last executing test programs: 16.300778962s ago: executing program 3 (id=437): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000844) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = socket(0xa, 0x3, 0x1b) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.108464078s ago: executing program 3 (id=440): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfff7ffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = getpid() sched_setattr(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000240)="f9f74cd91588cae9aada00fdbe68ae7208f97cf381931dd63ed6aee7077344f0202aed5643e1bc13c0f4cabc3bc49d2f3a4abeb14dc9f9eedafbed1cf10037aac175327e7fed49e1b89289407a52feafd67dfc2b88aa20330175923fc4223dd0eb9b41f58ed017914563cf376a3ed30abec4785e00054f4c449d3b8e21dc6971b9bdb8da46b3a04bf94b14013040b944be3dac92d8de711647c77b1675eca05b5ba5", 0xa2}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'rdma'}, {0x2b, 'net_prio'}]}, 0x10) 12.608464012s ago: executing program 2 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_io_uring_setup(0x4ea1, &(0x7f0000000280)={0x0, 0x681c, 0x20, 0x3, 0xdc}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_enter(r2, 0x4c40, 0xb30c, 0x20, &(0x7f0000000140)={[0x7]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1bc, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x952c8067}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x86}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x835}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2bf}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x76}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x721a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e76}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4008040}, 0x40010) 10.165191947s ago: executing program 3 (id=452): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003c00)=@nat={'nat\x00', 0x19, 0x1, 0x90, [0x200000003a40, 0x0, 0x0, 0x200000003a70, 0x200000003aa0], 0x0, 0x0, &(0x7f0000003a40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1001, 0x0) setsockopt$inet_int(r0, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='pipefs\x00', 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x40044160, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6000030800583a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000001000000000fc0000000000000000000000000000000004040200000000fc0000000000000000000000000000fc0100"/142], 0x0) 10.094888622s ago: executing program 2 (id=454): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x4, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) syz_usb_connect(0x5, 0x4f, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000009000904540003ccc8ac00090504041806d8030409044299d83e091515090505022000836282090512002000000a0c0705e6ea"], 0x0) fsync(r0) (async) fsync(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x160) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x160) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001f80)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000001f80)={0x2020}, 0x2020) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x240, r3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f00000000c0)={0x38, 0x0, 0x1000006c, 0xe, 0x709, 0x6, 0x2, 0x2166, 0xfffffff2, 0x5}, 0x0) 8.223457223s ago: executing program 2 (id=457): r0 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c5}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0xffffffffffffff53, 0x2) landlock_restrict_self(r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) 7.97202305s ago: executing program 2 (id=458): r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00009fe000/0x2000)=nil, 0x2000}, 0x2}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa6800000d0690780a010100ac1414bb0000000000000000000000000000000300004e2100004e21000000010000000100000001000000020000000200"/78], 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0x1, 0x4, "a38fb778"}, 0x0, 0x0, 0x0, 0x0}) (async) sendmmsg$inet6(r1, &(0x7f00000011c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000001200)=""/4110, &(0x7f00000000c0)=0x100e) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00004c5000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0xa01ac000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) r3 = shmget(0x3, 0x3000, 0x1000, &(0x7f0000269000/0x3000)=nil) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000000000000000000000000000000000000000000000000000000000000200000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) shmat(r3, &(0x7f000024f000/0x3000)=nil, 0x7000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) (async) setuid(0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200001, 0xa, 0x0) 7.748199446s ago: executing program 1 (id=461): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) syz_usbip_server_init(0x6) 7.367456686s ago: executing program 4 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x7c}}, 0x4040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4004801) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 7.064320651s ago: executing program 4 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_io_uring_setup(0x4ea1, &(0x7f0000000280)={0x0, 0x681c, 0x20, 0x3, 0xdc}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_enter(r2, 0x4c40, 0xb30c, 0x20, &(0x7f0000000140)={[0x7]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1bc, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x952c8067}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x86}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x835}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2bf}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x76}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x721a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e76}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4008040}, 0x40010) 6.460232286s ago: executing program 2 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000340)=""/164) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x1, r4, 0x26}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000140)={0x5, 0x31, 0xe68, 0x401, 0x0, 0x75dda5e8, 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffeda, &(0x7f0000000140)={&(0x7f0000000680)=@newlinkprop={0x30, 0x6c, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x800, 0x4025}, [@IFLA_LINKMODE={0x5}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x30}}, 0x4000) syz_usb_connect(0x0, 0x540, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xdc, 0x1c, 0xe5, 0x8, 0x3f0, 0x1b1d, 0x4c23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52e, 0x2, 0x0, 0x1, 0x30, 0x5, [{{0x9, 0x4, 0xb6, 0x7, 0x7, 0xa, 0xf5, 0x5f, 0xb4, [@generic={0xdc, 0x22, "17bef338a4e052f1f67390564906377915c0d3d833a176f82342608be63fd8703798be1abe1e170c80a4383a5eb1432251aae7094f9459332deb6e629a9ef8382b6404d099aa05400b489492a84f1e11bedf8a00b02d495eca4aea1a510c5dc18110078adfec8c1cdf9efe77167113778cdde579a4843eea708a800cf37cd86d1c006a59f3360887a3489389f78d8b2a7aafb9021a97416466ef034a14a59197f3417ebd1ce42864ba6693eeddefafb95674f1e2dcfe0a6a8168cb8c2de7a706ce05aab2944352da76952b2406232a27f07666a43f8d99ab74a2"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "711065ee"}, {0x5, 0x24, 0x0, 0xcb50}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x15}, [@mdlm_detail={0x76, 0x24, 0x13, 0xc0, "7a8a7b9c1ed44eaedfecd6ed520ab1f7ee4ff6f3295d7b439583a3ddd2ca335d2ac55318e910c7be05f016d6b3b3022b11dacc72e8ef0d1c56bd0c469dec60cff5bbd6491159ec9a9610a77dcdb2fb83464dd48b28132880fd015214fe063cb431f99b1cda4353161b5c8d0a902d1fdeee8e"}, @mdlm={0x15, 0x24, 0x12, 0x2}, @obex={0x5, 0x24, 0x15, 0x7}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}]}], [{{0x9, 0x5, 0xb, 0xf00c91476b9b0c0e, 0xa18, 0xfc, 0x9, 0x0, [@generic={0x25, 0x22, "b9e6462b544aa14bf8fc3a51af2d0b65fbff7808669f18a0b32e97826a50924565c4ba"}, @generic={0xc2, 0xf, "2709d5ed90558d5bc01f629997b3729fd7b800717f8a95406263eab5cb73c0e44622c511e755bb7b6edc5891c3c22501a95797109afaa8a90afd9b8cbfb7bfed4d6596036106c2dd9a7b7a69c117e431dc27b1fca8ae03b92d43a9d62c35eb09e5321f3b0c09cbc02e3ee1c21ebe0c24e62de69f140dd2b836419a66741cecc7c14ca2ab758fbaf5fe8fba7de6c6a11ee5b1a4560c1de8d118b240bb9e50df75fe9660b22891f550fbab4e54b7ee101b82ea136252ac2bb87972f64b7174e80a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xc0, 0x6, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0x3, 0xf6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x3, 0xfb, 0x3}}, {{0x9, 0x5, 0x33be77e960f89e0a, 0x3, 0x8, 0x1, 0x6, 0x49}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x4, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf2, 0x10}, @generic={0xfc, 0x2, "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"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x3, 0x7f, 0x1}}]}}, {{0x9, 0x4, 0x80, 0x2, 0x8, 0xff, 0xff, 0xff, 0xfa, [@generic={0x29, 0xf, "2b177a7a53612584b3998429dde9729462ac2e8a8bb7ddffaf11650ce918dbbfd4317ef1486b81"}], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x5d, 0x29, 0xf2}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x3, 0x81, 0x2d}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x80, 0x55, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xe, 0xfb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xa2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0xca, 0x1, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xe0, 0x4, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0x9, 0xcd, [@generic={0xde, 0x11, "ca932cda42c7d4ef975b09a096bb5ab3431b69984e8fcf261fe8c5b09a6b7d3535d2631c7454d78c4fbd0ecb99b39ce31d99468eb3bcfaedc52b165402fd5c85a595c2c58eb9f8381d7dbca406e5d8069d7fc3257b81c864bf5fae1ff236b3fbcff03ee5a4179b4c70892b74b5b1d2fe0f85f8b4a7d97b254dd16cfc668d93b6a5bbddc4e10645eaa66cd27d7ce11f46014df97bb343335a94c442a7825143bf90a14c5a7dd247671a0ef0297aaa1f93f3af0a41e95901be30f0fe468ced38ad4fbb760d3180d265fdd1a014a7126235c6a0e873a9635470452cf599"}]}}]}}]}}]}}, 0x0) 6.218726845s ago: executing program 0 (id=466): syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$isdn(0x22, 0x3, 0x23) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a78000000060a0b040000000000000000020000004c000480240001800a000100717565756500000014000280060001400000000006000140000000002400018009000100686173680000000014000280090007400000000108000740000000010900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0x0, 0x0, 0xffffff00], [0x0, 0xffffffff], 'pim6reg\x00', 'erspan0\x00', {}, {0xff}, 0x1}, 0x0, 0xd0, 0x138, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x1, 0x8, 'snmp\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x128, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bridge\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe8}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86) 6.04778926s ago: executing program 1 (id=467): r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0xff, 0x80000300}}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000600000008000a00", @ANYRES32, @ANYBLOB="3daab7fcde0d160547481f195d6e3d3b3e8011f54430249506f82319fb38503b37e42a65c391ec2c13483d0fdc896c54e869acbeb26defa4d8cdb47b10da702d63048bdf5e9558839b22e110739505824be1f9f7ceb6bd5f5817a16561a6080bbe302fc042c195482118da03a33262edbaf7a568d4fe0425439b92084762efede4d8fb24da1f5e35bb50366e9a2f4c4d2bcc32189d853a90cee139640bad2f326296c408160e11340817e75f48b70f73c0856d49b0da39cf220a6b148c3603b76af99b2a7c8d53618b2e1b3fa7bd20a3d522ee"], 0xfffffffffffffdaf}}, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000480)=@file={0x3, './bus\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000500)="d61ecc43190491cace9b3896fdab273523abddf8f8b4f99a905b1511db2870a4fcddeecea30da276dbd5d493fe62cf583517f32961bba660e4d8c67dd9437d1e9aa04c4b7d468769659604d806bd0c022808518d78ceb42aab0c6d428087ef0a69b2d400311d8b197d40cfd9b1a1e57874fc1701b6ee5931995f8b3911747693d6a9d52e1b2c79ec1cede8a17b1e5699cb6556d3db2ef57333fa883b1d1a9d965cb10b071c524fd19414944119eac584fe3129865f5d72d1dbdc0fdb10ebd9247671d02665d7f9a1bc520660aca678310d255fa059825129989326ef", 0xdc}, {&(0x7f0000000600)="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", 0x1000}], 0x2, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r1, r1, r4, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r4, r4, r1, r3, r4, r2, r1, r3, r1]}}], 0x108, 0x20004080}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001900)="e7d7c8ad175cc67bb55f68b1a0ebb7dcf09c878712", 0x15}, {&(0x7f0000001940)="c7fc3a21889352c3b3a86e769944b39a9fd4c8117e53fecd4b733a195fb99cf9046692f9185548859b46a8d8d9d5aedd15996adcd6df8e7e3c7b5139b0ae70d8264c47467d221ff436a7a9f2225288c843d5b36330be898ec1b469a6f1b56a085491cfe7a1383af48a89319229e10d7ac492f8eeee29a5e9bd81038abe1e8b92ec06ca6c038d70f348ca04ecf05ece58fbc0e174792301ca40d57557762e33fb21e1bdccf4bfa7fd9583a7fe", 0xac}, {&(0x7f0000001a00)="9a240469a718eac1d5a4a67fdccf851c32203075139a21a7a0c52583fcf8a6d1fcc8cf61008151c9fc6f4de30d7b918f186b340f7fc621853a9d4d3202fa4027fecc06c9da713a10604352dbd6b8e5b490b38bf818", 0x55}, {&(0x7f0000001a80)="8d27a88bd7b1265f7511d58920e8c8203c0131a4d9259e21d746e7e3e0f1b77b1846213cda69207f671ef7390eec0399473b9aaff1487eb46c81b4398514b5f1cf7635ac2b4764ef7960521e8475bb147d85487a25177a944723ce85557f1fc9b5a1950f6d21bcf69265b8af387e9143e697f96a2d93de6c9fe5e03aff885b60a4d6dc", 0x83}], 0x4, &(0x7f0000001b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x38, 0x40010}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x20101, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7800, 0x8, 0x9, 0xfffffff9, {{0x1d, 0x4, 0x0, 0x1, 0x2f, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xac, 0x1, 0x8, [{@private=0xa010101, 0x1}, {@broadcast, 0xc2}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x3}]}, @end, @lsrr={0x83, 0x1f, 0x3, [@remote, @dev={0xac, 0x14, 0x14, 0x24}, @empty, @empty, @empty, @local, @local]}, @noop, @noop, @generic={0x44, 0x10, "e31e0855b79f76b7b81b40e96db3"}]}}}}}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={r8, @local, @empty}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000000c0)={0x20000014}) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x32, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, 0x0, 0x0, 0x49, 0x0, "8d545bba19fe5f61c8c5a0e13bf4f06baaab13dd9bb137e9eeef2ab6c8c37b6081bab60baf2b1382a040e5ceb0735a61c02d7bc958b256c94bc97e451ff6de6cc9f03f69a51666722a8fef5fe7ca86ef"}, 0xd8) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x1da, @local, 0x1}}, 0x0, 0x0, 0x4d, 0x0, "afba8998d5b86da3ddd021b9231569359ff9ea8c3ba79d106c5eb1a4013168a217d5626cf43da2a075be2454f8a98c3e85ed68a75d3ced314909f55b771239ab7f65a8bdfedba984b67d6ba4a7cfdae5"}, 0xd8) socket$netlink(0x10, 0x3, 0x13) writev(r3, &(0x7f0000000480), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.921726584s ago: executing program 0 (id=468): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) unshare(0x400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="98000000100003050000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000700012800b000100697036677265000060000280050008000e000000060003000b000000060010004e2000000500170001000000060010004e230000060018000010000006000e000000000014000600fe8000000000000000000000000000bb0800150013cb0200080004000900000008000500", @ANYRES32=r4, @ANYBLOB], 0x98}}, 0x0) 5.430880238s ago: executing program 0 (id=469): r0 = socket$netlink(0x10, 0x3, 0x13) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'dummy0\x00', 0x3}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x2, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{0xffffffffffffffff, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/15, 0xf}], 0x4}}], 0x2, 0x40000101, &(0x7f00000015c0)={0x77359400}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001600)={r7, 0x7, 0x6, 0x6}) copy_file_range(r5, 0x0, r4, &(0x7f0000001640)=0x5, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000018c0)={&(0x7f0000001680)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001840)=[{&(0x7f00000016c0)="a28af6862626eb6fae8c190b1292d3e7cc797ac37384aa1faebd075b2f7a632e441656350f0f3578c90522d0f286abd9848838d7d4e73f2292bf1dfe866b5b10f773e6f991a0389b9932c1ef0a4a38857807fd9026e41e316ecfbb280bb9cde268d76936c4b25caf92bcc935258f041e42d3a403113862c7fe28311684a5cc76b0fc92e57f735c3abe06d3300f8a7c840b63", 0x92}, {&(0x7f0000001780)="921766320d3760e4771101582dcc605b9d30b2a67ab98d3c0ceebe73d9bb0fb66dca7a8a8203f888e91ad01c602ddfb9f555fc7fd16d8de67da6cac371180529c664ca5afdd1e93e5f12d789b99ee331648260d8f70deb72f9b3efd38f993c1f871ef1908ed1a61ebace2c486c8f10177cab337bee33d637f835964de1d1680f068f5b4d271400a1a7e83c97f49f3dc056", 0x91}], 0x2, &(0x7f0000001880)}, 0x1) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001900)="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", 0x1000) recvmsg(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/79, 0x4f}, {&(0x7f0000002980)}], 0x2, &(0x7f0000002a00)=""/86, 0x56}, 0x40010103) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000002bc0)={&(0x7f0000002ac0)="231bcee2209bbf063e0742044d778db07f02c9add0eb8da6e3f1126fa9e009c868beed83554908879df0c5fc9aa997ffb92d2de3563fb80acfd6b2cc68bf3d2c2a8877b2df74b89a271bcdda5b2ff1591df6402c2c026d820c528eeb076fbbf5449ec2ff2178d1a1e657baa7d4810c94ed866fcf47d6d4a12286533173c3bb2534a5b71e1f8d5a91c59cb819c2857a8f83c480e164a1a6360cab7154f4864a87c8bf8c7131c4261a20bfcd829b135280d3371edeb1b1406af9c519b725a3ac500bb5fc667721ab27c139c4748bce4c088c1e2f", 0xd3}) pselect6(0x40, &(0x7f0000002c00)={0x3, 0x593, 0x3, 0xffff, 0xa, 0x8, 0x16d}, &(0x7f0000002c40)={0xf27, 0x1, 0x4, 0x8, 0x5, 0xf00000000000000, 0x200, 0x1}, &(0x7f0000002c80)={0x8000000000000000, 0x7fffffff, 0x101, 0xfffffffffffffffb, 0xdd, 0x400, 0xb53d, 0xffffffffffff0001}, &(0x7f0000002cc0)={0x0, 0x3938700}, &(0x7f0000002d40)={&(0x7f0000002d00)={[0x101]}, 0x8}) socket$inet6(0xa, 0x5, 0x2) select(0x40, &(0x7f0000002d80)={0xe, 0xbf6f, 0xc, 0x8000800000, 0xbe, 0x0, 0x8000000000000000, 0x100}, &(0x7f0000002dc0)={0x5, 0x1, 0x0, 0xffffffffffffff00, 0xfffffffffffffffa, 0x5, 0xfff, 0x1}, &(0x7f0000002e00)={0x9, 0x1000, 0x1, 0x7, 0x3, 0x4, 0x7, 0x945}, &(0x7f0000002e40)={0x77359400}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44800) r11 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r0) getsockopt$sock_timeval(r1, 0x1, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000003000)={0x0, 0x2710}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x58, 0x1409, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) clock_nanosleep(0x7, 0x0, &(0x7f0000003180)={0x77359400}, &(0x7f00000031c0)) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000003200)={0x18, 0x0, {0x4, @remote, 'ip_vti0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000003380)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000033c0), 0xc000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003400)={'vcan0\x00'}) sendmmsg$inet6(r2, &(0x7f0000003500)=[{{&(0x7f0000003440)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000003480), 0x0, &(0x7f00000034c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd20}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}], 0x30}}], 0x1, 0x44) 5.259046544s ago: executing program 4 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)="fc310b5cd809be074ca1eeb30a9aabab8c7d396b2423d09f4b22da4ee7e96a1d5fcb9a289f1bb29fefdf9b47633b9250", 0x30}, {0x0}], 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x99c9}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006a00001a008316090f0000000000000000000000000000fffffffffffffff30000"], 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 5.047999777s ago: executing program 3 (id=471): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000500)={r5, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x3b, &(0x7f0000000040)=ANY=[@ANYRES8=r6], 0x0) 4.979487094s ago: executing program 1 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0xf) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x7, 0x10100) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_NAME(0xf, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e1f, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ftruncate(r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000ae2161376b9d89830ed9e5001000030400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200bbbbbbbbbbbb0000"], 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003e0007051de000fbfddbdf25027c00000400368004000180a6602f31f8986388f76880"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r10 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x40000000, 0x34f, 0x0, r9}, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x26, 0x0, 0xffffffffffffff9c, &(0x7f0000000700), &(0x7f0000000040)='./file0\x00', 0x7ff, 0x800, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.789718559s ago: executing program 1 (id=473): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff000800034000000008540000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002801400028008000180fffffffd0c0003"], 0xe8}}, 0x4080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000180)={r6, 0x0, 0x0, 0xfffffffffffff000}) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r8, 0x0) fcntl$setpipe(r7, 0x407, 0x2) pipe(0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) poll(&(0x7f0000000100)=[{r9}], 0x1, 0x2) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, 0x0) readv(r6, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x10, 0x1407, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x70811) io_uring_enter(0xffffffffffffffff, 0x2828, 0x5ac7, 0x2b, &(0x7f0000001900)={[0x2]}, 0x8) mknodat$null(r5, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000002c000000", @ANYRES32, @ANYBLOB="fc850969ee9ce8094d072d3d6a80fc582627552ad908bc017055f95a1c3d8de1b349c7eb64046e26df99da72", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r10, 0x40044103, 0x0) 4.671686017s ago: executing program 4 (id=474): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x10}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unshare(0x24020400) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x3, 0x3000, 0x8, r7}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000080)={0xf1, 0x3000, 0x8, r7, 0x4}) getdents64(r4, 0x0, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b80)="f89441eb38ab742f68d7f89bda7bd1ba4c6b6375082843578ef345f6a749", 0x1e}, {&(0x7f0000000340)="f0cd53", 0x3}, {&(0x7f0000000400)="3dd2c7356e7930db8342613b44cd0301b57c8ea95cab3390f03065c91123a8", 0x1f}], 0x3, 0x0, 0x0, 0x24008000}}], 0x1, 0x8040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r9 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00030100700009040000000101"], 0x0) syz_usb_control_io(r9, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x5, 0x3, 0x9c77, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x2, 0x87c}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x3, 0x2, "6e3de8c6", "2fc2e360"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x0, 0x50, 0x83, 0x28, 0x8}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x31, 0x19, "f91381b1484b678968c31b223f5205b9782eef4dd683c1e9e2"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x100, 0x4, [0xf0f]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "8501"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.360596042s ago: executing program 0 (id=475): r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x103) listen(r0, 0x6) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f00000000c0)={[{0x9, 0x4e00, "dce7b912886d98acb0"}]}) getdents(r0, &(0x7f0000000100)=""/240, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1140, &(0x7f0000000240)={[{0x2d, 0x4e00, "4336ae1641cd946ebc4e4d1f7d5778efdc24b9cee9771c83e492360d1e902ddda679aa15c98fefeaa3b12039b7"}, {0x8, 0x4e00, "c35dafb5f46b02df"}, {0xac, 0x4e00, "63c67df720f58e1c7666af5887f452ed13150cc61dd4c58898602ab73973f400180e73fe319c29bf72541151ae9129c836fc8c88a89c86fafc2ab859d74b5d0fc53e0724805b8735aa6413ad60aad994cb0f3c966784d6671714cd27453e4c726a0b246103986af3127f0e772156ea6f176c374da9953f2174ee4e2e0e6b115ff2e45f45c71a89fb93f632b7e88ffe9a53004dba10d460896906f4497f5940aeec89c431ddbb24c82e4df93b"}, {0x1000, 0x4e00, "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"}, {}, {0x41, 0x4e00, "66b7f578d2e5637b1ccd39aaf140e410056917b50999ef3f3ac533e4c7f6b30eb8cc3fcdb7ef86bb94cc78e47f8c4555ed32fba6892b6826330adf9e8bef639d5e"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001480)={'syztnl0\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x4, 0x6, {{0xa, 0x4, 0x1, 0xa, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ssrr={0x89, 0xb, 0x82, [@loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x19, 0x800, 0x9f, 0xfffffff4, 0x4008a, r0, 0x401, '\x00', r3, r0, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = getpgrp(0x0) sched_setattr(r5, &(0x7f0000001540)={0x38, 0x0, 0x10000020, 0x6d, 0xf9eb, 0x73b3, 0x6, 0x9, 0x5, 0x7}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x179, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x167, 0x2, 0x1, 0x4, 0xe0, 0x9e, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x764}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x5, 0x10}, {0x6, 0x24, 0x1a, 0xb, 0x8}, [@mdlm_detail={0xe1, 0x24, 0x13, 0x79, "e61e94d664df37fbff8e2c60f2de6b7e38ea7ca8c4efae28bd96f3b613dd90ce6563a868c59afa3fa0772e184b621cf146034cfb24a2dd2392cb12838a4bb90d1fc144f4b4a2a108a60e422493e48e3a4fb194939e3d9b1dfd7cbe5eec478765591330d6517826b97fb6adeda4d5d933e0110e8cb4b50ac11bcfe7a35d2a80ef588e21be7bb056723db3f705a094bc05b2ac2bfd5bfe63ed926822c0dc00419d182018422148e51cfd88874cc5cb87971eb00e29cea9676b990065276787c7738029d3f2ad06c57dccb7ca4f17348e52e3ed6f3077f618c3e4e971739e"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x39, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xdf, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xa6, 0x3}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x300, 0x2, 0x6, 0x9, 0xff, 0x9}, 0xcc, &(0x7f0000001740)={0x5, 0xf, 0xcc, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x0, 0xffff}, @ptm_cap={0x3}, @generic={0xbd, 0x10, 0x4, "b19aea13ca150bb266a270f81f1d0a6af2a124c9cc3d5beac58789f52a42b0703b145b76559145848e0f7ec12b22e809a09028e517cd2edc08ed5a633437e55414471d89de2b19434fe0264ed346db9ebdf0175b79729f8129906abb051891542d607fe814d08a15d8442bf872cacb2b104be76941905f424cf0e0bfac37ac15989cacc955bc955e6d90c837588902d5b50a19e38db4281b42c0e026488af50152413eb0301054844cfc1753729fd49ff57bfc09326f007e52af"}]}, 0x4, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x1004}}, {0x30, &(0x7f0000001880)=@string={0x30, 0x3, "aa4c35591ded2f49b479df9b358df8f93ba23e001f6de0081017cb982356b87015e766143bf9b5566e9f8e85d702"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x41e}}]}) r6 = openat$cgroup(r0, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0) r7 = syz_usb_connect(0x4, 0x0, 0xfffffffffffffffc, &(0x7f0000001dc0)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x310, 0x9, 0x9, 0x7f, 0x0, 0x7}, 0x64, &(0x7f0000001a40)={0x5, 0xf, 0x64, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x59c, 0x1e00, 0xba4b, [0xffc000, 0x3fcf, 0x5f0f, 0xc0, 0x0, 0x3fcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c6d929c99c7ff0899d298a43b680612f"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0xc, 0xff0f, 0xcb00, [0xc0c0, 0x0, 0xc0, 0x0, 0xffc0c0, 0xff3f0f]}]}, 0x7, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x412}}, {0x9, &(0x7f0000001b40)=@string={0x9, 0x3, "afdaeb3e22d800"}}, {0xdc, &(0x7f0000001b80)=@string={0xdc, 0x3, "7be2935c235b9615f00a39f6572313f971dd33186dd0023c05e6ded1530ef746ac563aa2ea543aac735ad5c64b8a4584a18e55185bf243a41d4771be091a1340e197a7437616e3d822b3d76192f860637bf33a6ca867be5a96ba98f78602b5043c475d96927cd5b060bb9581cc22a02c4d12bfb9ba9888f2c2da1fec27fd10771dad7ab48403b556018bbf4b7b92b082ebce8a0f8d38fdab76618fc80954cb90124fbb73e2c6db1e5edd4654a7280d8afddbc764fee1735ce012b5737d82a886e956a271d18f3ef532224dbab9e67e3ca317223192b225f0673c"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x43f}}, {0x9d, &(0x7f0000001cc0)=@string={0x9d, 0x3, "ac3a7043fe1c9799e64f80ed65270eabb0402fc22544a6b45d1b0dd87704c527a8d426e160d9200330145361467ab7b3dbccabfc561e75f00d798298ff620b1ae1e5bc5cd0c4f71aeec608ea5e6da9187728fedef2d5a30103bfc65a3c313605bcb87d51add1a6fa14bdbc970497682884d7d5d5ae8205f9ca4736f77b699f7ab44feeddb666a6f2068cc434cd4d47d2a86af457647d0192dd447c"}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x400a}}]}) r8 = signalfd(r4, &(0x7f0000001e40)={[0xffffffffffffffff]}, 0x8) writev(r8, &(0x7f0000002140)=[{&(0x7f0000001e80)="9c", 0x1}, {&(0x7f0000001ec0)="2935ef27675b2587725c7ffc1f7c644a8dc6864634bdee220b01990b82c0d660fd9ba6ebde3c1a02990f877f2db5880fa02514e2da53a97d206632bb465db313ad3b034d4f03823dc2e513", 0x4b}, {&(0x7f0000001f40)="72c8cac6b8e6986c77cf92aba59ab3c57231e6536d6b6fc53871bba63065064ff5bfb4b2bbf377144ad2d9345428fccb4ebebc1de7c1035a92f45c83a8a9dbd58ba69029d2c979b11b86392f6e06f6e39ced17e966b904", 0x57}, {&(0x7f0000001fc0)="572eead6e010f1fadb55514321b23d5e399e2a60bac3be99c8df0fa5da280dc3b9142b93d6707cf055d4bc88b9b4ea4d381b6e70379b0d55dd4e2c2bc88cd861e50a3c94b6d92cf721b033cff536f69d554b257fd1da3dd95d577d3aba86c991195ce3", 0x63}, {&(0x7f0000002040)="fafbe2e4", 0x4}, {&(0x7f0000002080)="691129c4b9b9168f9b5115aa485b0812565d1a701dc053c61b49c923d7ba9312db4c911f478a3b03306bde112be45f5d6d042c69eff042487f5a5f8a0fcbcb57a4cf135012a08633c9339127a80c0c8ec07a01cc6d730a989438ce12f808e0e8f26ebe5b1249a137958eebf1d6ff76ac5d938775f15685bbaff03e25f98be97e5ade097a3300b55d8710fcea8e46696260009b739e577db1a624cbb03d2e0d6d618f683ccf33affe88e417db3b2f", 0xae}], 0x6) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000002400)={0x14, &(0x7f0000002200)={0x0, 0xa, 0xfa, {0xfa, 0x22, "f23897891889afc40b34d024d02ccc4b9ebb213c729a7292a949ce82d9ca09f4b23459e28da855b212af0bd9833484cd008994c682e35d54e8d9994a74d9b5f5d65d920701e83806466d0fc65d9aef9ad901ec78a73b191eb28a34c2d6766f4f010f5ca24e95056b0e85eb5372c88b0a6dd466f08d7eeaca84947a3633277c2b4270cf0ec0039813c157adee41c97ce385036679f5cb6ff53669b8e3e71c02f407cee2917656bfa42e1006b8dac956dab3eda8ac9de26ec29e7a2946dbed0098a1ef8e85020dd050dbc2a275ded6da30934719380a4324d80a1f1da89dd2a6d24b0e6c3539fff34899ca962fa6869224a0c614a916ad6255"}}, &(0x7f0000002300)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "de28dbfe130563510d3a5fe6621fef1365bd2eb421a69d7ffc269ddbf59a8928448630a3cda5f81c838b6d6dff9b12a38b08682d515fba9d5166ef7bf2beb0b3ab41488714b4289df2604ea9bd95210329c4022ef2cc023e9cf68ee394993a8eea72507fe43e802f8167104062bd04b70c6c0ca44d35dc7329d2dfc86603250ef9911c23cab7d0999279e5ad686260e49c39a5f0fb2ae59e5c54adbe0ab3b50097279753a3c4b940101438190d244cf6c36994144e591e95a7c29eb659f5651647cd8244a2deeaf41c3dcd4dad46f59e80bd14e8b39015b8cb40617783cfaf"}}}, &(0x7f0000002700)={0x44, &(0x7f0000002440)={0x20, 0x0, 0xd3, "918f41642e5d580e6cce8dde3970ca0ddb031a1999911d9964c59ea17a4513685f5cbd32563213bbc0d91d364975a88952746659a25379244f2620f24e1923a8f68ad4ee6c720055f6a568a349a92e0d5af6529a28ae6b41ce34e1d0869af143469b4ed1a5408aecd65548999bcf5749c3aca4b63bc57ce48cee6002c2b3b96a665b35110ca120b11aa21311590ee496cec1001f41fe30c284c9dce48ed440865a92c792a5b8903ab4f7e661bf46b2d63a9992100382022bced7629a1acdd0114ff03201983f1c6cf5592fc6c34dd0fac26512"}, &(0x7f0000002540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000025c0)={0x20, 0x81, 0x1, "a1"}, &(0x7f0000002600)={0x20, 0x82, 0x1, "92"}, &(0x7f0000002640)={0x20, 0x83, 0x2, "c161"}, &(0x7f0000002680)={0x20, 0x84, 0x1, "1b"}, &(0x7f00000026c0)={0x20, 0x85, 0x3, "c25118"}}) unshare(0x2000800) r9 = open(&(0x7f0000002780)='./file0\x00', 0x28083, 0x48) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f00000027c0)=@ready={0x0, 0x0, 0x8, "29f9f9ec", {0x1, 0x1, 0x30, 0x3, 0x6}}) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x10010, r8, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f0000002800)=@IORING_OP_FALLOCATE={0x11, 0x20, 0x0, @fd=r6, 0x3, 0x0, 0x700000}) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000002840)={0xd6, "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"}) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000002980)=0x1) sched_getattr(r5, &(0x7f00000029c0)={0x38}, 0x38, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000002a40)={@dev, @initdev, 0x0}, &(0x7f0000002a80)=0xc) sendmsg$nl_route_sched_retired(r8, &(0x7f0000002b80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=@delqdisc={0x5c, 0x25, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x5, 0xfff3}, {0x2, 0x1}, {0xffff, 0x5}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) 4.077753418s ago: executing program 1 (id=476): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_to_batadv\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xa37, 0x3}}) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.775816522s ago: executing program 2 (id=477): socket$inet6(0xa, 0x3, 0x9da) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0xd2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) socket(0x1, 0x0, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xdf1, 0xfffd}, 'syz1\x00', 0x2a}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x6, 0x4, 0x34565348, 0x1, 0x5, 0x7, 0xc, 0xfffffffd, 0x0, 0x7, 0x2, 0x6}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@', @ANYRESDEC], 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000001500)=""/252, 0xfc}], 0x1) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000200)={0x2, @capture={0x1000, 0x0, {0x8, 0x9}, 0x7, 0x7fff}}) 2.696035816s ago: executing program 4 (id=478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000034c0)=""/4088, 0xff8}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000000)=""/44, 0x2c}], 0x7}, 0x40008100) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x840) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000680)='lp\x00', 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'team0\x00', 0x400}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x101, 0xd, 0x1, {0x22, 0x347}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x10, 0x9, 0x4, 0x20, 0x3}, 0x5b, &(0x7f0000000180)={0x5, 0xf, 0x5b, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x4, 0xf, 0x6, [0xff0000, 0xff3f0f, 0x3f30, 0xc000, 0xff018f, 0xe080]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf00f, 0xaa8a, [0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c5895d67b7beefc4f68b1c37597c98c6"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x3, 0x5, 0x0, 0x83}]}, 0x6, [{0xd2, &(0x7f0000000280)=@string={0xd2, 0x3, "59901239f9965208385c18a707514be21c7cdd29d3f8b624b2cb9945020473fde1a90ca1f28958184448e0843af17c4b8b749064e4fce5655e4718bfeedd8b831f19b8e285d317bbaf1baa4570e3af0d89fda6547bc15bec2b2d6b512ddd85d3c4814475bb48d9576323c86c37047e3ef6496b01ef3c4ce26f12adf612abf91dae110d26a59c57579870048b7679ff27cf14fe80fa832697fc1deb1a2cd7f9ad1b50af127ef0ec9a83077849cad54354d1b70c33be9954534e8d5d2b47e5aa4213ec4e860100f3b7328306b40e19f8b5"}}, {0xf3, &(0x7f0000000480)=ANY=[@ANYBLOB="f30391319864f422b67cb753035c03c96ed129ed0c9ceedb4d5133498c52558d1af46d42600547b4d5a91043140d096d215421dbc8f533f0de84a8f861f4d6aa7296818c3447b452a5f7f3810ec9d3930ab0b5f9b3dd56883682b35671324eae22ab25836566f5e18b1c10548a83e2d667292b9fdafc05298d52412c00cd4dd8d11cc3f2c9e4d918412b4faf1d367c4891da4cf7a3fe8141b3d58491e826189ff4af7adec709d143f5424cd21c58164314d7fb79a510545fa3ad5e0ca09dfeb266b124667d314195b43d652ac054ccc04947073d1f553e7a35724a84a921836f931c4e28a5ea35dc4d6aca11f21a1b6ba5dc74"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5}) 1.848978472s ago: executing program 3 (id=479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000008000000000000000000000000000a50000000020a01020000000000000000000000070900010073797a30000000000c00044000000000000000050800024000000001080002400000000308000240000000010c0004400000000000000001140000001100010000000000000000000100000a"], 0x78}}, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r4 = syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0) r5 = openat$incfs(r4, 0x0, 0x624840, 0x11e) read$FUSE(r5, 0x0, 0x0) (async) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0x6, "13b1ac9839163d3fb8e7c898336c4e5a923f1f813d8e12a3156d36d6e8d613e8", 0x5, 0x10, 0x6, 0x80000000, 0x10, 0x4, 0x7884, 0x5}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) (async) clock_gettime(0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x19c5498e, 0x103902) (async) io_setup(0x3, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7}) (async) io_uring_enter(r9, 0x3f80, 0x3697, 0x25, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) 1.711544292s ago: executing program 0 (id=480): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) io_setup(0x1ff, &(0x7f0000000140)) read(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.551992115s ago: executing program 4 (id=481): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x9f71, 0x20000, 0x0, 0x16e, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) pipe(0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000040)="eb", 0x1}], 0x1) read(r10, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x3b677000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) 1.244896171s ago: executing program 3 (id=482): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x203, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x4c}}, 0x20008004) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1.194537466s ago: executing program 0 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x5}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x10, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000480)={0x2c, r2, 0x2, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x806a}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x300}}) socket$netlink(0x10, 0x3, 0x14) 0s ago: executing program 1 (id=484): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES32=r1], 0x8e79f0352167ea94) kernel console output (not intermixed with test programs): [ 153.690473][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.690511][ T6672] __sock_sendmsg+0x221/0x270 [ 153.690546][ T6672] ____sys_sendmsg+0x523/0x860 [ 153.690583][ T6672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.690605][ T6672] ? __fget_files+0x2a/0x420 [ 153.690631][ T6672] ? __fget_files+0x2a/0x420 [ 153.690663][ T6672] __sys_sendmsg+0x271/0x360 [ 153.690695][ T6672] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.690787][ T6672] ? do_syscall_64+0xb6/0x230 [ 153.690820][ T6672] do_syscall_64+0xf3/0x230 [ 153.690848][ T6672] ? clear_bhb_loop+0x45/0xa0 [ 153.690877][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.690900][ T6672] RIP: 0033:0x7f1d2e78d169 [ 153.690921][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.690951][ T6672] RSP: 002b:00007f1d2c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.690975][ T6672] RAX: ffffffffffffffda RBX: 00007f1d2e9a5fa0 RCX: 00007f1d2e78d169 [ 153.690991][ T6672] RDX: 0000000020000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 153.691005][ T6672] RBP: 00007f1d2c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.691019][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.691032][ T6672] R13: 0000000000000000 R14: 00007f1d2e9a5fa0 R15: 00007f1d2eacfa28 [ 153.691067][ T6672] [ 154.329609][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.396413][ T6672] __nla_validate_parse: 1 callbacks suppressed [ 154.396437][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 154.469334][ T5898] usb 5-1: USB disconnect, device number 12 [ 154.776016][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.785950][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.958727][ T5898] usb 5-1: config 0 has no interfaces? [ 154.968097][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.980020][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.990286][ T5898] usb 5-1: Product: syz [ 154.997173][ T5898] usb 5-1: Manufacturer: syz [ 155.002701][ T5898] usb 5-1: SerialNumber: syz [ 155.010385][ T5898] usb 5-1: config 0 descriptor?? [ 155.115973][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 155.159413][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.186374][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.286836][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.303567][ T6675] bond0: (slave bond1): Enslaving as an active interface with an up link [ 155.313375][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.334033][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 155.344785][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.369466][ T10] usb 3-1: Product: syz [ 155.375809][ T10] usb 3-1: Manufacturer: syz [ 155.382901][ T10] usb 3-1: SerialNumber: syz [ 155.394971][ T9] usb 4-1: config 0 has no interfaces? [ 155.408935][ T10] usb 3-1: config 0 descriptor?? [ 155.416939][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.432124][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.443028][ T9] usb 4-1: Product: syz [ 155.447599][ T9] usb 4-1: Manufacturer: syz [ 155.490668][ T9] usb 4-1: SerialNumber: syz [ 155.524421][ T9] usb 4-1: config 0 descriptor?? [ 155.531291][ T6666] syz.0.185 (6666) used greatest stack depth: 19512 bytes left [ 155.690041][ T9] usb 5-1: USB disconnect, device number 13 [ 155.701217][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.719927][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.742517][ T5899] usb 1-1: USB disconnect, device number 17 [ 155.747412][ T6697] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 155.771141][ T6687] program syz.3.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.843614][ T6698] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 155.862883][ T6698] netlink: 2 bytes leftover after parsing attributes in process `syz.2.190'. [ 155.892987][ T6697] batman_adv: batadv0: Adding interface: team0 [ 155.909263][ T6697] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.940309][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.962344][ T6697] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 156.056245][ T6698] team0: entered promiscuous mode [ 156.073292][ T6698] team_slave_0: entered promiscuous mode [ 156.118892][ T6703] process 'syz.1.195' launched './file1' with NULL argv: empty string added [ 156.135229][ T6698] team_slave_1: entered promiscuous mode [ 156.221605][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.232011][ T6698] batman_adv: batadv0: Interface activated: team0 [ 156.287130][ T6698] batman_adv: batadv0: Interface deactivated: team0 [ 156.321138][ T6698] batman_adv: batadv0: Removing interface: team0 [ 156.372806][ T6698] bridge0: port 3(team0) entered blocking state [ 156.435635][ T6698] bridge0: port 3(team0) entered disabled state [ 156.475603][ T6698] team0: entered allmulticast mode [ 156.599610][ T6698] team_slave_0: entered allmulticast mode [ 156.655581][ T6698] team_slave_1: entered allmulticast mode [ 156.700783][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'. [ 156.720062][ T6698] bridge0: port 3(team0) entered blocking state [ 156.729024][ T6698] bridge0: port 3(team0) entered forwarding state [ 157.036785][ T6700] xt_ipcomp: unknown flags 12 [ 157.636195][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.913381][ T9] usb 4-1: USB disconnect, device number 10 [ 157.950849][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 157.995141][ T5899] usb 5-1: config 0 has no interfaces? [ 158.065274][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.146374][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.155099][ T5899] usb 5-1: Product: syz [ 158.183086][ T5898] usb 3-1: USB disconnect, device number 15 [ 158.241391][ T5899] usb 5-1: Manufacturer: syz [ 158.251536][ T5899] usb 5-1: SerialNumber: syz [ 158.410840][ T5899] usb 5-1: config 0 descriptor?? [ 158.679932][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 158.742126][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 158.840197][ T6746] netlink: 'syz.1.206': attribute type 18 has an invalid length. [ 158.869030][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 159.137727][ T5845] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 159.300217][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 159.310133][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.324916][ T5845] usb 3-1: config 0 descriptor?? [ 159.378317][ T5845] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 160.856210][ T5890] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.892658][ T5845] usb 3-1: USB disconnect, device number 16 [ 161.066658][ T5890] usb 4-1: config 0 has no interfaces? [ 161.082358][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.135920][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.226000][ T5890] usb 4-1: Product: syz [ 161.235933][ T5890] usb 4-1: Manufacturer: syz [ 161.242327][ T5890] usb 4-1: SerialNumber: syz [ 161.276167][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.347087][ T5890] usb 4-1: config 0 descriptor?? [ 161.445438][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.536911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.587042][ T6789] program syz.3.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.627230][ T9] usb 1-1: config 0 descriptor?? [ 161.679183][ T9] cp210x 1-1:0.0: cp210x converter detected [ 161.767062][ T5845] usb 5-1: USB disconnect, device number 14 [ 162.039755][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 162.054708][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 162.289251][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.324516][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.366047][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 162.483848][ T5845] usb 1-1: USB disconnect, device number 18 [ 162.508871][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.540522][ T5845] cp210x 1-1:0.0: device disconnected [ 162.575991][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 162.600951][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 162.630737][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.674330][ T9] usb 3-1: Product: syz [ 162.708405][ T9] usb 3-1: Manufacturer: syz [ 162.755464][ T9] usb 3-1: SerialNumber: syz [ 162.798758][ T9] usb 3-1: config 0 descriptor?? [ 162.899984][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 163.640894][ T5845] usb 4-1: USB disconnect, device number 11 [ 164.842476][ T9] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 164.861968][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 165.386841][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.519073][ T6844] kvm: kvm [6843]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 165.605172][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 165.629703][ T10] usb 2-1: config 6 has an invalid interface number: 152 but max is 3 [ 165.702630][ T10] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 165.752965][ T10] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 165.782640][ T10] usb 2-1: config 6 has no interface number 0 [ 165.793555][ T5890] usb 3-1: USB disconnect, device number 17 [ 165.809305][ T10] usb 2-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.867834][ T10] usb 2-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 165.959511][ T10] usb 2-1: config 6 interface 152 has no altsetting 0 [ 165.987183][ T10] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 166.019422][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.045230][ T10] usb 2-1: Product: syz [ 166.050870][ T10] usb 2-1: Manufacturer: syz [ 166.060128][ T5900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 166.074008][ T10] usb 2-1: SerialNumber: syz [ 166.224935][ T5900] usb 5-1: no configurations [ 166.236171][ T5900] usb 5-1: can't read configurations, error -22 [ 166.336126][ T5899] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.403537][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 166.405983][ T5900] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.504649][ T10] ushc 2-1:6.152: probe with driver ushc failed with error -71 [ 166.508288][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.528051][ T10] usb 2-1: USB disconnect, device number 21 [ 166.550624][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.563782][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 166.575585][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.597065][ T5899] usb 1-1: config 0 descriptor?? [ 166.647112][ T5900] usb 5-1: no configurations [ 166.651794][ T5900] usb 5-1: can't read configurations, error -22 [ 166.667020][ T5900] usb usb5-port1: attempt power cycle [ 167.048640][ T5899] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 167.071217][ T5899] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 167.096114][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.103487][ T5899] logitech 0003:046D:CA04.0004: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 167.168210][ T5900] usb 5-1: no configurations [ 167.169342][ T5899] logitech 0003:046D:CA04.0004: no inputs found [ 167.173201][ T5900] usb 5-1: can't read configurations, error -22 [ 167.279314][ T5899] usb 1-1: USB disconnect, device number 19 [ 167.367210][ T5900] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.417642][ T5900] usb 5-1: no configurations [ 167.423702][ T5900] usb 5-1: can't read configurations, error -22 [ 167.446829][ T5900] usb usb5-port1: unable to enumerate USB device [ 167.716175][ T5900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.953909][ T5900] usb 3-1: config 0 has no interfaces? [ 168.023028][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.036276][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.050216][ T5900] usb 3-1: Product: syz [ 168.088946][ T5900] usb 3-1: Manufacturer: syz [ 168.094015][ T5900] usb 3-1: SerialNumber: syz [ 168.103895][ T5900] usb 3-1: config 0 descriptor?? [ 168.286103][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.427300][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 168.448206][ T6862] program syz.2.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.460519][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.489134][ T9] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 168.506856][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.547782][ T9] usb 4-1: config 1 has no interface number 1 [ 168.554740][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.584336][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.601375][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 168.613514][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.629973][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.645533][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.713596][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.735334][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.752393][ T9] usb 4-1: Product: syz [ 168.778731][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 168.793114][ T9] usb 4-1: Manufacturer: syz [ 168.813913][ T9] usb 4-1: SerialNumber: syz [ 168.820235][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 168.931364][ T10] usb 1-1: Product: syz [ 168.960799][ T10] usb 1-1: Manufacturer: syz [ 169.045215][ T10] usb 1-1: SerialNumber: syz [ 169.159348][ T9] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 169.169615][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 169.211940][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 169.434180][ T10] usb 1-1: USB disconnect, device number 20 [ 169.773860][ T9] usb 4-1: USB disconnect, device number 12 [ 169.783321][ T10] appletouch 1-1:1.0: input: appletouch disconnected [ 170.556101][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.926074][ T5845] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 170.939669][ T9] usb 4-1: config index 0 descriptor too short (expected 15012, got 77) [ 170.958638][ T9] usb 4-1: config 68 has too many interfaces: 160, using maximum allowed: 32 [ 170.996049][ T9] usb 4-1: config 68 has an invalid descriptor of length 145, skipping remainder of the config [ 171.039228][ T9] usb 4-1: config 68 has 0 interfaces, different from the descriptor's value: 160 [ 171.087618][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.097972][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.127000][ T9] usb 4-1: Product: syz [ 171.154811][ T5845] usb 1-1: config 0 has no interfaces? [ 171.372379][ T5845] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.386009][ T9] usb 4-1: Manufacturer: syz [ 171.407208][ T9] usb 4-1: SerialNumber: syz [ 171.416034][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.456184][ T5845] usb 1-1: Product: syz [ 171.468460][ T5845] usb 1-1: Manufacturer: syz [ 171.547035][ T5845] usb 1-1: SerialNumber: syz [ 171.554583][ T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.570816][ T5845] usb 1-1: config 0 descriptor?? [ 171.731912][ T6900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.241'. [ 171.913706][ T47] usb 2-1: config 0 has no interfaces? [ 171.936346][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.954393][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.983384][ T47] usb 2-1: Product: syz [ 172.032110][ T5845] usb 3-1: USB disconnect, device number 18 [ 172.060062][ T47] usb 2-1: Manufacturer: syz [ 172.102694][ T47] usb 2-1: SerialNumber: syz [ 172.146115][ T47] usb 2-1: config 0 descriptor?? [ 172.984315][ T6916] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 174.568543][ T6922] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 174.752470][ T6922] bond1: entered promiscuous mode [ 174.760374][ T6922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.210921][ T6921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.272823][ T6921] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 175.314263][ T9] usb 4-1: USB disconnect, device number 13 [ 175.356001][ T6921] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 175.382879][ T5845] usb 1-1: USB disconnect, device number 21 [ 175.454880][ T6921] bond1: (slave ip6gre1): making interface the new active one [ 175.524342][ T6921] ip6gre1: entered promiscuous mode [ 175.538836][ T6921] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 175.549175][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.663968][ T5899] usb 2-1: USB disconnect, device number 22 [ 176.351561][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.669675][ T5845] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.896949][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 176.996097][ T5845] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.132540][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.231728][ T5845] usb 4-1: Product: syz [ 177.241856][ T5845] usb 4-1: Manufacturer: syz [ 177.250792][ T5845] usb 4-1: SerialNumber: syz [ 177.287990][ T5845] usb 4-1: config 0 descriptor?? [ 177.515037][ T5845] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.584210][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.250'. [ 177.641286][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.739094][ T6959] batadv_slave_1: entered promiscuous mode [ 177.814204][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 177.946002][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 178.187003][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 178.284081][ T10] usb 2-1: config 56 has an invalid interface number: 119 but max is 3 [ 178.296355][ T10] usb 2-1: config 56 has an invalid interface number: 110 but max is 3 [ 178.319716][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.341644][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.354428][ T10] usb 2-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 178.371821][ T10] usb 2-1: config 56 has 2 interfaces, different from the descriptor's value: 4 [ 178.425109][ T5845] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 178.463565][ T10] usb 2-1: config 56 has no interface number 0 [ 178.516016][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.841212][ T6961] netlink: 'syz.2.254': attribute type 7 has an invalid length. [ 178.861253][ T5845] usb 4-1: USB disconnect, device number 14 [ 178.942481][ T10] usb 2-1: config 56 has no interface number 1 [ 178.989154][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 179.029062][ T10] usb 2-1: config 56 interface 110 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.062956][ T6969] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 179.087149][ T10] usb 2-1: config 56 interface 119 has no altsetting 0 [ 179.094427][ T10] usb 2-1: config 56 interface 110 has no altsetting 0 [ 179.106437][ T9] usb 5-1: config index 0 descriptor too short (expected 15012, got 77) [ 179.129796][ T9] usb 5-1: config 68 has too many interfaces: 160, using maximum allowed: 32 [ 179.206703][ T9] usb 5-1: config 68 has an invalid descriptor of length 145, skipping remainder of the config [ 179.218754][ T9] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 160 [ 179.240559][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 179.254540][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.266781][ T9] usb 5-1: Product: syz [ 179.271734][ T9] usb 5-1: Manufacturer: syz [ 179.277464][ T9] usb 5-1: SerialNumber: syz [ 179.632640][ T6965] netlink: 56 bytes leftover after parsing attributes in process `syz.4.257'. [ 179.811387][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 180.242424][ T1113] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.275269][ T5899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.286526][ T1113] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.528751][ T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.696027][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 180.718630][ T6993] netlink: 'syz.3.264': attribute type 3 has an invalid length. [ 180.776678][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.867667][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 180.895545][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.895622][ T5899] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 180.895750][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 180.895785][ T5899] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 180.895903][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 180.900897][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.900931][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.900954][ T5899] usb 3-1: SerialNumber: syz [ 180.914047][ T6991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.088110][ T6991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.368856][ T6997] xt_l2tp: unknown flags: 10 [ 181.393169][ T5899] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 181.500611][ T10] usb 2-1: string descriptor 0 read error: -71 [ 181.505974][ T5899] usb 3-1: USB disconnect, device number 19 [ 181.531589][ T10] usb 2-1: New USB device found, idVendor=0856, idProduct=ac42, bcdDevice=38.07 [ 181.613752][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.677410][ T7002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 181.682646][ T9] usb 5-1: USB disconnect, device number 19 [ 181.724076][ T10] usb 2-1: can't set config #56, error -71 [ 181.766457][ T10] usb 2-1: USB disconnect, device number 23 [ 181.857825][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 181.892157][ T6998] "syz.0.265" (6998) uses obsolete ecb(arc4) skcipher [ 182.423862][ T7020] block device autoloading is deprecated and will be removed. [ 182.705704][ T47] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 182.866846][ T47] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 182.897858][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.926238][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.974717][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.274'. [ 182.988715][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.035043][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.071713][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.094531][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.111533][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.134884][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.155113][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.170844][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.179558][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.193189][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.612105][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.635158][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.984560][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.071425][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.216042][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.297073][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 184.337808][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.406347][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 184.416025][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.454246][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.494096][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.528607][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 184.564535][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.619127][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.677131][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.697309][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.728708][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 184.866000][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.974716][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.993676][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.012413][ T47] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.028223][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 185.048523][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.181214][ T47] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 185.259838][ T5845] usb 5-1: config index 0 descriptor too short (expected 15012, got 77) [ 185.276640][ T5845] usb 5-1: config 68 has too many interfaces: 160, using maximum allowed: 32 [ 185.320144][ T5845] usb 5-1: config 68 has an invalid descriptor of length 145, skipping remainder of the config [ 185.334376][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.361983][ T5845] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 160 [ 185.417805][ T5845] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.429722][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.531267][ T5845] usb 5-1: Product: syz [ 185.541209][ T47] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 185.556916][ T5845] usb 5-1: Manufacturer: syz [ 185.596091][ T5845] usb 5-1: SerialNumber: syz [ 185.670921][ T47] usb 1-1: can't read configurations, error -71 [ 185.856927][ T7045] netlink: 56 bytes leftover after parsing attributes in process `syz.4.277'. [ 186.769087][ T7070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.285'. [ 188.231903][ T7081] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 188.325234][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 188.489660][ T7086] random: crng reseeded on system resumption [ 188.533446][ T7084] sctp: failed to load transform for md5: -2 [ 189.730427][ T5845] usb 5-1: USB disconnect, device number 20 [ 189.825975][ T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 189.924204][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.058928][ T47] usb 1-1: config 0 has no interfaces? [ 190.136044][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.206006][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.224415][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.308269][ T9] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 190.332108][ T47] usb 1-1: Product: syz [ 190.334733][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.405987][ T47] usb 1-1: Manufacturer: syz [ 190.413564][ T47] usb 1-1: SerialNumber: syz [ 190.434904][ T9] usb 4-1: config 0 descriptor?? [ 190.464596][ T47] usb 1-1: config 0 descriptor?? [ 190.570592][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 190.786200][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 190.809408][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 190.860367][ T5898] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 190.871164][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 190.904594][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.925939][ T5898] usb 5-1: Product: syz [ 190.932315][ T5898] usb 5-1: Manufacturer: syz [ 190.953617][ T5898] usb 5-1: SerialNumber: syz [ 190.974847][ T5898] usb 5-1: config 0 descriptor?? [ 191.022191][ T5898] gspca_main: sq930x-2.14.0 probing 2770:930c [ 191.047816][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 191.150595][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 191.288947][ T9] usb 4-1: USB disconnect, device number 15 [ 191.424269][ T5898] gspca_sq930x: ucbus_write failed -71 [ 191.442258][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.297'. [ 191.659531][ T5898] gspca_sq930x: Sensor ov9630 not yet treated [ 191.667429][ T5898] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 191.694966][ T5898] usb 5-1: USB disconnect, device number 21 [ 192.087955][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 192.336013][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 192.355456][ T9] usb 2-1: config index 0 descriptor too short (expected 56, got 27) [ 192.414475][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 1 [ 192.510486][ T9] usb 2-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 192.579589][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 192.621364][ T9] usb 2-1: config 0 has no interface number 0 [ 192.659916][ T9] usb 2-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 192.674013][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.739204][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 192.812616][ T9] usb 2-1: Product: syz [ 192.822667][ T9] usb 2-1: Manufacturer: syz [ 192.865926][ T9] usb 2-1: SerialNumber: syz [ 192.887863][ T9] usb 2-1: config 0 descriptor?? [ 193.012474][ T10] usb 1-1: USB disconnect, device number 24 [ 193.036101][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 193.508910][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 193.676130][ T5898] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 193.825986][ T5840] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 193.908591][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.955614][ T5898] usb 1-1: config index 0 descriptor too short (expected 15012, got 77) [ 193.982206][ T5898] usb 1-1: config 68 has too many interfaces: 160, using maximum allowed: 32 [ 193.995778][ T5898] usb 1-1: config 68 has an invalid descriptor of length 145, skipping remainder of the config [ 194.054113][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 194.069026][ T5898] usb 1-1: config 68 has 0 interfaces, different from the descriptor's value: 160 [ 194.100769][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.124720][ T5840] usb 5-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.139321][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 194.159529][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.185785][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 194.195446][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 194.223514][ T5898] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 194.244576][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 194.299412][ T5840] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 194.321592][ T10] usb 4-1: SerialNumber: syz [ 194.322105][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.339127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340330][ T10] usb 4-1: config 0 descriptor?? [ 194.350460][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.378143][ T5898] usb 1-1: Product: syz [ 194.384714][ T5898] usb 1-1: Manufacturer: syz [ 194.407265][ T5898] usb 1-1: SerialNumber: syz [ 194.556172][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.641172][ T7140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.302'. [ 194.662306][ T10] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 194.676833][ T5840] usb 5-1: Product: syz [ 194.746161][ T5840] usb 5-1: Manufacturer: syz [ 194.779680][ T10] usb 4-1: Failed to create links for entity 255 [ 194.787846][ T5840] usb 5-1: SerialNumber: syz [ 194.798557][ T10] usb 4-1: Failed to register entities (-22). [ 194.863573][ T7138] lo: entered allmulticast mode [ 194.872714][ T7138] tunl0: entered allmulticast mode [ 194.907003][ T7138] gre0: entered allmulticast mode [ 194.915062][ T7138] gretap0: entered allmulticast mode [ 195.177534][ T7138] erspan0: entered allmulticast mode [ 195.186850][ T7138] ip_vti0: entered allmulticast mode [ 195.209292][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.239554][ T7138] ip6_vti0: entered allmulticast mode [ 195.267630][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.300676][ T7138] sit0: entered allmulticast mode [ 195.323386][ T7138] ip6tnl0: entered allmulticast mode [ 195.409835][ T7138] ip6gre0: entered allmulticast mode [ 195.470728][ T7138] syz_tun: entered allmulticast mode [ 195.529435][ T7138] ip6gretap0: entered allmulticast mode [ 195.573618][ T7138] bridge0: entered allmulticast mode [ 195.631758][ T7138] vcan0: entered allmulticast mode [ 195.658561][ T7138] bond0: entered allmulticast mode [ 195.682759][ T7138] bond_slave_0: entered allmulticast mode [ 195.726865][ T7138] bond_slave_1: entered allmulticast mode [ 195.794239][ T7138] team0: entered allmulticast mode [ 195.840098][ T7138] team_slave_0: entered allmulticast mode [ 195.896301][ T7138] team_slave_1: entered allmulticast mode [ 196.036552][ T7138] dummy0: entered allmulticast mode [ 196.044132][ T7138] nlmon0: entered allmulticast mode [ 196.050802][ T7138] caif0: entered allmulticast mode [ 196.060532][ T7138] batadv0: entered allmulticast mode [ 196.094874][ T7138] vxcan0: entered allmulticast mode [ 196.136748][ T7138] vxcan1: entered allmulticast mode [ 196.143297][ T7138] veth0: entered allmulticast mode [ 196.151970][ T7138] veth1: entered allmulticast mode [ 196.160539][ T7138] wg0: entered allmulticast mode [ 196.167551][ T7138] wg1: entered allmulticast mode [ 196.174066][ T7138] wg2: entered allmulticast mode [ 196.182164][ T7138] veth0_to_bridge: entered allmulticast mode [ 196.193228][ T7138] veth1_to_bridge: entered allmulticast mode [ 196.251185][ T7138] veth0_to_bond: entered allmulticast mode [ 196.291382][ T7138] veth1_to_bond: entered allmulticast mode [ 196.375443][ T7138] veth0_to_team: entered allmulticast mode [ 196.454356][ T7138] veth1_to_team: entered allmulticast mode [ 196.627623][ T7138] veth0_to_batadv: entered allmulticast mode [ 196.641013][ T7138] batadv_slave_0: entered allmulticast mode [ 196.650832][ T7138] veth1_to_batadv: entered allmulticast mode [ 196.685368][ T7138] batadv_slave_1: entered allmulticast mode [ 196.755214][ T5840] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input16 [ 196.777763][ T7138] xfrm0: entered allmulticast mode [ 196.864432][ T5198] bcm5974 5-1:1.0: could not read from device [ 196.892674][ T7138] veth0_to_hsr: entered allmulticast mode [ 196.947069][ T7138] hsr_slave_0: entered allmulticast mode [ 196.967972][ T7138] veth1_to_hsr: entered allmulticast mode [ 196.975246][ T7138] hsr_slave_1: entered allmulticast mode [ 197.017934][ T5198] bcm5974 5-1:1.0: could not read from device [ 197.046412][ T5840] usb 5-1: USB disconnect, device number 22 [ 197.099864][ T7138] hsr0: entered allmulticast mode [ 197.109524][ T5198] bcm5974 5-1:1.0: could not read from device [ 197.146588][ T7138] veth1_virt_wifi: entered allmulticast mode [ 197.159504][ T9] gspca_main: ov519-2.14.0 probing 0e96:c001 [ 197.178694][ T7138] veth0_virt_wifi: entered allmulticast mode [ 197.194533][ T7138] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 197.203449][ T9] ov519 2-1:0.85: reg_w 00 failed -71 [ 197.240350][ T7138] veth1_vlan: entered allmulticast mode [ 197.265527][ T7138] veth0_vlan: entered allmulticast mode [ 197.285094][ T7138] vlan0: entered allmulticast mode [ 197.302532][ T7138] vlan1: entered allmulticast mode [ 197.319576][ T7138] macvlan0: entered allmulticast mode [ 197.330344][ T7138] macvlan1: entered allmulticast mode [ 197.343533][ T7138] ipvlan0: entered allmulticast mode [ 197.351615][ T7138] ipvlan1: entered allmulticast mode [ 197.361814][ T7138] veth1_macvtap: entered allmulticast mode [ 197.373786][ T7138] veth0_macvtap: entered allmulticast mode [ 197.384136][ T7138] macvtap0: entered allmulticast mode [ 197.394800][ T7138] macsec0: entered allmulticast mode [ 197.404432][ T7138] geneve0: entered allmulticast mode [ 197.413012][ T7138] geneve1: entered allmulticast mode [ 197.422403][ T7138] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 197.471351][ T7138] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 197.505456][ T7138] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 197.529662][ T7138] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 197.545399][ T7138] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 197.557543][ T7138] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 197.573912][ T7138] macvlan2: entered allmulticast mode [ 197.583526][ T7138] syztnl1: entered allmulticast mode [ 197.927277][ T5899] usb 4-1: USB disconnect, device number 16 [ 198.079453][ T7161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 198.134874][ T7158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.308'. [ 198.400486][ T5898] usb 1-1: USB disconnect, device number 25 [ 198.706162][ T5840] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 198.870878][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 198.888842][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 198.906025][ T5899] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 198.912009][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.971575][ T5840] usb 4-1: config 0 has no interfaces? [ 198.981412][ T5840] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 198.997638][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.016586][ T5840] usb 4-1: config 0 descriptor?? [ 199.066384][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 199.089061][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.169426][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.180049][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.196863][ T5899] usb 5-1: Product: syz [ 199.203152][ T5899] usb 5-1: Manufacturer: syz [ 199.209425][ T5899] usb 5-1: SerialNumber: syz [ 199.219669][ T5899] usb 5-1: config 0 descriptor?? [ 199.244725][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 199.278315][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 199.294393][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.314891][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.326695][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.341765][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.358586][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.369728][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.503160][ T5899] usb 5-1: USB disconnect, device number 23 [ 199.617768][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 199.625610][ T10] usbtmc 1-1:16.0: can't read capabilities [ 199.728614][ T6364] udevd[6364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.753760][ T5890] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 199.827390][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 199.864872][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 199.934548][ T10] usb 1-1: USB disconnect, device number 26 [ 199.958717][ T5890] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 199.984113][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.052118][ T5890] usb 3-1: config 0 descriptor?? [ 200.092945][ T5890] pwc: Samsung MPC-C10 USB webcam detected. [ 200.384148][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.402506][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.509319][ T7192] ip6gre3: entered promiscuous mode [ 200.539348][ T5890] pwc: send_video_command error -71 [ 200.551306][ T5890] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 200.625120][ T5890] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 200.671862][ T5890] usb 3-1: USB disconnect, device number 20 [ 200.896162][ T5898] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.113550][ T5898] usb 5-1: config 0 has no interfaces? [ 201.146450][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.173879][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.223717][ T10] usb 4-1: USB disconnect, device number 17 [ 201.359074][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.436048][ T5890] usb 3-1: device descriptor read/64, error -71 [ 201.442891][ T5898] usb 5-1: Product: syz [ 201.461411][ T5898] usb 5-1: Manufacturer: syz [ 201.501276][ T5898] usb 5-1: SerialNumber: syz [ 201.557142][ T5898] usb 5-1: config 0 descriptor?? [ 201.706057][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.890875][ T5890] usb 3-1: device descriptor read/64, error -71 [ 202.030996][ T5890] usb usb3-port1: attempt power cycle [ 202.396076][ T5890] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 202.428689][ T5890] usb 3-1: device descriptor read/8, error -71 [ 202.801906][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.323'. [ 202.830095][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.323'. [ 203.233280][ T5890] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 203.324699][ T5890] usb 3-1: config 0 has no interfaces? [ 203.372483][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.486225][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.574826][ T5890] usb 3-1: Product: syz [ 203.632224][ T5890] usb 3-1: Manufacturer: syz [ 203.664089][ T5890] usb 3-1: SerialNumber: syz [ 203.784922][ T5890] usb 3-1: config 0 descriptor?? [ 203.839825][ T10] usb 5-1: USB disconnect, device number 24 [ 204.375997][ T9] ov519 2-1:0.85: Can't determine sensor slave IDs [ 204.382797][ T9] ov519 2-1:0.85: OV519 Config failed [ 204.389160][ T9] ov519 2-1:0.85: probe with driver ov519 failed with error -22 [ 204.418222][ T9] usb 2-1: USB disconnect, device number 24 [ 204.606396][ T5899] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 204.959287][ T5899] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 205.033850][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.070862][ T5899] usb 1-1: Product: syz [ 205.081789][ T5899] usb 1-1: Manufacturer: syz [ 205.086727][ T5899] usb 1-1: SerialNumber: syz [ 205.097468][ T5899] usb 1-1: config 0 descriptor?? [ 205.108521][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.125097][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.224705][ T5899] gspca_main: sq930x-2.14.0 probing 2770:930c [ 205.576412][ T7244] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 205.656275][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 205.997515][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.068380][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.170838][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.216815][ T5899] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 206.236352][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.275951][ T7253] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 206.312212][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.446077][ T5899] gspca_sq930x: Sensor ov9630 not yet treated [ 206.466608][ T5899] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 206.502404][ T5899] usb 1-1: USB disconnect, device number 27 [ 206.543774][ T9] usb 4-1: USB disconnect, device number 18 [ 206.551363][ T30] audit: type=1400 audit(1744416267.220:2): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=03 pid=7252 comm="syz.3.334" [ 206.997773][ T10] usb 3-1: USB disconnect, device number 24 [ 207.201497][ T6364] udevd[6364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.229983][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.337'. [ 207.306360][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.337'. [ 207.853207][ T7275] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 207.915233][ T7275] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 208.003693][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 208.017018][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 208.146017][ T5900] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 208.223618][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.320081][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.334780][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 208.350394][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 208.365665][ T9] usb 4-1: Manufacturer: syz [ 208.382203][ T9] usb 4-1: config 0 descriptor?? [ 208.392170][ T5900] usb 1-1: config 0 has no interfaces? [ 208.418018][ T5900] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.432223][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.491372][ T5900] usb 1-1: Product: syz [ 208.495753][ T5900] usb 1-1: Manufacturer: syz [ 208.509321][ T5900] usb 1-1: SerialNumber: syz [ 208.740268][ T5900] usb 1-1: config 0 descriptor?? [ 209.036073][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.158386][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.214140][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.376033][ T5899] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 211.412729][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 211.422641][ T7303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'. [ 211.519885][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.536214][ T5900] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 211.556183][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 211.568332][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.714335][ T5899] usb 3-1: device descriptor read/all, error -71 [ 211.721049][ T5900] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 211.768435][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 211.775537][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.783473][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.789964][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 211.796283][ T5856] Bluetooth: hci3: command 0x0405 tx timeout [ 211.866171][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.874640][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 211.918342][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 211.976117][ T5900] usb 5-1: Product: syz [ 212.014615][ T5900] usb 5-1: Manufacturer: syz [ 212.023483][ T9] usb 4-1: USB disconnect, device number 19 [ 212.041556][ T5900] usb 5-1: SerialNumber: syz [ 212.071274][ T5900] usb 5-1: config 0 descriptor?? [ 212.345376][ T5900] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 212.355387][ T5900] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 212.495726][ T7317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.349'. [ 212.533067][ T5900] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 212.569434][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.349'. [ 212.624801][ T5900] usb 5-1: USB disconnect, device number 25 [ 212.860964][ T7308] ALSA: mixer_oss: invalid OSS volume '' [ 212.992421][ T5899] usb 1-1: USB disconnect, device number 28 [ 213.156494][ T5840] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 213.237486][ T7327] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 213.316082][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 213.334804][ T5840] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.385866][ T5840] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.411410][ T5840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.441978][ T5840] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.472899][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.518479][ T5840] usb 2-1: config 0 descriptor?? [ 213.566045][ T5899] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 213.834289][ T5899] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 213.844518][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.862684][ T5899] usb 5-1: Product: syz [ 213.876010][ T5899] usb 5-1: Manufacturer: syz [ 213.893307][ T5899] usb 5-1: SerialNumber: syz [ 213.966676][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.975551][ T5899] usb 5-1: config 0 descriptor?? [ 213.981893][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.179837][ T7330] netlink: 'syz.3.351': attribute type 7 has an invalid length. [ 214.245132][ T7330] : entered promiscuous mode [ 214.293223][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 214.302373][ T7330] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 214.329941][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 214.416580][ T5899] usb 5-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 214.513008][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 214.526965][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.558723][ T9] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 214.576321][ T9] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 214.597578][ T9] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 214.613202][ T9] usb 3-1: config 128 has no interface number 0 [ 214.622205][ T9] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 214.644411][ T9] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.674612][ T9] usb 3-1: config 128 interface 127 has no altsetting 0 [ 214.696468][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 214.713159][ T5899] usb 5-1: failed to fetch extended address, random address set [ 214.726484][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.769559][ T9] usb 3-1: Product: syz [ 214.773899][ T9] usb 3-1: Manufacturer: syz [ 214.804962][ T9] usb 3-1: SerialNumber: syz [ 214.844056][ T5899] usb 5-1: USB disconnect, device number 26 [ 214.846325][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 214.986015][ T5840] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 215.015999][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 215.023434][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 215.036004][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.057359][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.071069][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.091862][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 215.148373][ T5840] usb 1-1: config 2 has an invalid interface number: 10 but max is 0 [ 215.168652][ T5840] usb 1-1: config 2 has an invalid interface descriptor of length 2, skipping [ 215.180859][ T5840] usb 1-1: config 2 has no interface number 0 [ 215.194145][ T5840] usb 1-1: config 2 interface 10 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 215.212032][ T5840] usb 1-1: config 2 interface 10 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.229831][ T5840] usb 1-1: config 2 interface 10 has no altsetting 0 [ 215.249380][ T5840] usb 1-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 215.265560][ T9] usb 3-1: USB disconnect, device number 27 [ 215.277249][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.288655][ T5840] usb 1-1: Product: syz [ 215.304005][ T5900] usb 4-1: USB disconnect, device number 20 [ 215.315607][ T5840] usb 1-1: Manufacturer: syz [ 215.333705][ T5840] usb 1-1: SerialNumber: syz [ 215.467253][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.575646][ T5840] ums-isd200 1-1:2.10: USB Mass Storage device detected [ 215.809834][ T5899] usb 2-1: USB disconnect, device number 26 [ 215.978405][ T5840] usb 1-1: USB disconnect, device number 29 [ 216.728063][ T30] audit: type=1326 audit(1744416277.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 216.787756][ T30] audit: type=1326 audit(1744416277.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 216.996211][ T30] audit: type=1326 audit(1744416277.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.163478][ T30] audit: type=1326 audit(1744416277.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.244134][ T30] audit: type=1326 audit(1744416277.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.335976][ T30] audit: type=1326 audit(1744416277.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.416402][ T5899] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 217.438931][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 217.459529][ T30] audit: type=1326 audit(1744416277.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.567680][ T30] audit: type=1326 audit(1744416277.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.605989][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 217.611243][ T5890] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 217.625125][ T5899] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 217.673485][ T30] audit: type=1326 audit(1744416277.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.737262][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 217.771648][ T5899] usb 2-1: can't read configurations, error -61 [ 217.805947][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 217.823412][ T5890] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 217.842273][ T30] audit: type=1326 audit(1744416277.590:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39598d169 code=0x7ffc0000 [ 217.870408][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.935011][ T5890] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 217.947813][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 217.974589][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.036768][ T5890] usb 5-1: Product: syz [ 218.052016][ T5890] usb 5-1: Manufacturer: syz [ 218.062226][ T5890] usb 5-1: SerialNumber: syz [ 218.116091][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 218.130120][ T5890] usb 5-1: config 0 descriptor?? [ 218.145259][ T5899] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 218.195228][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.211919][ T5899] usb 2-1: can't read configurations, error -61 [ 218.230279][ T5890] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 218.254264][ T5899] usb usb2-port1: attempt power cycle [ 218.455763][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.506575][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.626109][ T5899] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 218.639717][ T5890] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 218.666831][ T5890] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 218.680894][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 218.689600][ T5899] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 218.722443][ T5890] usb 5-1: USB disconnect, device number 27 [ 218.736377][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.767091][ T5899] usb 2-1: can't read configurations, error -61 [ 218.787192][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 218.815016][ T7395] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.826443][ T7395] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.835564][ T7395] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.846724][ T7395] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.893408][ T7395] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.904287][ T7395] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.914010][ T7395] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.925070][ T7395] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.942041][ T5899] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 218.994895][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 219.003793][ T5899] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 219.048772][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 219.056749][ T5899] usb 2-1: can't read configurations, error -61 [ 219.081413][ T5899] usb usb2-port1: unable to enumerate USB device [ 219.437020][ T7398] netlink: 'syz.0.368': attribute type 7 has an invalid length. [ 219.497487][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 219.510831][ T7398] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 219.776008][ T5840] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.809608][ T7408] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.372'. [ 219.875470][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 219.946868][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 219.955008][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.024918][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 220.035654][ T5840] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 220.052103][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.062841][ T5840] usb 5-1: Product: syz [ 220.073685][ T5840] usb 5-1: Manufacturer: syz [ 220.079256][ T5900] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 220.090148][ T5840] usb 5-1: SerialNumber: syz [ 220.320682][ T5900] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 220.333741][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.352390][ T5900] usb 3-1: config 0 has no interface number 0 [ 220.360006][ T5900] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 220.375880][ T5900] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 220.392691][ T5900] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 220.424283][ T5900] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 220.447496][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.459205][ T5900] usb 3-1: Product: syz [ 220.463816][ T5900] usb 3-1: Manufacturer: syz [ 220.471018][ T5900] usb 3-1: SerialNumber: syz [ 220.497953][ T5900] usb 3-1: config 0 descriptor?? [ 220.524305][ T5900] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 220.776043][ T5890] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 220.806812][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.853738][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.977062][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 221.022885][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.072782][ T5890] usb 2-1: config 129 has an invalid interface number: 252 but max is 0 [ 221.083887][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.119740][ T5890] usb 2-1: config 129 has no interface number 0 [ 221.131303][ T5890] usb 2-1: config 129 interface 252 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 221.160508][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.179897][ T5890] usb 2-1: config 129 interface 252 has no altsetting 0 [ 221.195033][ T5890] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=5e.c9 [ 221.215058][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.233948][ T5890] usb 2-1: Product: syz [ 221.241104][ T5890] usb 2-1: Manufacturer: syz [ 221.255129][ T5890] usb 2-1: SerialNumber: syz [ 221.274457][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.294541][ T7421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.412997][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.567511][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.674740][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.687069][ T5898] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 221.935764][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.984862][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.018715][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 222.032977][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 222.034463][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.049607][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 222.074158][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.108017][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 222.158607][ T5899] usb 3-1: USB disconnect, device number 28 [ 222.201790][ T5898] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 222.219144][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 222.406833][ T5898] usb 4-1: Product: syz [ 222.406908][ T5840] usbhid 5-1:1.0: can't add hid device: -71 [ 222.411316][ T5898] usb 4-1: Manufacturer: syz [ 222.484078][ T5840] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 222.561109][ T5898] usb 4-1: SerialNumber: syz [ 222.587524][ T5840] usb 5-1: USB disconnect, device number 28 [ 222.909928][ T5898] usb 4-1: config 0 descriptor?? [ 223.212379][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 223.340224][ T7435] bridge_slave_1: left allmulticast mode [ 223.357705][ T7435] bridge_slave_1: left promiscuous mode [ 223.379669][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.498773][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 223.512783][ T7435] bridge_slave_0: left allmulticast mode [ 223.522917][ T7435] bridge_slave_0: left promiscuous mode [ 223.530442][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.567234][ T7433] fuse: Bad value for 'rootmode' [ 223.577480][ T7433] netlink: 9 bytes leftover after parsing attributes in process `syz.4.378'. [ 223.618951][ T5890] keyspan 2-1:129.252: Keyspan 1 port adapter converter detected [ 223.646562][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 84 [ 223.688584][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.721136][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 82 [ 223.746424][ T5898] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 223.765567][ T5898] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 223.824424][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 1 [ 223.877828][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 2 [ 223.888719][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.895758][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 83 [ 223.910425][ T5890] keyspan 2-1:129.252: found no endpoint descriptor for endpoint 3 [ 223.933581][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.979606][ T5890] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 224.016719][ T7433] 0: renamed from hsr0 (while UP) [ 224.038653][ T5890] usb 2-1: USB disconnect, device number 31 [ 224.055328][ T9] usb 3-1: config 0 descriptor?? [ 224.085565][ T5890] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 224.098395][ T5890] keyspan 2-1:129.252: device disconnected [ 224.098559][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 224.114912][ T7433] 0: entered allmulticast mode [ 224.120254][ T7433] hsr_slave_0: entered allmulticast mode [ 224.132251][ T7433] hsr_slave_1: entered allmulticast mode [ 224.144112][ T7433] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 224.298976][ T9] pwc: send_video_command error -71 [ 224.311852][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 224.320678][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 224.345438][ T9] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 224.400749][ T9] usb 3-1: USB disconnect, device number 29 [ 224.426211][ T5890] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 224.485485][ T7450] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.497434][ T7450] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.509275][ T7450] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.519508][ T7450] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.596673][ T7450] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.606752][ T7450] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.615987][ T7450] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.626917][ T7450] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.636085][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 224.663056][ T5890] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 224.676744][ T5890] usb 2-1: config 0 has no interface number 0 [ 224.693871][ T5890] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.711909][ T5890] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.726694][ T5890] usb 2-1: config 0 interface 41 has no altsetting 0 [ 224.742892][ T5890] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 224.753114][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.796944][ T5890] usb 2-1: Product: syz [ 224.803298][ T5890] usb 2-1: Manufacturer: syz [ 224.825364][ T5890] usb 2-1: SerialNumber: syz [ 224.834927][ T5890] usb 2-1: config 0 descriptor?? [ 224.842194][ T7445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.856391][ T7445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.887548][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 224.937513][ T5899] usb 4-1: USB disconnect, device number 21 [ 224.945677][ T7429] delete_channel: no stack [ 225.068860][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.098266][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.115266][ T5890] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 225.149775][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.186979][ T7457] IPv6: Can't replace route, no match found [ 225.211749][ T5890] usb 2-1: USB disconnect, device number 32 [ 225.232303][ T9] usb 3-1: config 0 descriptor?? [ 225.286350][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 225.532041][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 225.669626][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.695403][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.716926][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.728335][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.741676][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.750712][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.758111][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.765370][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 225.773259][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 225.781265][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 225.789562][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 225.797557][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 225.807464][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 225.822668][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 225.832501][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 225.840265][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 225.853474][ T9] pwc: Registered as video103. [ 225.863469][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 225.876124][ T5890] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 225.896041][ T9] usb 3-1: USB disconnect, device number 30 [ 226.183636][ T7470] ip6t_srh: unknown srh invflags 7863 [ 226.254094][ T5890] usb 5-1: device descriptor read/64, error -71 [ 226.676088][ T5890] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 226.818045][ T5890] usb 5-1: device descriptor read/64, error -71 [ 226.895947][ T5899] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 226.939915][ T5890] usb usb5-port1: attempt power cycle [ 227.062545][ T5899] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 227.095774][ T5899] usb 3-1: config 0 has no interface number 0 [ 227.102994][ T5899] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.119440][ T5899] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.148393][ T5899] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 227.167174][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.177746][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 227.183140][ T5899] usb 3-1: Product: syz [ 227.191691][ T5899] usb 3-1: Manufacturer: syz [ 227.201159][ T5899] usb 3-1: SerialNumber: syz [ 227.211714][ T5899] usb 3-1: config 0 descriptor?? [ 227.236888][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.251139][ T5899] vmk80xx 3-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 227.307999][ T5899] vmk80xx 3-1:0.255: probe with driver vmk80xx failed with error -22 [ 227.326015][ T5890] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 227.418272][ T5890] usb 5-1: device descriptor read/8, error -71 [ 227.457980][ T9] usb 3-1: USB disconnect, device number 31 [ 227.723087][ T5890] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 227.773941][ T5890] usb 5-1: device descriptor read/8, error -71 [ 227.904494][ T5890] usb usb5-port1: unable to enumerate USB device [ 228.196023][ T5900] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 228.368356][ T5900] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 228.385918][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.436785][ T5900] usb 1-1: config 0 descriptor?? [ 228.496528][ T5890] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 228.677203][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.697098][ T5898] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 228.711055][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 228.724510][ T7485] tipc: Enabling of bearer rejected, media not registered [ 228.744374][ T5900] usbhid 1-1:0.0: can't add hid device: -71 [ 228.753421][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 228.778809][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 228.793493][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.821247][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 228.832998][ T5900] usb 1-1: USB disconnect, device number 30 [ 228.877933][ T5898] usb 4-1: device descriptor read/64, error -71 [ 228.910176][ T5890] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 228.926114][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 228.952920][ T5890] usb 3-1: Product: syz [ 228.985418][ T5890] usb 3-1: Manufacturer: syz [ 229.073501][ T5890] usb 3-1: SerialNumber: syz [ 229.091158][ T5890] usb 3-1: config 0 descriptor?? [ 229.118405][ T5898] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.256509][ T5898] usb 4-1: device descriptor read/64, error -71 [ 229.816442][ T5890] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 229.825137][ T5898] usb usb4-port1: attempt power cycle [ 229.852621][ T5890] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 229.875987][ T5900] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 230.102756][ T5900] usb 2-1: config 0 has no interfaces? [ 230.152074][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 230.200986][ T5898] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 230.251266][ T5898] usb 4-1: device descriptor read/8, error -71 [ 230.433781][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.461281][ T5900] usb 2-1: Product: syz [ 230.480077][ T5900] usb 2-1: Manufacturer: syz [ 230.542036][ T5900] usb 2-1: SerialNumber: syz [ 230.546228][ T5898] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.580269][ T5900] usb 2-1: config 0 descriptor?? [ 230.671634][ T5898] usb 4-1: device descriptor read/8, error -71 [ 230.837320][ T5898] usb usb4-port1: unable to enumerate USB device [ 231.042077][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.054997][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.245993][ T5898] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 231.686090][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 231.720979][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.823521][ T5898] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 231.875173][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.054263][ T5898] usb 1-1: config 0 descriptor?? [ 232.594918][ T5898] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 232.635263][ T5898] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 232.691908][ T5898] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 232.716038][ T5890] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 232.738012][ T5898] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 232.753827][ T5898] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 232.825299][ T5898] belkin 0003:050D:3201.0007: hiddev0,hidraw0: USB HID vff.fb Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0 [ 232.899491][ T5890] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 232.918182][ T5898] usb 1-1: USB disconnect, device number 31 [ 232.930627][ T5890] usb 5-1: config 0 has no interface number 0 [ 232.946612][ T5890] usb 5-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 232.981505][ T5890] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.050485][ T5890] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 233.096362][ T5840] usb 3-1: USB disconnect, device number 32 [ 233.118613][ T5890] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 233.127619][ T7492] delete_channel: no stack [ 233.164107][ T5890] usb 5-1: Manufacturer: syz [ 233.212381][ T5890] usb 5-1: config 0 descriptor?? [ 233.248926][ T5890] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints [ 233.266313][ T5890] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 233.442341][ T5890] usb 5-1: USB disconnect, device number 33 [ 233.464858][ T5840] usb 2-1: USB disconnect, device number 33 [ 233.805986][ T5899] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 233.920829][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 233.933455][ T5840] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 233.951413][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.966088][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 233.993766][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.995257][ T7567] bridge_slave_1 (unregistering): left allmulticast mode [ 234.022138][ T7567] bridge_slave_1 (unregistering): left promiscuous mode [ 234.032007][ T5899] usb 1-1: config 0 has no interfaces? [ 234.032700][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.059724][ T5899] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 234.073348][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.112501][ T5899] usb 1-1: Product: syz [ 234.117895][ T5899] usb 1-1: Manufacturer: syz [ 234.122713][ T5899] usb 1-1: SerialNumber: syz [ 234.146085][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 234.149028][ T5899] usb 1-1: config 0 descriptor?? [ 234.158888][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.213606][ T5840] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.233775][ T5840] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.256563][ T5840] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.272977][ T5840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.325907][ T5840] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 234.356137][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.380282][ T7563] loop2: detected capacity change from 0 to 7 [ 234.382413][ T5840] usb 2-1: config 0 descriptor?? [ 234.421173][ T7563] Dev loop2: unable to read RDB block 7 [ 234.431600][ T7563] loop2: unable to read partition table [ 234.438624][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 234.438645][ T30] audit: type=1326 audit(1744416295.130:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.475440][ T7563] loop2: partition table beyond EOD, truncated [ 234.482475][ T7563] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 234.497939][ T30] audit: type=1326 audit(1744416295.130:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.530227][ T5899] psmouse serio3: Failed to reset mouse on : -5 [ 234.543422][ T30] audit: type=1326 audit(1744416295.130:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.575246][ T30] audit: type=1326 audit(1744416295.130:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.607961][ T5926] usb 1-1: USB disconnect, device number 32 [ 234.619028][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 234.635623][ T30] audit: type=1326 audit(1744416295.130:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.684383][ T30] audit: type=1326 audit(1744416295.140:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.902809][ T30] audit: type=1326 audit(1744416295.600:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.935434][ T30] audit: type=1326 audit(1744416295.600:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 234.971779][ T30] audit: type=1326 audit(1744416295.670:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff55778d169 code=0x7ffc0000 [ 235.002136][ T30] audit: type=1326 audit(1744416295.670:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e78d169 code=0x0 [ 235.237791][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 235.255372][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 235.289346][ T5840] usb 2-1: USB disconnect, device number 34 [ 235.296448][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 235.466736][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 235.504860][ T5900] usb 4-1: descriptor type invalid, skip [ 235.514205][ T5900] usb 4-1: descriptor type invalid, skip [ 235.521340][ T5900] usb 4-1: descriptor type invalid, skip [ 235.534641][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 235.576780][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.587350][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.598953][ T5900] usb 4-1: Product: 鹿䄔좘ӑ刷團状隸鏶倕芨盕Ⱛ쳘搣뛺䰩톥鎇퇸ᢺ쉶딐덟ꕵ굸≣웊ᇩ️筂뺒蘱뀌㊲ᰛ䖹ྰ杋綱걼ꝏὙ칕Ⱞ↩඄ీẋⅢ쌦츴隸੣〧ㇻន療㊻宨칫렼䶗갫☑臽ꃟ䕏︾⎭넟ஈ蠼垃⸡ [ 235.646188][ T5900] usb 4-1: Manufacturer: Л [ 235.653267][ T5900] usb 4-1: SerialNumber: 繃쥬脣⻾럁皏큽乬镚혩祖橗䚎때ﴪ䮇캓훐賬熴ឰ챾✘톏琏酾៌략䴀놱耂歱쁹祢줴ᯌ蚉㼑玒鬇줄岓ﰟ㹯杵毦꫄帟竔퐗ﻞ廉⨱躑㚩䬆誷冺㟣点ɿ浴䭈劊杈钔䈄֍褕ዧ鍝谂䟉⾢꣯䘲ユ㸠㢚雬⹫堺푦꣤㇣畁淢쐏 [ 235.746490][ T5840] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 235.908743][ T5840] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 235.966589][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.003654][ T5840] usb 2-1: config 0 has no interface number 0 [ 236.033119][ T5840] usb 2-1: config 0 interface 20 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.081217][ T5900] usb 4-1: USB disconnect, device number 26 [ 236.111971][ T5840] usb 2-1: config 0 interface 20 has no altsetting 0 [ 236.159184][ T5840] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 236.262252][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.283763][ T7591] netlink: 'syz.2.415': attribute type 7 has an invalid length. [ 236.300317][ T5840] usb 2-1: Product: syz [ 236.344262][ T5840] usb 2-1: Manufacturer: syz [ 236.363532][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 236.381623][ T5840] usb 2-1: SerialNumber: syz [ 236.392039][ T5840] usb 2-1: config 0 descriptor?? [ 236.403140][ T7592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 236.428368][ T5840] keyspan 2-1:0.20: Keyspan 1 port adapter converter detected [ 236.445983][ T5926] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 236.456785][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 87 [ 236.456879][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 7 [ 236.458653][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 81 [ 236.491839][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 1 [ 236.505082][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 2 [ 236.515346][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 85 [ 236.526163][ T5840] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 5 [ 236.542507][ T5840] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 236.696464][ T7589] input: syz1 as /devices/virtual/input/input19 [ 236.784013][ T7589] netlink: 'syz.1.414': attribute type 5 has an invalid length. [ 236.832708][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.870583][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 236.911365][ T5898] usb 2-1: USB disconnect, device number 35 [ 236.945474][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 236.960369][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 236.983634][ T5898] keyspan 2-1:0.20: device disconnected [ 236.992599][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 237.011399][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.032942][ T5926] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 237.044120][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 237.053296][ T5926] usb 1-1: Product: syz [ 237.063443][ T5926] usb 1-1: Manufacturer: syz [ 237.090163][ T5926] usb 1-1: SerialNumber: syz [ 237.114659][ T5926] usb 1-1: config 0 descriptor?? [ 237.825983][ T5926] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 237.837471][ T5926] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 238.094680][ T5898] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 238.165734][ T7608] warning: `syz.3.421' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.256929][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 238.271238][ T5898] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 238.291160][ T5898] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 238.309780][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.323440][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 238.344292][ T5898] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 238.355126][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.370156][ T5898] usb 3-1: Product: syz [ 238.375568][ T5898] usb 3-1: Manufacturer: syz [ 238.381567][ T5898] usb 3-1: SerialNumber: syz [ 238.403210][ T5898] usb 3-1: config 0 descriptor?? [ 238.415254][ T5898] hub 3-1:0.0: bad descriptor, ignoring hub [ 238.421672][ T5898] hub 3-1:0.0: probe with driver hub failed with error -5 [ 238.459342][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 238.736211][ T5899] misc userio: Buffer overflowed, userio client isn't keeping up [ 238.999996][ T5840] usb 3-1: USB disconnect, device number 33 [ 239.145927][ T5898] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 239.212839][ T5840] usb 1-1: USB disconnect, device number 33 [ 239.231613][ T7595] delete_channel: no stack [ 239.312602][ T5898] usb 2-1: config 0 has no interfaces? [ 239.335085][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.353354][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.362202][ T5898] usb 2-1: Product: syz [ 239.367021][ T5898] usb 2-1: Manufacturer: syz [ 239.372188][ T5898] usb 2-1: SerialNumber: syz [ 239.380335][ T5898] usb 2-1: config 0 descriptor?? [ 239.614726][ T7619] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.809627][ T5899] input: PS/2 Generic Mouse as /devices/serio3/input/input18 [ 240.046074][ T5899] psmouse serio3: Failed to enable mouse on [ 240.868946][ T7642] fuse: Bad value for 'rootmode' [ 240.886286][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 241.046308][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 241.236941][ T10] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 241.316173][ T10] usb 3-1: config 0 has no interface number 0 [ 241.368461][ T10] usb 3-1: config 0 interface 29 has no altsetting 0 [ 241.435344][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 241.447908][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.469840][ T10] usb 3-1: Product: syz [ 241.489316][ T10] usb 3-1: Manufacturer: syz [ 241.525714][ T10] usb 3-1: SerialNumber: syz [ 241.575675][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d79c00: rx timeout, send abort [ 241.589217][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032d79c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.716952][ T10] usb 3-1: config 0 descriptor?? [ 241.766394][ T5890] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 241.953362][ T10] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 242.090760][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 242.134937][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 242.154433][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 242.171471][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 242.179850][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 242.203449][ T5840] usb 2-1: USB disconnect, device number 36 [ 242.216737][ T5900] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 242.226033][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 242.260119][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.275499][ T7645] netlink: 'syz.0.428': attribute type 7 has an invalid length. [ 242.308933][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 242.316629][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.339253][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 242.362153][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.379140][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 242.443274][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 242.491707][ T7654] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 242.513593][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.519094][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.526929][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.564641][ T5890] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 242.581793][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.683953][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.697807][ T10] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 242.712852][ T5900] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.727300][ T5890] usb 5-1: Product: syz [ 242.734139][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.749421][ T5900] usb 4-1: SerialNumber: syz [ 242.778630][ T5890] usb 5-1: Manufacturer: syz [ 242.785499][ T5890] usb 5-1: SerialNumber: syz [ 242.854637][ T5890] usb 5-1: config 0 descriptor?? [ 243.131742][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.396574][ T5890] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 243.404397][ T5900] usb 4-1: 0:2 : does not exist [ 243.443244][ T5890] usb 5-1: USB disconnect, device number 34 [ 243.502496][ T5900] usb 4-1: USB disconnect, device number 27 [ 243.661981][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.663945][ T5890] usb 3-1: USB disconnect, device number 34 [ 243.772695][ T7669] can: request_module (can-proto-0) failed. [ 243.835949][ T5898] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 243.950328][ T5840] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 244.132369][ T5840] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 244.139301][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.213143][ T7656] udevd[7656]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.250466][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 244.269829][ T5840] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 244.343610][ T5840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 244.378735][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 244.419326][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.461306][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.509421][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.567852][ T5898] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 244.581536][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 244.601427][ T5898] usb 2-1: Product: syz [ 244.611215][ T5898] usb 2-1: Manufacturer: syz [ 244.626283][ T5898] usb 2-1: SerialNumber: syz [ 244.865380][ T5898] usb 2-1: config 0 descriptor?? [ 245.509861][ T5898] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 245.538571][ T5898] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 245.684441][ T5840] ath6kl: Failed to submit usb control message: -110 [ 245.729313][ T5840] ath6kl: unable to send the bmi data to the device: -110 [ 245.766182][ T5926] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 245.894752][ T5840] ath6kl: Unable to send get target info: -110 [ 245.977032][ T5926] usb 4-1: config 0 has no interfaces? [ 245.984504][ T5840] ath6kl: Failed to init ath6kl core: -110 [ 246.019783][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 246.019810][ T30] audit: type=1326 audit(1744416306.710:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7686 comm="syz.4.441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3744b8d169 code=0x0 [ 246.077867][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.100132][ T5840] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 246.123800][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.186131][ T5926] usb 4-1: Product: syz [ 246.214057][ T5926] usb 4-1: Manufacturer: syz [ 246.268322][ T5926] usb 4-1: SerialNumber: syz [ 246.354960][ T5926] usb 4-1: config 0 descriptor?? [ 246.670794][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.686008][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.749528][ T5900] usb 1-1: USB disconnect, device number 34 [ 247.546498][ T5899] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 248.025038][ T5899] usb 5-1: config 0 has no interfaces? [ 248.059569][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.075986][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.145764][ T5899] usb 5-1: Product: syz [ 248.155648][ T5899] usb 5-1: Manufacturer: syz [ 248.169709][ T5899] usb 5-1: SerialNumber: syz [ 248.188832][ T5899] usb 5-1: config 0 descriptor?? [ 248.613155][ T7667] delete_channel: no stack [ 248.618339][ T5840] usb 2-1: USB disconnect, device number 37 [ 248.881024][ T7712] 8021q: VLANs not supported on ipvlan1 [ 248.956424][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 249.133336][ T7705] netlink: 'syz.2.446': attribute type 7 has an invalid length. [ 249.235078][ T7712] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 249.380919][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 249.391341][ T7705] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 249.984143][ T5899] usb 4-1: USB disconnect, device number 28 [ 250.244310][ T7733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.314799][ T7737] netdevsim netdevsim2: Direct firmware load for . [ 250.314799][ T7737] failed with error -2 [ 250.326705][ T7737] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 250.326705][ T7737] [ 250.616232][ T5899] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 250.786113][ T5926] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 250.856107][ T5899] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 250.865580][ T5899] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 250.876590][ T5899] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 250.887880][ T5899] usb 3-1: config 0 has no interface number 0 [ 250.898340][ T5899] usb 3-1: config 0 has no interface number 1 [ 250.907580][ T5899] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 250.920863][ T5899] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.936718][ T5899] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 250.951012][ T5899] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 251.006153][ T5899] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 251.026123][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 251.032376][ T5899] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 251.047844][ T5899] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid wMaxPacketSize 0 [ 251.060080][ T5926] usb 2-1: config 162 has too many interfaces: 33, using maximum allowed: 32 [ 251.070145][ T5926] usb 2-1: config 162 has an invalid interface number: 166 but max is 32 [ 251.079027][ T5926] usb 2-1: config 162 contains an unexpected descriptor of type 0x2, skipping [ 251.088542][ T5899] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 0 [ 251.102377][ T5926] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 251.115561][ T5899] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 251.132048][ T5926] usb 2-1: config 162 has 1 interface, different from the descriptor's value: 33 [ 251.146129][ T5899] usb 3-1: config 0 interface 66 has no altsetting 0 [ 251.155128][ T5926] usb 2-1: config 162 has no interface number 0 [ 251.170097][ T5926] usb 2-1: config 162 interface 166 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.187951][ T5899] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 251.240287][ T5926] usb 2-1: config 162 interface 166 has no altsetting 0 [ 251.254804][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.307068][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 251.332661][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.401944][ T5899] usb 3-1: Product: syz [ 251.407634][ T5899] usb 3-1: Manufacturer: syz [ 251.416683][ T5926] usb 2-1: Product: syz [ 251.421109][ T5899] usb 3-1: SerialNumber: syz [ 251.427439][ T5926] usb 2-1: Manufacturer: syz [ 251.435215][ T5899] usb 3-1: config 0 descriptor?? [ 251.441624][ T5926] usb 2-1: SerialNumber: syz [ 251.451583][ T5899] ljca 3-1:0.84: bulk endpoints not found [ 251.575987][ T5890] usb 5-1: USB disconnect, device number 35 [ 251.669690][ T5926] appledisplay 2-1:162.166: Could not find int-in endpoint [ 251.764389][ T5926] usbhid 2-1:162.166: couldn't find an input interrupt endpoint [ 251.805214][ T5926] usb 2-1: USB disconnect, device number 38 [ 251.851046][ T5899] ljca 3-1:0.66: submit rx urb failed: -90 [ 251.902278][ T5899] ljca 3-1:0.66: probe with driver ljca failed with error -90 [ 252.029991][ T5899] usb 3-1: USB disconnect, device number 35 [ 252.575906][ T7761] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 252.596039][ T5899] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 252.629640][ T7763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 252.640214][ T7763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.651804][ T7764] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 252.658405][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.667555][ T7763] vhci_hcd vhci_hcd.0: Device attached [ 252.678695][ T7770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.747561][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 252.785629][ T7763] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 252.792867][ T7763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.840905][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 252.867680][ T5899] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.886817][ T5840] vhci_hcd: vhci_device speed not set [ 252.908779][ T7763] vhci_hcd vhci_hcd.0: Device attached [ 252.921873][ T5899] usb 3-1: config 0 has no interface number 0 [ 252.952058][ T7764] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 252.956667][ T5840] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 252.959440][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 252.990739][ T5899] usb 3-1: config 0 interface 184 has no altsetting 0 [ 253.039566][ T5899] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.056775][ T7777] bridge1: entered allmulticast mode [ 253.077854][ T7763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.102647][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.102752][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 253.169292][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 253.180926][ T5899] usb 3-1: Product: syz [ 253.186216][ T5899] usb 3-1: Manufacturer: syz [ 253.193539][ T5899] usb 3-1: SerialNumber: syz [ 253.208717][ T5899] usb 3-1: config 0 descriptor?? [ 253.220435][ T7770] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15) [ 253.228091][ T7770] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 253.240053][ T5899] smsc75xx v1.0.0 [ 253.249440][ T7770] vhci_hcd vhci_hcd.0: Device attached [ 253.355945][ T7764] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(14) [ 253.363292][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.407824][ T7777] bridge0: entered promiscuous mode [ 253.426294][ T7777] vlan2: entered promiscuous mode [ 253.455989][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 253.470274][ T7775] vhci_hcd: connection closed [ 253.471470][ T7766] vhci_hcd: connection closed [ 253.477632][ T36] vhci_hcd: stop threads [ 253.488799][ T7765] vhci_hcd: connection reset by peer [ 253.495505][ T7771] vhci_hcd: connection closed [ 253.510209][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.539572][ T36] vhci_hcd: release socket [ 253.576943][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 253.586213][ T7784] vhci_hcd: connection closed [ 253.588578][ T36] vhci_hcd: disconnect device [ 253.670748][ T7779] vhci_hcd: connection closed [ 253.676098][ T36] vhci_hcd: stop threads [ 253.695688][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 253.765741][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 253.817052][ T36] vhci_hcd: release socket [ 253.818609][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 253.836379][ T36] vhci_hcd: disconnect device [ 253.852923][ T36] vhci_hcd: stop threads [ 253.867624][ T36] vhci_hcd: release socket [ 253.868814][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 253.873168][ T36] vhci_hcd: disconnect device [ 253.898793][ T36] vhci_hcd: stop threads [ 253.898821][ T36] vhci_hcd: release socket [ 253.899010][ T36] vhci_hcd: disconnect device [ 253.916585][ T36] vhci_hcd: stop threads [ 253.916610][ T36] vhci_hcd: release socket [ 253.916669][ T36] vhci_hcd: disconnect device [ 253.918149][ T36] vhci_hcd: stop threads [ 253.918169][ T36] vhci_hcd: release socket [ 253.918298][ T36] vhci_hcd: disconnect device [ 253.998176][ T5899] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 254.030420][ T5899] usb 3-1: USB disconnect, device number 36 [ 254.080087][ T7794] netlink: 'syz.0.466': attribute type 7 has an invalid length. [ 254.080138][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 254.418646][ T5899] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 254.438468][ T7789] netlink: 'syz.4.464': attribute type 7 has an invalid length. [ 254.468642][ T7803] netlink: 120 bytes leftover after parsing attributes in process `syz.0.468'. [ 254.511246][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 254.524527][ T7798] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 254.586533][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 254.613057][ T5899] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 254.638891][ T5899] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 254.701374][ T5899] usb 3-1: config 0 has an invalid interface number: 128 but max is 1 [ 254.753491][ T5899] usb 3-1: config 0 has no interface number 0 [ 254.794693][ T5899] usb 3-1: config 0 has no interface number 1 [ 254.851580][ T5899] usb 3-1: config 0 interface 182 altsetting 7 endpoint 0xB has invalid maxpacket 2584, setting to 1024 [ 254.898012][ T5899] usb 3-1: config 0 interface 182 altsetting 7 bulk endpoint 0xB has invalid maxpacket 1024 [ 254.923739][ T5899] usb 3-1: config 0 interface 182 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 254.975626][ T5899] usb 3-1: config 0 interface 182 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 255.014701][ T5899] usb 3-1: config 0 interface 182 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 64 [ 255.062378][ T5899] usb 3-1: config 0 interface 128 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 255.088631][ T5899] usb 3-1: config 0 interface 128 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 255.144269][ T5899] usb 3-1: config 0 interface 128 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 255.188197][ T5899] usb 3-1: config 0 interface 128 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 255.217898][ T5899] usb 3-1: config 0 interface 128 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 255.265277][ T5899] usb 3-1: config 0 interface 128 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 255.281300][ T5899] usb 3-1: config 0 interface 182 has no altsetting 0 [ 255.289481][ T5899] usb 3-1: config 0 interface 128 has no altsetting 0 [ 255.302476][ T7821] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.314279][ T5899] usb 3-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=4c.23 [ 255.335175][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.354984][ T5899] usb 3-1: Product: syz [ 255.361843][ T5899] usb 3-1: Manufacturer: syz [ 255.368949][ T5899] usb 3-1: SerialNumber: syz [ 255.388344][ T5899] usb 3-1: config 0 descriptor?? [ 255.420770][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.432454][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.466445][ T5926] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.490706][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 255.636264][ T5926] usb 4-1: device descriptor read/64, error -71 [ 255.657082][ T5899] sierra 3-1:0.182: Sierra USB modem converter detected [ 255.690205][ T5899] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 255.709289][ T5899] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 255.737702][ T5899] sierra 3-1:0.128: Sierra USB modem converter detected [ 255.749824][ T5899] usb 3-1: Sierra USB modem converter now attached to ttyUSB2 [ 255.761950][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.771981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.796399][ T5899] usb 3-1: USB disconnect, device number 37 [ 255.822621][ T5899] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 255.839670][ T5899] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 255.865650][ T5899] sierra 3-1:0.182: device disconnected [ 255.886013][ T5926] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 255.920015][ T5899] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 255.940052][ T5899] sierra 3-1:0.128: device disconnected [ 255.966572][ T974] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 256.046157][ T5926] usb 4-1: device descriptor read/64, error -71 [ 256.126840][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 256.135406][ T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.147395][ T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.159661][ T5900] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 256.177632][ T5926] usb usb4-port1: attempt power cycle [ 256.189292][ T974] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.201997][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.303717][ T974] usb 5-1: Product: syz [ 256.313424][ T974] usb 5-1: Manufacturer: syz [ 256.323549][ T974] usb 5-1: SerialNumber: syz [ 256.440899][ T5900] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.520409][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.546904][ T5900] usb 1-1: Product: syz [ 256.552081][ T5900] usb 1-1: Manufacturer: syz [ 256.563375][ T5900] usb 1-1: SerialNumber: syz [ 256.609993][ T5926] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 256.611999][ T5900] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.637096][ T5926] usb 4-1: device descriptor read/8, error -71 [ 256.663302][ T7838] input: syz1 as /devices/virtual/input/input20 [ 256.776800][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.996309][ T5926] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 257.006430][ T5898] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 257.187363][ T5926] usb 4-1: device descriptor read/8, error -71 [ 257.298058][ T5898] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 257.349338][ T5926] usb usb4-port1: unable to enumerate USB device [ 257.349928][ T974] usb 5-1: cannot find UAC_HEADER [ 257.384320][ T5898] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 257.457836][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 56, changing to 7 [ 257.465364][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.486379][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.564835][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8512, setting to 1024 [ 257.625169][ T5898] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 257.672569][ T5926] usb 1-1: USB disconnect, device number 35 [ 257.702876][ T974] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.719694][ T5898] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 257.748180][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.803812][ T7845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.837444][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 257.847539][ T974] usb 5-1: USB disconnect, device number 36 [ 257.855673][ T9] ath9k_htc: Failed to initialize the device [ 257.957114][ T5926] usb 1-1: ath9k_htc: USB layer deinitialized [ 258.121149][ T5840] vhci_hcd: vhci_device speed not set [ 258.136962][ T7656] udevd[7656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.008444][ T5898] ath6kl: Failed to submit usb control message: -110 [ 259.094003][ T5898] ath6kl: unable to send the bmi data to the device: -110 [ 259.125979][ T5898] ath6kl: Unable to send get target info: -110 [ 259.152853][ T5898] ath6kl: Failed to init ath6kl core: -110 [ 259.170407][ T5898] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 259.457317][ T10] usb usb36-port8: attempt power cycle [ 259.486217][ T5890] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 259.516173][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 259.586019][ T5926] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 259.755982][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 259.786415][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 259.800167][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.817365][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 259.835940][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.844484][ T9] usb 5-1: Product: syz [ 259.850017][ T9] usb 5-1: Manufacturer: syz [ 259.856149][ T9] usb 5-1: SerialNumber: syz [ 259.881083][ T9] usb 5-1: config 0 descriptor?? [ 259.882965][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 259.918675][ T5890] usb 4-1: config 1 has no interface number 0 [ 259.921402][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 259.937729][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 259.949402][ T5890] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.964127][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.974021][ T5890] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 259.994340][ T5926] usb 1-1: config 0 descriptor?? [ 260.031445][ T5926] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 260.056290][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 260.073739][ T10] usb usb36-port8: unable to enumerate USB device [ 260.087456][ T5926] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.117045][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.128614][ T7863] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 260.142281][ T7863] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 260.151332][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.4.481 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 260.164209][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.175592][ T7863] RIP: 0010:__mutex_lock+0x15d/0x10c0 [ 260.182603][ T7863] Code: c0 80 c6 73 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d 40 aa 41 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 67 60 fb f5 4d 39 76 60 0f 85 81 0d 00 00 [ 260.209625][ T7863] RSP: 0018:ffffc9000bc5eea0 EFLAGS: 00010202 [ 260.217377][ T7863] RAX: 0000000000000019 RBX: ffffc9000bc5ef60 RCX: ffffffff9a73c603 [ 260.226777][ T7863] RDX: ffff88802687da00 RSI: ffffffff8e4fd5dc RDI: 00000000000000c8 [ 260.238714][ T7863] RBP: ffffc9000bc5f038 R08: ffffc9000bc5efa7 R09: 0000000000000000 [ 260.247775][ T7863] R10: ffffc9000bc5ef80 R11: fffff5200178bdf5 R12: 0000000000000000 [ 260.258461][ T7863] R13: ffffc9000bc5ef68 R14: 0000000000000068 R15: dffffc0000000000 [ 260.268723][ T7863] FS: 00007f37459eb6c0(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 260.279073][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.287689][ T7863] CR2: 00007f1d2e97c338 CR3: 000000005aaa0000 CR4: 00000000003526f0 [ 260.299692][ T7863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.312097][ T7863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.320627][ T7863] Call Trace: [ 260.324140][ T7863] [ 260.327365][ T7863] ? __mutex_lock+0x380/0x10c0 [ 260.333387][ T7863] ? __lock_acquire+0xad5/0xd80 [ 260.338374][ T7863] ? dvb_usbv2_generic_write+0x26/0x50 [ 260.344638][ T7863] ? __pfx___mutex_lock+0x10/0x10 [ 260.351893][ T7863] ? __pfx___mutex_lock+0x10/0x10 [ 260.358163][ T7863] ? trace_contention_end+0x3c/0x120 [ 260.365140][ T7863] ? __mutex_lock+0x380/0x10c0 [ 260.371268][ T7863] dvb_usbv2_generic_write+0x26/0x50 [ 260.377160][ T7863] mxl111sf_ctrl_msg+0x172/0x2e0 [ 260.382659][ T7863] mxl111sf_write_reg+0xda/0x1f0 [ 260.389648][ T7863] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 260.396557][ T7863] ? perf_trace_lock+0x1aa/0x4a0 [ 260.401545][ T7863] mxl111sf_i2c_xfer+0x923/0x8aa0 [ 260.407218][ T7863] ? __bfs+0x14a/0x270 [ 260.411541][ T7863] ? check_noncircular+0xee/0x160 [ 260.416853][ T7863] ? xfd_validate_state+0x6e/0x150 [ 260.423246][ T7863] ? __switch_to+0xe97/0x1c30 [ 260.429503][ T7863] ? rcu_is_watching+0x15/0xb0 [ 260.434646][ T7863] ? finish_task_switch+0x1e5/0x870 [ 260.440507][ T7863] ? rcu_is_watching+0x15/0xb0 [ 260.446295][ T7863] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 260.452666][ T7863] ? __schedule+0x1ba6/0x5240 [ 260.459555][ T7863] ? __lock_acquire+0xad5/0xd80 [ 260.465586][ T7863] ? preempt_schedule_irq+0xfe/0x1c0 [ 260.473673][ T7863] ? __pfx___schedule+0x10/0x10 [ 260.480265][ T7863] ? lockdep_unlock+0x8d/0x120 [ 260.486364][ T7863] ? validate_chain+0x8a7/0x24e0 [ 260.493660][ T7863] ? rcu_is_watching+0x15/0xb0 [ 260.500086][ T7863] ? trace_irq_disable+0x3b/0x120 [ 260.506719][ T7863] ? preempt_schedule_irq+0x145/0x1c0 [ 260.515213][ T7863] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 260.522206][ T7863] ? irqentry_exit+0x63/0x90 [ 260.528145][ T7863] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.533566][ T7863] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 260.540501][ T7863] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 260.548441][ T7863] ? __i2c_transfer+0x6e4/0x2250 [ 260.554195][ T7863] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 260.561938][ T7863] __i2c_transfer+0x859/0x2250 [ 260.567035][ T7863] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 260.575360][ T7863] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.581383][ T7863] ? __pfx___i2c_transfer+0x10/0x10 [ 260.588097][ T7863] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 260.596119][ T7863] ? i2c_transfer+0x12d/0x430 [ 260.603148][ T7863] i2c_transfer+0x2c2/0x430 [ 260.609917][ T7863] ? __pfx_i2c_transfer+0x10/0x10 [ 260.617201][ T7863] i2c_transfer_buffer_flags+0x182/0x260 [ 260.624798][ T7863] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 260.634833][ T7863] ? _copy_from_user+0x95/0xb0 [ 260.642578][ T7863] i2cdev_write+0x110/0x1b0 [ 260.648617][ T7863] vfs_writev+0x5ba/0xbc0 [ 260.654907][ T7863] ? __pfx_i2cdev_write+0x10/0x10 [ 260.661168][ T7863] ? __pfx_vfs_writev+0x10/0x10 [ 260.667460][ T7863] ? __fget_files+0x2a/0x420 [ 260.674296][ T7863] ? __fget_files+0x39d/0x420 [ 260.680681][ T7863] ? __fget_files+0x2a/0x420 [ 260.687791][ T7863] do_writev+0x1b8/0x360 [ 260.692261][ T7863] ? __pfx_do_writev+0x10/0x10 [ 260.698843][ T7863] ? do_syscall_64+0xb6/0x230 [ 260.704388][ T7863] do_syscall_64+0xf3/0x230 [ 260.710302][ T7863] ? clear_bhb_loop+0x45/0xa0 [ 260.715597][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.721781][ T7863] RIP: 0033:0x7f3744b8d169 [ 260.726763][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.756539][ T7863] RSP: 002b:00007f37459eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 260.766912][ T7863] RAX: ffffffffffffffda RBX: 00007f3744da6160 RCX: 00007f3744b8d169 [ 260.776143][ T7863] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000d [ 260.784777][ T7863] RBP: 00007f3744c0e990 R08: 0000000000000000 R09: 0000000000000000 [ 260.792953][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.801972][ T7863] R13: 0000000000000000 R14: 00007f3744da6160 R15: 00007f3744ecfa28 [ 260.812983][ T7863] [ 260.816200][ T7863] Modules linked in: [ 260.821165][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.828329][ T7863] ---[ end trace 0000000000000000 ]--- [ 260.836324][ T7863] RIP: 0010:__mutex_lock+0x15d/0x10c0 [ 260.843539][ T5926] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 260.856688][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.876216][ T5926] usb 1-1: media controller created [ 260.886004][ T5890] usb 4-1: Product: syz [ 260.889826][ T9] usb 5-1: setting power ON [ 260.891603][ T5890] usb 4-1: Manufacturer: syz [ 260.913081][ T7863] Code: c0 80 c6 73 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d 40 aa 41 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 67 60 fb f5 4d 39 76 60 0f 85 81 0d 00 00 [ 260.936542][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.948864][ T5890] usb 4-1: SerialNumber: syz [ 260.963393][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 260.972384][ T5926] set interface failed [ 260.988810][ T7863] RSP: 0018:ffffc9000bc5eea0 EFLAGS: 00010202 [ 261.011131][ T7863] RAX: 0000000000000019 RBX: ffffc9000bc5ef60 RCX: ffffffff9a73c603 [ 261.020308][ T7863] RDX: ffff88802687da00 RSI: ffffffff8e4fd5dc RDI: 00000000000000c8 [ 261.033438][ T7863] RBP: ffffc9000bc5f038 R08: ffffc9000bc5efa7 R09: 0000000000000000 [ 261.043959][ T7863] R10: ffffc9000bc5ef80 R11: fffff5200178bdf5 R12: 0000000000000000 [ 261.054491][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.069013][ T7863] R13: ffffc9000bc5ef68 R14: 0000000000000068 R15: dffffc0000000000 [ 261.079951][ T7863] FS: 00007f37459eb6c0(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 261.090533][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.100945][ T7863] CR2: 00007f37459c9f98 CR3: 000000005aaa0000 CR4: 00000000003526f0 [ 261.110205][ T7863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.120095][ T7863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.131558][ T7863] Kernel panic - not syncing: Fatal exception [ 261.141884][ T7863] Kernel Offset: disabled [ 261.147297][ T7863] Rebooting in 86400 seconds..