710][ T7674] ? is_bpf_text_address+0x26/0x2b0 [ 214.651759][ T7674] panic+0xb9/0xc0 [ 214.651790][ T7674] ? __pfx_panic+0x10/0x10 [ 214.651842][ T7674] __warn+0x317/0x4b0 [ 214.651872][ T7674] ? drm_prime_destroy_file_private+0x4b/0x60 [ 214.651907][ T7674] ? drm_prime_destroy_file_private+0x4b/0x60 [ 214.651936][ T7674] __report_bug+0x288/0x500 [ 214.651963][ T7674] ? drm_prime_destroy_file_private+0x4b/0x60 [ 214.651999][ T7674] ? __pfx___report_bug+0x10/0x10 [ 214.652037][ T7674] ? drm_file_free+0x78b/0xa00 [ 214.652066][ T7674] ? drm_prime_destroy_file_private+0x4b/0x60 [ 214.652095][ T7674] report_bug+0x16a/0x220 [ 214.652121][ T7674] ? drm_prime_destroy_file_private+0x4b/0x60 [ 214.652148][ T7674] ? drm_prime_destroy_file_private+0x4d/0x60 [ 214.652185][ T7674] handle_bug+0x98/0x200 [ 214.652219][ T7674] exc_invalid_op+0x1a/0x50 [ 214.652250][ T7674] asm_exc_invalid_op+0x1a/0x20 [ 214.652276][ T7674] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 214.652307][ T7674] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 3d 19 ed fc 48 83 3b 00 75 0c e8 62 c2 86 fc 5b e9 fc ac 23 06 cc e8 56 c2 86 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 214.652330][ T7674] RSP: 0018:ffffc9000214fc20 EFLAGS: 00010287 [ 214.652356][ T7674] RAX: ffffffff853aeeaa RBX: ffff888057148410 RCX: 0000000000080000 [ 214.652376][ T7674] RDX: ffffc9000c9f9000 RSI: 0000000000000c05 RDI: 0000000000000c06 [ 214.652395][ T7674] RBP: ffff8880571482c8 R08: ffffc9000214fba7 R09: 1ffff92000429f74 [ 214.652414][ T7674] R10: dffffc0000000000 R11: fffff52000429f75 R12: dffffc0000000000 [ 214.652434][ T7674] R13: dead000000000100 R14: 0000000000000000 R15: ffff8880571482d8 [ 214.652464][ T7674] ? drm_prime_destroy_file_private+0x4a/0x60 [ 214.652500][ T7674] drm_file_free+0x7f2/0xa00 [ 214.652542][ T7674] drm_release+0x2de/0x3f0 [ 214.652571][ T7674] ? __pfx_drm_release+0x10/0x10 [ 214.652597][ T7674] __fput+0x44c/0xa70 [ 214.652645][ T7674] task_work_run+0x1d4/0x260 [ 214.652688][ T7674] ? __pfx_task_work_run+0x10/0x10 [ 214.652724][ T7674] ? __se_sys_close_range+0x4ed/0x650 [ 214.652763][ T7674] ? exit_to_user_mode_loop+0x55/0x4f0 [ 214.652797][ T7674] exit_to_user_mode_loop+0xff/0x4f0 [ 214.652824][ T7674] ? rcu_is_watching+0x15/0xb0 [ 214.652864][ T7674] do_syscall_64+0x2d0/0xf80 [ 214.652894][ T7674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.652921][ T7674] ? clear_bhb_loop+0x60/0xb0 [ 214.652954][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.652980][ T7674] RIP: 0033:0x7f585e58f749 [ 214.653004][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.653026][ T7674] RSP: 002b:00007f585f462038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 214.653053][ T7674] RAX: 0000000000000000 RBX: 00007f585e7e5fa0 RCX: 00007f585e58f749 [ 214.653072][ T7674] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 214.653089][ T7674] RBP: 00007f585e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.653106][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.653123][ T7674] R13: 00007f585e7e6038 R14: 00007f585e7e5fa0 R15: 00007f585e90fa28 [ 214.653168][ T7674] [ 214.659683][ T7674] Kernel Offset: disabled