last executing test programs: 10.026250091s ago: executing program 1 (id=1235): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000600600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="0a000200bb"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 9.000237342s ago: executing program 1 (id=1236): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006f00)={0x2020}, 0x2020) preadv2(r5, &(0x7f0000004e80)=[{&(0x7f0000003700)=""/121, 0x79}], 0x1, 0xd643, 0xaa, 0x14) read$FUSE(r5, &(0x7f0000004ec0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x8}) 8.752874595s ago: executing program 0 (id=1238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x800) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c60ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9941225f9ed4f0c016709f18cb7b03c2b1729"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 8.27381543s ago: executing program 0 (id=1240): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81008e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) link(&(0x7f0000001240)='./file1/file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file1/file0\x00'}) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) r7 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) 7.700643928s ago: executing program 2 (id=1241): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) io_setup(0x222, &(0x7f0000000180)=0x0) (async) futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) llistxattr(0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x0, 0xc8, &(0x7f0000000700)="72c310ee3e73920d0dc3052d4ce181d032ecb02f301f57edab0edfadfeaea2dd697482893bd57292506e26d6633bb1b8806cce7544bbf1a5ead965eb492c8a669161dc927bce5be99deb47fd94fcf3112245ebbb4748baabf645ad4c18dbdace305ef2eedda0c9dc19e19da3ab7e7fc1d855f378e47f6618b7fd699daa0b552e1196c028d1431886d6ca137ecf2a6f26e1e5cfe12ab679c541c51252d8ea5edc670b5f37f59441175991adbe6bf68634d165df24576d7eaefc6de1cd5055e8fca8f57f1d815c9eee"}) (async) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) (async) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) vmsplice(r6, &(0x7f0000000a00), 0x0, 0x5) (async) clock_gettime(0x3, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) (async) sendfile(r4, r6, 0x0, 0x1) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xffff8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x1c) (async) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f00000001c0)="5c30b18114931c3a45555f2714dd384e143acad3bc15f023dd30b0dab3fe93e5335ceafa7238f19c191fa8d4eddec9cb76e27fb6573cca0853abdedd662fa925bb657a30f3f4254fd148c26942b7b908f682c4b885755f0179c0ca92a989f9a72ac4b6fb5d426b552f3e85dbebfbb3161045a7e36e7d9b5bc7ad2132dd7adea516bb1e1550bb66a2cedda7e748275af2383d207961ea5877a6c45f0e3b711f5f1296c9d433aa759f298239340219617d848a9a42d03fd0b0da949b629576c60f3e173446dc987600c1eda4f903d980851b86bd2c8fc891db2b75aabf6db184c8f81197263139d624b08fac23", 0x0, 0x8, 0x0, 0x2, r3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x597, r0, &(0x7f0000000400)="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", 0x0, 0x6, 0x0, 0x3, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xfff8, r0, &(0x7f00000002c0), 0x0, 0x7b059491, 0x0, 0x2, r6}]) 6.299999433s ago: executing program 1 (id=1243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e0000002400028014000500000000000000000000000000000000010400120005001600010000004b3b902b8e739c530b751ee628d919c6a4a6f1344db8d5abd813983732396f42"], 0x58}}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r10, 0x11, 0x0, 0x7c000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0xce23, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="505ebb66fa951bce7b75ff15d0eebfbb0245", 0x18}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="600000000000000029000000360000003a080000000000000740000000000e010d000800000000000000feffffffffffffff040000000000000003000000000000def9ffffffffffffff5b3000000000000001000000000000000000000000002400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=0x0, @ANYBLOB="0000000014000000000000002900000008000000f7ffffff00000000480000000000000029000000390000003c06010300000000fc01000000000000000000000000000100000000000000000000000000000001fe80000000000000000000000000003f28000000000000002900000039000000f002020700000000fe880000000000000000000000000101300000000000000029000000040000000102000000000000c910fe88000000000000000000000000000100000000000014000000000000002900000043000000070000000000000024000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000340000000600000000000000a800000000000000290000003600000089110000000000000001000878db8f134da31a8ea906bd4f6ce478a3841be67dd0ee9fa6c927ab73dde6179e747b63bdae8ba65a7758e2331b9d45b8dbc9802a66a80a22380f6b8c40196392dc2401163246fa6140881cb563fba66de5460a9602f1020a29486f15d84d5a4c3adb0d543d228b047d71acab63c2fd7a9cb5737eb2cb5002b5071000000003020001000f0000000000000000"], 0x240}, 0x0) 6.040120335s ago: executing program 4 (id=1244): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0xe7e, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_loaded', 0x14a01, 0x18) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x2, 0xd8, 0xff, 0xffffffff}, {0xbd4, 0xff, 0x9, 0x59}]}) r5 = socket$can_raw(0x1d, 0x3, 0x1) write(r5, &(0x7f00000001c0)="0d066910ac2063a7e3ee20e35dd97e06a37b99df87d57a5fb3fc0f64af90e3ed1512e2388d0de890132b28f31e90b09c18fb967c610b14dd217dab6fc3d6d479fbff2f98f73d80c9e8523daef9f58bf1cd29bf2af808aa38af12b2ac07776681d079a7d16febeafe811458a045c5789ca48b3bd74e19ca0caa826cc7a53471cc750fe5c2b2065a38c583342534d796501e106f9acf3dafee02f65c943677312680e2c914f968a63cb8780c492b", 0xad) preadv2(r4, &(0x7f0000000540)=[{&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/210, 0xd2}], 0x4, 0x5, 0x6, 0x2) close_range(r3, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) ptrace$getregset(0x4204, r6, 0x3, &(0x7f0000000700)={&(0x7f0000000600)=""/229, 0xe5}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000740)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000007c0)={0x6, 0x41495043, 0x42, 0x4, 0x3, @discrete={0x2, 0x7f}}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x1407, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4001) socket$netlink(0x10, 0x3, 0x5) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, &(0x7f0000000900)="b9800000c00f3235001000000f300f060fc76a00b9060400000f32360fc7bf00a0000066ba2100b004ee66b87e008ee01a8977530000b8010000000f01c1660fde4dfc", 0x43}], 0x1, 0x24, &(0x7f00000009c0), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000a00)={{}, {0x0, 0x3938700}}, &(0x7f0000000a40)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shmget(0x2, 0x1000, 0x8, &(0x7f0000ff7000/0x1000)=nil) timer_gettime(0x0, &(0x7f0000000a80)) rt_sigsuspend(&(0x7f0000000ac0)={[0x5a]}, 0x8) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) write$evdev(r7, &(0x7f0000000bc0)=[{{0x0, 0xea60}, 0x13, 0x8}, {{0x0, 0x2710}, 0x16, 0x8, 0x6}, {{r8, r9/1000+60000}, 0x14, 0x80, 0x5}, {{r10, r11/1000+60000}, 0x4, 0x2e, 0x800}, {{r12, r13/1000+60000}, 0x3, 0x6, 0xcce}, {{0x0, 0xea60}, 0x3, 0xd, 0x9082}], 0x90) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000c80)={0x1, 0x0, {0x4c, 0x8, 0x3004, 0x7, 0x5, 0x0, 0x0, 0x4}}) 5.757958728s ago: executing program 0 (id=1245): clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c0005"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f00000003c0)={0x0, 0x23, 0xc, {0xc, 0x7, "2acb5416dff7ffa1989a"}}, 0x0, 0x0, 0x0}, 0x0) 4.946931576s ago: executing program 4 (id=1246): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x240}], 0x1, 0x8000db3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) (async) shutdown(r2, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="f2417f277fe234a85c3711b028cc541703db959a3b26995b5106f952df373c1cae2107556b048d6b0ecc0e3b253271f6bc000d6aacd6c6eec96a49f71a8dffe4716c8bce5458d104ccae073f03aadcb61e210268ac256056680fc32ed4bbf966b95efb632989b3a12b72b8f337aa294c23c0aa1ec765f2abf109bbfd44f4dbaa05552eb0419ff1eedfdf1d963bb12621bbce9ed050ad1c64f8d2f9b5a19e4d32fe9a6a1eb79b7e5be942085812005ab2c8f5d8a48125bce08e480cfcab0b5eeba30c6ef07d2c9e418a3847a98ff6ab5c7e1a2b43083c8977c0f54aabf975e1805aa324ad8dceef8e32aece", 0xeb}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0xb, [{@local, 0x200}]}, @timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x2, [{@multicast1, 0x1}]}, @ssrr={0x89, 0x3, 0xb9}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x9, [0x4, 0x9]}, @timestamp_addr={0x44, 0x44, 0x23, 0x1, 0x0, [{@multicast1, 0xb6}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0xfffffff5}, {@empty, 0x8001}, {@broadcast, 0x62}, {@private=0xa010102, 0x9bc2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}]}]}}}], 0xc8}, 0x20088441) (async) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000a00)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x120, r4, &(0x7f0000000280), 0x0, 0x5, 0x0, 0x0, r4}]) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xa8, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x26, 0x42, 0xf1}}}}}]}}]}}, 0x0) r7 = syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x8e, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x92c, 0x8, 0x25}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x4, 0x5}}}}}]}}]}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28048001}, 0x1) (async) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) (async) sendmsg$tipc(r10, 0x0, 0x0) (async) r11 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x1, 0x5, 0x4, 0x1010a, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x24, 0x10, 0x1, 0xc, "84a01ed3"}, 0x7f, 0x2, {0x0}, 0x6}) syz_usb_control_io(r6, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780080006000000000008001340000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x161c, &(0x7f0000000140)={0x0, 0xaf01, 0x4000, 0x9, 0x802ce, 0x0, r4}, 0x0, &(0x7f0000000280)) 4.676473854s ago: executing program 2 (id=1247): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000300)={0x0, 0x3, 0x7, 0x80}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x8, 0x7}}) io_submit(r1, 0x2, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000100)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.593889167s ago: executing program 3 (id=1248): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) (async, rerun: 64) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="f30f6ffebaf80c66b89a16a28766efbafc0cb82300eff6dcba4300ec0f01df660f3880159a0000d6000f974c3964668921ba610066ed", 0x36}], 0x1, 0x60, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r3, 0x80000000}, 0x10) (async) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x1, 0x2) fchdir(r8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r2], 0x50) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x5, 0x1, {0x0, @in6={{0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40}}, 0x0, 0x7, 0x9, 0x7, 0x7fff}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r9, 0x5, 0x0, 0x2}, 0x10) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (rerun: 32) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x40) (async) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 4.153766955s ago: executing program 3 (id=1249): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x40, r1, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x40}}, 0x0) 4.016262895s ago: executing program 1 (id=1250): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0xec, {0xec, 0x2, "52e259a96a2bc682886eeb11c09aa8a2e0c81ce993db6b22d4ed49f020c4b3250f4094c58872c8c865749d8366fcda1c596a6883f6f4132ec4e2fa2ca736147d7757e0676281d9bd3f504c7f1cc8e98ed7f5fbfa620067c88cd5b76a0ca66223b5515e00befe56d2759846951bd45054285f02a425b8e4461b4e93172a4c3b50871c08812fbd850db00df1d5217ed89a9156af95a23f3d983231eb66bea6d2718ce3c6042838a35dfc9455f06ab71e36508811a8c5a0819e0ba73b0228d3083c39c9e2b238cfaf970beb37cb0984c62a58454f005fdaa53cafb6bf1efb136ceb31451580273c18e8b67d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x62, @string={0x62, 0x3, "6007cd2599b796613a2100ff2abd6a2d3705ee0908d196d2728d5cc1fd6976af4b192fc87953ea8f0c7f6dbb9fe4271fecb4ce5481819264d81ee2081fe8c21ab947fe47f2051eceb1b63940e0ba119ac2d3cfdd81719fdcacef6e366c9635ba"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x6e, "09edd8fcc2a7d3146a9c1e69f1bc6ac5f2046a2e49a6ae54b851abe1b8b611e2c2ec494ba41cae3b78a237272b618226ea3768d2317ef2e5aad5016afc0fceff3593290534e744e96c0bc5b5bf33dd75aa443039265b0af3ca4f745d8856cccdcc1d2e1040a79ae205e19ccf095e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x158, {0xf7, "daab35df26c79ffbbcee568a3c6dd50ee88cc2bb1b4b0a8c5c8627fbdfd66a29b4df6985fdac21e806ea8f20bd233c47768f8e483cea3ebf9198559e8a2e4b83dfa5abf1469c709c92445fb7547570cf964561d2d304d96aa9be0243e159d0c55e12bae680b3939dae64f8274f4d19910a916f6325330378f69043d9fa45a1265ed90fed400c65795513b84d1b95dff2d4d480b18fb8c4de9067efd5bff2573aac8a89a629796fde6b36c780191156563977df9c09a2b50ca0a4308cd1fc09258d295cfeb4e02a12e65567839341ba488feac81f2101fb30e2a7e9d3d3528a779ee91b0d68e58a845bc8f12121e9f6ceebe7a11c72576f"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xf3}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pidfd_send_signal(r1, 0x1, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffffffff, 0xcf7, 0x7d2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0xec, {0xec, 0x2, "52e259a96a2bc682886eeb11c09aa8a2e0c81ce993db6b22d4ed49f020c4b3250f4094c58872c8c865749d8366fcda1c596a6883f6f4132ec4e2fa2ca736147d7757e0676281d9bd3f504c7f1cc8e98ed7f5fbfa620067c88cd5b76a0ca66223b5515e00befe56d2759846951bd45054285f02a425b8e4461b4e93172a4c3b50871c08812fbd850db00df1d5217ed89a9156af95a23f3d983231eb66bea6d2718ce3c6042838a35dfc9455f06ab71e36508811a8c5a0819e0ba73b0228d3083c39c9e2b238cfaf970beb37cb0984c62a58454f005fdaa53cafb6bf1efb136ceb31451580273c18e8b67d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x62, @string={0x62, 0x3, "6007cd2599b796613a2100ff2abd6a2d3705ee0908d196d2728d5cc1fd6976af4b192fc87953ea8f0c7f6dbb9fe4271fecb4ce5481819264d81ee2081fe8c21ab947fe47f2051eceb1b63940e0ba119ac2d3cfdd81719fdcacef6e366c9635ba"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x6e, "09edd8fcc2a7d3146a9c1e69f1bc6ac5f2046a2e49a6ae54b851abe1b8b611e2c2ec494ba41cae3b78a237272b618226ea3768d2317ef2e5aad5016afc0fceff3593290534e744e96c0bc5b5bf33dd75aa443039265b0af3ca4f745d8856cccdcc1d2e1040a79ae205e19ccf095e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x158, {0xf7, "daab35df26c79ffbbcee568a3c6dd50ee88cc2bb1b4b0a8c5c8627fbdfd66a29b4df6985fdac21e806ea8f20bd233c47768f8e483cea3ebf9198559e8a2e4b83dfa5abf1469c709c92445fb7547570cf964561d2d304d96aa9be0243e159d0c55e12bae680b3939dae64f8274f4d19910a916f6325330378f69043d9fa45a1265ed90fed400c65795513b84d1b95dff2d4d480b18fb8c4de9067efd5bff2573aac8a89a629796fde6b36c780191156563977df9c09a2b50ca0a4308cd1fc09258d295cfeb4e02a12e65567839341ba488feac81f2101fb30e2a7e9d3d3528a779ee91b0d68e58a845bc8f12121e9f6ceebe7a11c72576f"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xf3}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x7}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) pidfd_send_signal(r1, 0x1, 0x0, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffffffff, 0xcf7, 0x7d2}) (async) 3.830269873s ago: executing program 4 (id=1251): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000680)) recvmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x100, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x100, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000001640)=[@free_buffer={0x40086303, r6}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$cgroup_type(r7, &(0x7f0000000200), 0x9) 3.803751154s ago: executing program 3 (id=1252): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$isdn(0x22, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x80010, r1, 0xffffd000) 3.628522303s ago: executing program 4 (id=1253): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xf}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc001) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 3.623129518s ago: executing program 0 (id=1254): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x44e71fa100c30b01, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x401040) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x9620}], 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0x6) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) 3.15341504s ago: executing program 4 (id=1255): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r4, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000300)="7bd9a4c05ab5ea367a275ebe0ff68bbf53", 0x11}, {0x0}, {&(0x7f0000000840)="ce827518f8c45ecf391368d20c797d3555eb1504e0cb8f13f63d8bd6289d4cbbfa123a299dcabbed4c056d60b91aaa316cf1cf69491528a188b04f5540c74fde2d6d535fcc0eb3b3714d7286473ef89e4fb8b4d6baff09259745db9663ae370064", 0x61}], 0x5) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7, 0x5, 0xfff, 0x1fe, 0x4, 0x0}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000002a40), 0x0, 0x2400) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r9, @ANYRES32=r8, @ANYRES32, @ANYBLOB="1c000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0xc11}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x20000090}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)="15c7026ffad0815734dcc20ff09a75ac392d5fe07194fd5993529b9a9ddea774c7f6d98ff90038f8f283", 0x2a}, {&(0x7f0000002c00)="b057b2db", 0x4}, {&(0x7f0000002c40)}, {0x0}], 0x4, 0x0, 0x0, 0x20044894}}], 0x3, 0x4001) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000009c0)="9df66a000f07b80a000f00d06766c7442400000000006766c7442402c0dc22da6766c744240600000000670f011c249a0000050026a69a00003c013ed95c0183a15e7f07", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x1e0, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) 2.771361762s ago: executing program 3 (id=1256): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd3be7caab7373271) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x4000008) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) chdir(&(0x7f0000000080)='./file0/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="ef52f3d6ccffd9188dff0201002dbd70000000000022000e001800018076655f3000000000a9834d276590e7d88c3d2fa6b64f566ed99fe87ff3f1083dcfcd985594e1c937ca0ee6fa9bdd476f594a00775435b9e4af47d04fddce056632081220ad0702d6e7a6a9e5d643ba658b9963c8c24aa4c6055755b0bf28944407e79e508d328821059551eac1dbe4b4b6b48a3042f9989cc208"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x8000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x2a4503, 0x40) (async) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000180)=0x2) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000008c0), 0x4) (async) fallocate(0xffffffffffffffff, 0x0, 0x7, 0x3) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180)) 2.444206686s ago: executing program 3 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) poll(&(0x7f0000000300)=[{r4, 0x1000}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e601010040"]) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r7, &(0x7f00000001c0)=ANY=[], 0xf8b) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000280)={0x3}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000002c0)="bad104edbaf80c66b86869bd8f66efbafc0c66b8d500000066ef0f0ff168820f0f8400d01d8ee0660f38f6f0660fc737b800008ee00fe9225d", 0x39}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x3, 0x4, 0x8}, {0x0, 0x4, 0x4000d, 0x8}, {0x8801, 0x4, 0x7}, {0x2, 0x2, 0x1, 0x4}], 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0x2, 0xf}, {0x10, 0x5}}, [{0x8}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x1, 0xb, 0x72d}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4040004) socket$nl_generic(0x10, 0x3, 0x10) 1.8878283s ago: executing program 1 (id=1258): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x3001800c, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='pim6reg0\x00') (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000002280)={0xc, 0x1}) (async, rerun: 32) dup3(r4, r1, 0x0) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2}}, 0x10, 0x0}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000280)) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfd03}, 0x4) sendfile(r6, r7, 0x0, 0xff7e82) 1.48168518s ago: executing program 1 (id=1259): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) r1 = socket(0x2b, 0x1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000540)=""/190, 0xbe}], 0x1, 0x47, 0x548) r3 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x63, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x7, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x2b, 0x7, 0x7}}, {{0x9, 0x5, 0x81, 0x1, 0x3ff, 0xe, 0x7, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x9, 0xa, 0x49}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x9, 0x1, 0xf}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x2b}}, {{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}, {{0x9, 0x5, 0x7, 0x301151bc8652c9db, 0x200, 0x6, 0x3, 0x80}}]}}]}}]}}, 0x0) syz_usb_ep_write(r4, 0x8, 0x81, &(0x7f00000001c0)="2e2fadeda0a05d02579c2e3e6daa701ef2582b08437fa854e05676427dd0dfc93e7d38c24af1d5dcc51d08d7ae02977728f5560ec7ac61836ec5301c06229f0d77d7b31b008040f38fb979d15eb345032bd817017c3da1fd707df45168c02ac16c70a69312f9238fc51d91f70db632a4519c5d257cdf97bf8f2bf3473c0f64ae94") io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x4500}], &(0x7f0000000040), 0x7}, 0x12) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001"], 0x50}}, 0x4008840) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) syz_clone(0x103ec091, 0x0, 0x0, 0x0, 0x0, 0x0) 1.403992873s ago: executing program 2 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x7, [@ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @datasec={0xd, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x6, 0xfffffffc}, {0x2, 0x18, 0x2}, {0x2, 0x2, 0xb}, {0x5, 0x6, 0x7fff}, {0x5, 0x7, 0x5}], "ba"}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000100)=""/108, 0x9b, 0x6c, 0x0, 0x3}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "991940f26aa19d3425558c6ed1ab091284f7da1a49dba2b6392a4c8dfdb1dfc1c62fc65ad5974329db95df02ab1504abe064166547e5d345a620186f26fec3775468f46784c167df280b6a486504c7e9803a0b0ce4c0eff7e843331b429ee3e699fb913201c60fa77def7a5de4fdd6fbe4711dc6625db77b"}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x20040880) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r3, 0xffffffffffffffff}, 0x4) pselect6(0x40, &(0x7f0000000580)={0x5c3, 0x3, 0xfdb, 0x8, 0x1, 0x7, 0x1f09, 0x1}, &(0x7f00000005c0)={0xfffffffffffffffb, 0x8, 0xd8d9, 0x1, 0x400, 0x80000000, 0x3, 0x80}, &(0x7f0000000600)={0x401, 0x660, 0x4, 0x5, 0x4, 0x400, 0x7f, 0x60000000000000}, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x6]}, 0x8}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'pim6reg0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd4, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x305}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x95}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = semget$private(0x0, 0x2, 0x400) semtimedop(r7, &(0x7f0000000980)=[{0x3, 0x3, 0x1800}, {0x4, 0x0, 0x800}, {0x3, 0x2, 0x1000}, {0x4, 0x100, 0x1800}, {0x0, 0xbdd0, 0x2000}, {0x4, 0x0, 0x800}, {0x0, 0x7, 0x1800}, {0x4, 0x6, 0x1000}, {0x0, 0x4}, {0x4, 0x9, 0x800}], 0xa, &(0x7f00000009c0)={0x77359400}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x48000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000a40)={{0x1ff, 0x10000}, 0x100, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x336, 0x2a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_open_dev$vivid(&(0x7f0000000cc0), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r11, 0xc0205649, &(0x7f0000000dc0)={0x4, 0x7, 0xff, r12, 0x0, &(0x7f0000000d80)={0x9b090d, 0xfff, '\x00', @string=&(0x7f0000000d40)=0x5}}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r10, 0x80089419, &(0x7f0000000e00)) ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) sendmsg$nl_route_sched(r13, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)=@deltfilter={0x68, 0x2d, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {0xc, 0xc}, {0xfff2, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xdf44a2164b32b4c0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000000fc0)) 1.319983173s ago: executing program 0 (id=1261): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006f00)={0x2020}, 0x2020) preadv2(r5, &(0x7f0000004e80)=[{&(0x7f0000003700)=""/121, 0x79}], 0x1, 0xd643, 0xaa, 0x14) read$FUSE(r5, &(0x7f0000004ec0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1.228987455s ago: executing program 2 (id=1262): syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0xf958, 0x10100}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000200)={0x80, 0xfdfd}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 748.251542ms ago: executing program 2 (id=1263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) close_range(r4, r5, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={r10, 0x2}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000000)={r10, 0x9, "161c09c5fc7b59ae76"}, &(0x7f0000000140)=0x11) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f00000000c0)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 625.333986ms ago: executing program 4 (id=1264): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x440402, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x7, 0x2, 0x6, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x64, 0x0, 0x2a, 0x4, 0x0, @multicast2, @private=0xa010102, {[@timestamp={0x44, 0x8, 0x31, 0x0, 0xc, [0x9]}, @lsrr={0x83, 0xb, 0x6f, [@private=0xa010100, @private=0xa010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) syz_usb_connect(0x2, 0xb92, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x11, 0xe0, 0xfd, 0x8, 0x403, 0xf3c2, 0x929, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb80, 0x3, 0xff, 0x7, 0x90, 0x8, [{{0x9, 0x4, 0xe1, 0x8, 0x1, 0xdb, 0xec, 0xf8, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0x6, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}, @generic={0xeb, 0x30, "465a0f2d454ba4f16baea9a787671a366bb13211377b4983608683896d36ae4fb097b36f9e5dbae11f5ecdffe788bcb69fcb80ff015a6ea577fd0214919238274a46a00ab1ecdb5dee940db1eeabf651f78060f9248e873a8e4508a90ea22b99a1e31e253bff06d97f8efeda1b9248a973b6df5cff9303f38ca42a3a50b6de66efcfd79d73caa0517fca2cecd26f507c0ebfb61383a087f989bda22ec36c11ce4ad2d9cadd8e140709d3bb68becc63a71d4aa49c94cfc4ffdc8e5143f00c6e6cf3d9427ca7bfa05b7684f67ba5ba8f3d9841a8616d8aa69c06496863fbc51bc0d1e600a18dc001d80a"}]}}]}}, {{0x9, 0x4, 0x4e, 0x2, 0xb, 0x23, 0xaa, 0x20, 0x26, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xb}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x3, 0x5, 0x3, 0x1, 0x36}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x3, "6b8a"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x3, 0x5, 0x8, 0x2, 0xa, 0x9], 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x1, 0x3, 0x81}]}], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x9, 0x51, [@generic={0x4, 0xd, "35ea"}, @generic={0xa1, 0x1a, "edf8a2a083b97117e250911d21f5b6695a683acf7811c3f142324ba6fb40ddbdff990b6375ff46f1d5185ae8632ea5b7268ad2e1fbcf3745dfe1151834d1d8c87f599aed54462f0b37c331a9d42c28132aaec0b2705be24a9a4d025abbda4fccdcafad596fc1af3650607637f665b9389125010c0c3876f2e48e4f31c084bc3022e7730194baa6b4ec1678a2cdea5cbc6c24e2b77071dbe79c5534fc1fd000"}]}}, {{0x9, 0x5, 0xd, 0x1, 0xca8bb2c1a2f0ecaf, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7f, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x76, 0x5, 0x9, [@generic={0x79, 0xc, "7f09eb504a64ba142c53e77178202d3cb733d05c490ec726b9d676f9868c9563793bbc08492a0349cfcde4dd3c3fdcd505dd222da4cced711bcda81c8597640709dfbea36978c1e436ec4c7330d0eeeeab9339b69f50d2e2a26847025ad1c96cf036544bc21ed614e89d81935a104e7038286abe026c2c"}]}}, {{0x9, 0x5, 0x1e, 0x10, 0x200, 0xb, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x8b1b}, @generic={0x5a, 0x3, "6933ef0e48590f1f36c663a219a6f114829be865aacbd5f942a47c73a4d9728881560a3c9b8f9bebf86347436886ba1864356b633d83a8dae075a349e50455b7f288d21998272b7ff22892a676f85a3a299ee38cee63c14b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x7, 0x4, 0x4, [@generic={0x9f, 0x22, "d2dafb29d797393faf4d6134aaef2ae5e951b78a91f8147a65b6fee80ec7c6afdcd88cd02da1e7d03e3db15bab56b92c4bdc38bf141dc30b9f3bdd508ca0dcd5aef301f692a10223899211ceeda724525356d1c4f9bc2eab23a85a1b45dc6d80e06da53720413a75d6585a279d9805b48d8ccdfce0346b8ef5d53201a9de1462bd4f371f57c323e6d6d08c52e2e6f756e2a475f9a5bb0e24f88220cecd"}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x400, 0x0, 0xff, 0xb}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x2, 0xc, 0x6, [@generic={0x4d, 0x22, "bd5c35501a2d0efe835dfcd288bf5289d85940852f507014ba84fcc947940df2397b0924e32243ccd186d53d80ca05fd94835107484dc8dbf202c44a04f05bdd9f030e9afa69737c7203c2"}, @generic={0x7f, 0xe, "44267b8fe9aba292d13d366f760701abbfb69ada183f20fc73575b5dc3388be14cc49407c0a36c2de0d5070e2fe609100efa776f7ba81cd48f28ceaaa15cc44a21f5207ff3fc003fe29130a5335c0f418f8ebe0eb07b46aacef9e271fda066dff62473ce9e13f9011277651260cdb2ec85fa231e075d81f30b8604095c"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0xd, 0x3, 0xfb, [@generic={0x2f, 0x11, "5ed4f7952530a32df11c1488e28ce85910e7ff4a6fe62c2f47d3867dfdc799d0e0b5180762caa1655942d8b6be"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x7, 0x4, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x2}, @generic={0x4f, 0x23, "34d849b75d127882e1eaff3a840c99780d79835887bc869ebba9d570ae265562df6aa5c5bf0290d887044f70d729ef8aca5a8b5ab69d7cf9fe0e77eede6d24ba6cba50319cc6855494a34691b6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x4, 0x7, 0x69, [@generic={0xaf, 0x21, "7f809e3833b8a08737260d13229229d294e94eefecbb6f9752012d1f0373b8545c94fe266fe154f7c512bbbae1888269ebd1a3baf602e3731a70cf6feb741539b45f95d9013ec31622f7171aee377965b1f61a0f44fd2cab5488cdf63c7159025ee4d5e5e0d229b3c340b888cd5561f0246e5e87f285580c9250115978aa6d6f3609af584b3b22a8b24abd214673d40326908aec3124c4ae4fd4293e61e7483abb0f4b0aa13d8813de4d1ea75d"}]}}]}}, {{0x9, 0x4, 0x65, 0x5, 0xa, 0xff, 0xff, 0x0, 0xff, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x641, 0x7, 0x9, 0x2}}, @generic={0x30, 0x23, "5b13e04ec7cdfd9cdcc7163d7fa8f733c13f6de4a93aca67aed7a9564f228200456fca25794aa90195858e44c184"}], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x96, 0x38, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8a59}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x2, 0x1, 0x0, [@generic={0x6f, 0x5, "f1c16be22c3f5913e05f8e1ee5bfa55c42a847bb326f6f2e7040929fda37a07560c305349aa4cd0945be43ea53c0d2bfb7a1c176e8a50af37aeeaa055c74a54d7af447579ccb287e883a2170d89a1d839cb742b6bfd0c654a4e268fa732303355639e97d6bba62dcb1906c6945"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x0, 0x3, 0x8, 0x2, [@generic={0x2a, 0x6, "93cf902d47187d6e1552b35b874abe3bfda23933ccef10e9fb5f00b5ab6fea2e2055ab4bb4ef59bd"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xd, 0xe, 0x5, [@generic={0x43, 0x22, "6853af861fcd9bf4a4f5c30892a8d0eea5c5df9bd6b6d7229fa468ded3bf3594ee5b83e5ac5ad590e5d554826b33c78b6bd46be9867e9ee721e1954a4b60c2a0b6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x6, 0x2, 0xd, [@generic={0x5b, 0x4, "870f25987ee0785f8fcf5f8ca3dca84993c7184971c1131971a9cc6f3e58feeb343a8c00d6b0b5b7fdf432c613e08fabc89044127e47c846ef672d0a839b2fb221851c073fe381cff47e7c3f21dd87bdfe0b724ac6f0055c2a"}, @generic={0x4f, 0x22, "3106e4127737b4c1c7b49ad93fbc03d16a018a1d2661ce5cb256df6b841c4a3a40c44d0d37e5cf3a68973fd06bc3a9394dffbf74d07ed43e1537d08eccf92f21622082e8b748c43f0a432ee6ac"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x3, 0xa, 0x7, [@generic={0x95, 0x5, "60111a93fae1005f3d1ea6c390bc1f7f8414f76bdbab6342f34c7ec940f4795df39e445891143ba5775328450a672ca67a108beb46b18acd584639e310e4c7683879dd6f96444e75bbce4b23637c033646b9b253b3f3a94a42cf025d3286d808964694f4a00abdc6f17db4a106946e9b388d6df1cda3630d7b8477e2864eedad9b8f7904f2a88f9bffdbd9203d7cced2c6eea9"}, @generic={0xfb, 0x23, "f5bdc3d693e295a2e4a0f956b6d07b3633230982010018a8067df1c6f969fb3e5883bfe59610bcd27214652ad3ac1d643a53d680667d2e8a223130c560f60b8b6e3362ed52316ce3164979eb7a2e5d07011279d3da386b608791103b5569a0d256b43e804db00c4043b02fd9961a6b5fbaba18a23d69bc645864c3e768b3eca5c6912bb0c475481c8a14ac9a0807d3e8547f171718025c7d1818c6a82901fb38d4a0dff7127ccf92f61f0e3df6a1c42fbf61aecbe84acec428cf59e5041cfb840ddbee1e5d1b8963a744e8a7e2297b46e85a7e3c6a0e18f0042da56dc295dee1aaeb4a7350178509ba7fa8e5b884f2b22f6a9673862c7c07d9"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0xe, 0x6c, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}, @generic={0xfb, 0xa, "6792e169f489a421385e49ca2c6d34e64cb2e49fb5024be38b6468d264a8a398d8102d85536d190ad37c7a5ef75fcd2fe444671bc0eebd1c91f503ce5ae7f10f7e18c71966852e09f3081862b23a3b399679fbb7f67fe6d4e8f34c33ac2c90e1ca1eefc9eeb43a15736bf6c54ab5954a565172faaeb94b7a1d1dd8c87ab8d96bfec9651f778adf204c80962bfa6562bf0ad0b82323c3bf15cafb6ea27213f53e52a72b9a2fa74487dcd3dc300852718219694ae415be24eb1218f0ee60a271506c0a763efebdd5c21431ffacff09eb9e1ee236c4ea89fee89fb63cdcd2f6dbb4b573f4dd8cc49f61010200e61dff87eb64a05b1d9a7e521175"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0xa, 0xfc, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x4d, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x3, 0x9, 0x7, [@generic={0xcc, 0xb, "31ab3c275b92a6dc9b8010ffb99d6b88d4bbfc899bd75f808ad7449a38eebe00e85fbec682f1396c0fc88950417abfe3eb8f9d09eaedb0336d17fcc49ef3ecde8c866b8948c1924bdf4e93c5cb0a2a6dbef398905eaa0118022e7d3670df1a4a7ac432bbf703e753bf6f97dad6bd145766359d209d5d551e58d2acfadf3d6c0efe0e03b590d262f0fc7b293e5be9bb660c2ca9b8577811778c08245147b3ede3f383298bf152126cbcc9f05ee834207598ba9890de5156f811fdbe2201f73962deb3616fd9bd4a91af0c"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x9}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x0, 0x8, 0x8, 0xaf, 0x5}, 0x5, &(0x7f0000000fc0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x2c01}}]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl2\x00', r5, 0x0, 0xe2, 0x2, 0x8, 0x71, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x1, 0x8720, 0x2c, 0xfffff800}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001180)={@dev, @empty, 0x0}, &(0x7f00000011c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)=@bridge_dellink={0x8c, 0x11, 0x800, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x100, 0x54}, [@IFLA_MAP={0x24, 0xe, {0x0, 0x800, 0x5, 0xf36d, 0x0, 0x6}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MAP={0x24, 0xe, {0x0, 0x2, 0xc791, 0x1, 0x2, 0x3}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40) r9 = getpid() write$cgroup_pid(r0, &(0x7f0000001340)=r9, 0x12) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@getneightbl={0x14, 0x42, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8810) recvmmsg(r0, &(0x7f0000008280)=[{{&(0x7f0000001480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003700)=[{0xfffffffffffffffd}, {&(0x7f0000001500)=""/166, 0xa6}, {&(0x7f00000015c0)=""/149, 0x95}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/13, 0xd}, {&(0x7f00000036c0)=""/23, 0x17}], 0x7, &(0x7f0000003780)=""/218, 0xda}, 0xff}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/200, 0xc8}, {&(0x7f0000005a00)=""/24, 0x18}, {&(0x7f0000005a40)=""/216, 0xd8}], 0x5, &(0x7f0000005bc0)=""/35, 0x23}, 0x4}, {{&(0x7f0000005c00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000005c80)=""/71, 0x47}, {&(0x7f0000005d00)=""/80, 0x50}, {&(0x7f0000005d80)=""/72, 0x48}, {&(0x7f0000005e00)=""/5, 0x5}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/225, 0xe1}, {&(0x7f0000006f40)=""/194, 0xc2}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/189, 0xbd}], 0xa}, 0xed}], 0x3, 0x102, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r13, &(0x7f0000008440)={&(0x7f0000008340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000008400)={&(0x7f0000008380)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c014}, 0x42) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000008580)={&(0x7f0000008480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000008540)={&(0x7f00000084c0)={0x60, 0x0, 0x1, 0x8c15cc5ffe862dd4, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6041a183}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9e8c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x144}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x60}}, 0x842) syz_open_dev$char_usb(0xc, 0xb4, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000008600)={0x3, &(0x7f00000085c0)=[{0x200, 0x8, 0x10, 0x9}, {0x0, 0x17, 0x10, 0x7f}, {0x2, 0x8, 0x7, 0x1}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f00000086c0)=@get={0x1, &(0x7f0000008640)=""/118, 0x5}) openat(r0, &(0x7f0000008700)='./file0\x00', 0x400003, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f0000008740)=""/86, &(0x7f00000087c0)=0x56) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000008800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4fd1eb93, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) 595.69175ms ago: executing program 3 (id=1265): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ec0)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x5, 0x33, 0x0, 0x1, [@generic='[']}]}, 0x1c}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x3, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (rerun: 32) 364.357391ms ago: executing program 2 (id=1266): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0xaf, 0x26, 0xbd, 0x20, 0xb48, 0x3007, 0x430d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0xf0, 0x9, [{{0x9, 0x4, 0xf2, 0x6a, 0x0, 0x34, 0x20, 0xab, 0x2}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x7, {0x7, 0x10, "8a707c23dc"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x20, 0x31, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xe89, 0x2, 0x1, {0x22, 0xe46}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2d, 0xa, 0x21}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x2, 0xfe, 0x1, {0x22, 0xcd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2c, 0xf8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x6, 0xff, 0xf9, 0x8, 0x7f}, 0x39, &(0x7f0000000240)={0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "651b32eec3aa7d2284e71346a1e33c94"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x10, 0x80, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x9, 0x4, 0xfa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0x8, 0x10}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x843}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "f1cad58e59c3d4a95698a2bb4b9679144b88c0324472d798a64afdd242a5653cdce33b9f525a5190b36fec83296833652a2193961f8e4563e242e234ed46d351d6d8261b2678a061dc0a26a5630bb435f12a8f276d8e4fd7fb5e42976d60d10e4ed093cd57d7472f7247086adf4a8d6316fdd8e99bbebd86c64e2da9ea9f865771bcdc55088869b13931472c0e3e75307a67c6ccafaea55c91b5e0a38c22b5d4dcad1512ad0f25e327353eabb92530cefcfd880246b29477d6de7e8b399ecbae4f1a341da3adb2a02bac2d1919b2569b1706700ff7c8c0b67989f095a06277d6fdf506415ab4"}}, {0xe6, &(0x7f0000000440)=@string={0xe6, 0x3, "b2dab3056e2afbcae0516cc87eb24480cb948772ad03eabe705c9291b439abb634f5854b035550872f3c62937defd3b5748111ce9fab1ed52af3ff39f42713ee873475dae62daf388df080e4beddc728fadebc755c8a75466402f85cc07f2c265149acedbe2d36bb099588ca4a0bc2e3f8ecb78d64819c120138af51eb336e9945a6283172fd4179fcf4e5d52ef55bb97701404a9e09f9227fdb585c344634387a299d23e61bd08a12bb65b787601d40cae1c6f3f160b11bbb713592fd174621633178714c7b13a75ffbd04467f6a45f892993e9b22eafa717d2f10918d8f578610126c4"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1400}}]}) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x29, @string={0x0, 0x3, "0e3c835266bfe131c84ef8fb76900c1bd5c69ed2df48f3cb1cd67bfb165b5a904187813aba"}}, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1267): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0x6a, 0xfb, 0x8}) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x57, @private0, @empty, 0x40, 0x0, 0xffffffff, 0xb}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)='\r', 0x1}]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r2, 0x4, 0x2, 0x81, 0xcf54, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x6d, 0x300}}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000040010000000400ae"], 0x18}}, 0x4000) recvmmsg(r6, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/144, 0x90}], 0x4, &(0x7f0000000540)=""/210, 0xd2}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpv3in6, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000740)}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/74, 0x4a}, {&(0x7f0000001b40)=""/131, 0x83}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000001a80)=""/160, 0xa0}, {&(0x7f0000005ac0)=""/242, 0xf2}], 0x9, &(0x7f0000000740)=""/48, 0x30}, 0x4}, {{&(0x7f0000001d40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/49, 0x31}, {&(0x7f0000001e00)=""/59, 0x3b}, {&(0x7f0000001e40)=""/212, 0xd4}, {&(0x7f0000001f40)=""/201, 0xc9}, {&(0x7f0000004080)=""/55, 0x37}], 0x6, &(0x7f0000004140)=""/112, 0x70}, 0x2}, {{&(0x7f00000041c0)=@x25, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005600)=""/166, 0xa6}, {&(0x7f0000004300)=""/150, 0x96}, {&(0x7f00000043c0)=""/114, 0x72}, {0xffffffffffffffff}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000005500)=""/217, 0xd9}, {&(0x7f00000059c0)=""/196, 0xc4}, {&(0x7f00000056c0)=""/106, 0x6a}, {&(0x7f0000005740)=""/119, 0x77}], 0xa, &(0x7f0000005880)=""/192, 0xc0}, 0x9}, {{&(0x7f0000005940)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006d00)=""/191, 0xbf}, 0x5}], 0x5, 0x12104, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0xfffffbba, 0x401}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xffffe000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x42) r10 = accept4(r9, 0x0, 0x0, 0x40000) accept4$alg(r10, 0x0, 0x0, 0x80800) kernel console output (not intermixed with test programs): ew high-speed USB device number 49 using dummy_hcd [ 367.809618][ T5952] usb 2-1: USB disconnect, device number 66 [ 367.904923][ T9440] fido_id[9440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 367.972097][ T5936] usb 4-1: device descriptor read/64, error -71 [ 367.995083][ T9445] vlan0: entered promiscuous mode [ 368.102946][ T5936] usb usb4-port1: attempt power cycle [ 368.474278][ T5936] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 368.498763][ T5936] usb 4-1: device descriptor read/8, error -71 [ 368.754469][ T5952] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 368.764281][ T5936] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 368.785595][ T5936] usb 4-1: device descriptor read/8, error -71 [ 368.795996][ T9432] syz.4.920 (9432): drop_caches: 1 [ 368.913216][ T5936] usb usb4-port1: unable to enumerate USB device [ 369.064269][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 369.082041][ T5952] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.090828][ T5952] usb 2-1: config 179 has no interface number 0 [ 369.105558][ T5952] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 369.127723][ T5952] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 369.152369][ T5952] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.172208][ T5952] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.190976][ T5952] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.200734][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.219309][ T9455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.449139][ T5952] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 369.575169][ T5966] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 369.634385][ T5936] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 369.661460][ T5952] usb 2-1: USB disconnect, device number 67 [ 369.667693][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 369.667733][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 369.754720][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 369.767557][ T5966] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 369.777971][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.786154][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 369.802704][ T5936] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 369.813364][ T5966] usb 3-1: Product: syz [ 369.821964][ T5966] usb 3-1: Manufacturer: syz [ 369.829137][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.841549][ T5966] usb 3-1: SerialNumber: syz [ 369.857412][ T5936] usb 1-1: Product: syz [ 369.862707][ T5966] usb 3-1: config 0 descriptor?? [ 369.872358][ T5936] usb 1-1: Manufacturer: syz [ 369.881833][ T5966] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 369.890606][ T5936] usb 1-1: SerialNumber: syz [ 369.921669][ T5936] usb 1-1: config 0 descriptor?? [ 369.970205][ T5936] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 370.628983][ T9486] FAULT_INJECTION: forcing a failure. [ 370.628983][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.644559][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.0.928 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 370.644581][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.644594][ T9486] Call Trace: [ 370.644601][ T9486] [ 370.644607][ T9486] dump_stack_lvl+0x189/0x250 [ 370.644630][ T9486] ? __pfx____ratelimit+0x10/0x10 [ 370.644655][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.644673][ T9486] ? __pfx__printk+0x10/0x10 [ 370.644693][ T9486] ? __might_fault+0xb0/0x130 [ 370.644719][ T9486] should_fail_ex+0x414/0x560 [ 370.644745][ T9486] _copy_from_user+0x2d/0xb0 [ 370.644764][ T9486] io_submit_one+0xc2/0x1310 [ 370.644797][ T9486] ? __pfx_io_submit_one+0x10/0x10 [ 370.644818][ T9486] ? __might_fault+0xb0/0x130 [ 370.644844][ T9486] ? __might_fault+0xb0/0x130 [ 370.644865][ T9486] __se_sys_io_submit+0x185/0x2f0 [ 370.644886][ T9486] ? __pfx___se_sys_io_submit+0x10/0x10 [ 370.644915][ T9486] ? ksys_write+0x22a/0x250 [ 370.644940][ T9486] ? do_syscall_64+0xbe/0x3b0 [ 370.644957][ T9486] do_syscall_64+0xfa/0x3b0 [ 370.644971][ T9486] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.644984][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.644998][ T9486] ? clear_bhb_loop+0x60/0xb0 [ 370.645015][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.645032][ T9486] RIP: 0033:0x7fda3ef8e929 [ 370.645045][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.645058][ T9486] RSP: 002b:00007fda3cdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 370.645074][ T9486] RAX: ffffffffffffffda RBX: 00007fda3f1b6160 RCX: 00007fda3ef8e929 [ 370.645084][ T9486] RDX: 00002000000006c0 RSI: 0000000000000001 RDI: 00007fda3fcf6000 [ 370.645094][ T9486] RBP: 00007fda3cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.645102][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.645110][ T9486] R13: 0000000000000000 R14: 00007fda3f1b6160 R15: 00007fda3f2dfa28 [ 370.645131][ T9486] [ 371.327585][ T978] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 371.394306][ T5952] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 371.491654][ T978] usb 4-1: config 0 has no interfaces? [ 371.510573][ T978] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.540207][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.548712][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 371.563885][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.572566][ T5952] usb 2-1: can't read configurations, error -61 [ 371.643606][ T978] usb 4-1: Product: syz [ 371.653813][ T978] usb 4-1: Manufacturer: syz [ 371.677178][ T978] usb 4-1: SerialNumber: syz [ 371.695210][ T978] usb 4-1: config 0 descriptor?? [ 371.714204][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 371.734272][ T5952] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 371.888567][ T9] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 371.897005][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 371.902196][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.915384][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.924254][ T9] usb 5-1: config 0 has no interface number 0 [ 371.930436][ T5952] usb 2-1: can't read configurations, error -61 [ 371.938480][ T5952] usb usb2-port1: attempt power cycle [ 371.949122][ T9] usb 5-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 371.963710][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.983696][ T9] usb 5-1: Product: syz [ 371.992089][ T9] usb 5-1: Manufacturer: syz [ 372.001051][ T9] usb 5-1: SerialNumber: syz [ 372.108328][ T9489] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.140156][ T9489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 372.179344][ T9] usb 5-1: config 0 descriptor?? [ 372.203165][ T9] cdc_wdm 5-1:0.246: More than one union descriptor, skipping ... [ 372.237839][ T9] cdc_wdm 5-1:0.246: probe with driver cdc_wdm failed with error -22 [ 372.374270][ T5952] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 372.394731][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 372.405525][ T978] usb 5-1: USB disconnect, device number 65 [ 372.423120][ T9] usb 1-1: USB disconnect, device number 49 [ 372.468799][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 372.492262][ T5952] usb 2-1: can't read configurations, error -61 [ 372.599484][ T9289] usb 3-1: USB disconnect, device number 61 [ 372.664325][ T5952] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 372.690290][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 372.697740][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 372.722299][ T5952] usb 2-1: can't read configurations, error -61 [ 372.741431][ T5952] usb usb2-port1: unable to enumerate USB device [ 372.904141][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 373.021796][ T9502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.934'. [ 373.060425][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.093318][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 373.110081][ T9] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 373.131121][ T9] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 373.143403][ T9] usb 1-1: config 129 has no interface number 0 [ 373.165298][ T9] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 373.178600][ T9] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 373.192312][ T9] usb 1-1: config 129 interface 28 has no altsetting 0 [ 373.205248][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 373.216196][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.225077][ T9] usb 1-1: Product: syz [ 373.229487][ T9] usb 1-1: Manufacturer: syz [ 373.234529][ T9] usb 1-1: SerialNumber: syz [ 373.394297][ T5966] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 373.487396][ T9] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 373.584190][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 373.680266][ T5966] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 373.680959][ T9] etas_es58x 1-1:129.28: could not retrieve the product info string [ 373.703609][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 373.713931][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.738049][ T5966] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.754195][ T5966] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.764294][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.831111][ T9] usb 1-1: USB disconnect, device number 50 [ 373.849006][ T9] etas_es58x 1-1:129.28: Disconnecting syz syz [ 373.991972][ T5966] usb 5-1: GET_CAPABILITIES returned 0 [ 374.027325][ T5966] usbtmc 5-1:16.0: can't read capabilities [ 374.182516][ T5966] usb 4-1: USB disconnect, device number 52 [ 374.227739][ T24] usb 5-1: USB disconnect, device number 66 [ 374.423832][ T30] audit: type=1326 audit(1751786581.780:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 374.540888][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 374.551229][ T9514] vlan0: entered promiscuous mode [ 374.560168][ T9514] usb usb8: usbfs: process 9514 (syz.1.936) did not claim interface 0 before use [ 374.618061][ T30] audit: type=1400 audit(1751786581.900:1987): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9506 comm="syz.1.936" [ 374.679354][ T30] audit: type=1326 audit(1751786581.940:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 374.754180][ T30] audit: type=1326 audit(1751786581.940:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 374.778934][ T30] audit: type=1326 audit(1751786581.940:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 374.979956][ T30] audit: type=1326 audit(1751786581.960:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 375.411399][ T30] audit: type=1326 audit(1751786581.960:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 375.483444][ T30] audit: type=1326 audit(1751786581.960:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 375.662781][ T30] audit: type=1326 audit(1751786581.960:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 375.804202][ T5952] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 375.910581][ T30] audit: type=1326 audit(1751786581.960:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b578e929 code=0x7ffc0000 [ 375.973650][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 375.982620][ T5952] usb 3-1: can't read configurations, error -61 [ 376.284207][ T5952] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 376.477441][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 376.489915][ T5952] usb 3-1: can't read configurations, error -61 [ 376.593194][ T5952] usb usb3-port1: attempt power cycle [ 376.956207][ T5952] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 377.027133][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 377.058238][ T5952] usb 3-1: can't read configurations, error -61 [ 377.224279][ T5952] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 377.278290][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 377.292120][ T5952] usb 3-1: can't read configurations, error -61 [ 377.390835][ T5952] usb usb3-port1: unable to enumerate USB device [ 377.704394][ T5966] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 377.914241][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 377.939129][ T5966] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 377.964150][ T5966] usb 1-1: config 0 has no interface number 0 [ 377.981939][ T5966] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.002306][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.024137][ T5966] usb 1-1: Product: syz [ 378.029027][ T5966] usb 1-1: Manufacturer: syz [ 378.072054][ T5966] usb 1-1: SerialNumber: syz [ 378.148782][ T5966] usb 1-1: config 0 descriptor?? [ 378.178385][ T5966] smsc95xx v2.0.0 [ 378.868231][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.874793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.039424][ T5966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 379.051076][ T5966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.139609][ T9572] PKCS7: Unknown OID: [5] (bad) [ 379.145026][ T9572] PKCS7: Only support pkcs7_signedData type [ 379.474988][ T5966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 379.534478][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 379.566530][ T5966] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.605404][ T5966] usb 1-1: USB disconnect, device number 51 [ 379.744320][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 379.918852][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 379.938359][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.981612][ T24] usb 3-1: Product: syz [ 379.994265][ T24] usb 3-1: Manufacturer: syz [ 380.021734][ T24] usb 3-1: SerialNumber: syz [ 380.062844][ T24] usb 3-1: config 0 descriptor?? [ 380.098755][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 381.427755][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.954'. [ 381.438002][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 381.450657][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 381.513431][ T9588] input: syz0 as /devices/virtual/input/input41 [ 381.531075][ T9588] input: failed to attach handler leds to device input41, error: -6 [ 381.830099][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 381.839334][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 381.839380][ T30] audit: type=1400 audit(1751786589.190:2003): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9589 comm="syz.1.955" [ 381.868252][ T9594] usb usb8: usbfs: process 9594 (syz.1.955) did not claim interface 0 before use [ 382.155350][ T24] gspca_sonixj: reg_r err -32 [ 382.245786][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 382.749910][ T9606] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 382.764254][ T9606] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 382.922119][ T9608] usb usb8: usbfs: process 9608 (syz.4.957) did not claim interface 0 before use [ 382.933147][ T30] audit: type=1400 audit(1751786590.270:2004): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9600 comm="syz.4.957" [ 383.195943][ T5937] usb 3-1: USB disconnect, device number 66 [ 383.589030][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.959'. [ 384.314284][ T5937] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 384.364358][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 384.464228][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 384.496900][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 384.505912][ T5937] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 384.518857][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.537603][ T5937] usb 2-1: Product: syz [ 384.541812][ T5937] usb 2-1: Manufacturer: syz [ 384.633459][ T5937] usb 2-1: SerialNumber: syz [ 384.770737][ T24] usb 3-1: config 0 has no interfaces? [ 384.777240][ T5937] usb 2-1: config 0 descriptor?? [ 384.805932][ T5937] as10x_usb: device has been detected [ 384.841761][ T5937] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 384.861579][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 384.875461][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.883552][ T24] usb 3-1: Product: syz [ 384.904187][ T24] usb 3-1: Manufacturer: syz [ 384.919093][ T24] usb 3-1: SerialNumber: syz [ 384.928919][ T5937] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 384.946074][ T24] usb 3-1: config 0 descriptor?? [ 385.215207][ T5937] as10x_usb: error during firmware upload part1 [ 385.226064][ T5937] Registered device Sky IT Digital Key (green led) [ 385.228443][ T5937] usb 2-1: USB disconnect, device number 72 [ 385.261813][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 385.380800][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 385.393399][ T5937] Unregistered device Sky IT Digital Key (green led) [ 385.414837][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 385.440562][ T5937] as10x_usb: device has been disconnected [ 385.464804][ T5952] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 385.650865][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.968'. [ 385.687964][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 385.700105][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 385.712704][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 385.729867][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.740582][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.758322][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.788344][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.850497][ T9647] PKCS7: Unknown OID: [5] (bad) [ 385.866628][ T9647] PKCS7: Only support pkcs7_signedData type [ 386.029870][ T5952] usb 5-1: GET_CAPABILITIES returned 0 [ 386.035723][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 386.235576][ T9289] usb 5-1: USB disconnect, device number 67 [ 386.295205][ T5952] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 386.514219][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 386.523494][ T5952] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 386.536879][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.549297][ T5952] usb 2-1: config 0 has no interface number 0 [ 386.567420][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 386.580053][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.589074][ T5952] usb 2-1: Product: syz [ 386.593440][ T5952] usb 2-1: Manufacturer: syz [ 386.601855][ T5952] usb 2-1: SerialNumber: syz [ 386.622134][ T5952] usb 2-1: config 0 descriptor?? [ 386.705267][ T9655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.971'. [ 386.875125][ T5937] usb 2-1: USB disconnect, device number 73 [ 387.354405][ T9289] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 387.537617][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 387.546714][ T30] audit: type=1400 audit(1751786594.890:2005): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9661 comm="syz.4.973" [ 387.548337][ T9666] usb usb8: usbfs: process 9666 (syz.4.973) did not claim interface 0 before use [ 387.631316][ T9289] usb 1-1: config 0 has no interfaces? [ 387.738863][ T9289] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.804272][ T9289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.819533][ T9289] usb 1-1: Product: syz [ 387.823773][ T9289] usb 1-1: Manufacturer: syz [ 387.830011][ T9289] usb 1-1: SerialNumber: syz [ 387.888019][ T9289] usb 1-1: config 0 descriptor?? [ 388.122318][ T24] usb 3-1: USB disconnect, device number 67 [ 388.164623][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'. [ 388.462262][ T9689] trusted_key: encrypted_key: master key parameter 'ddfault' is invalid [ 389.524198][ T9289] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 390.216794][ T9289] usb 3-1: Using ep0 maxpacket: 16 [ 390.231204][ T9289] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 390.242019][ T9289] usb 3-1: config 1 has no interface number 0 [ 390.272066][ T9289] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.295591][ T9289] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.383338][ T9289] usb 3-1: config 1 interface 105 has no altsetting 0 [ 390.499151][ T9289] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 390.528209][ T9289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.558956][ T9289] usb 3-1: Product: syz [ 390.582572][ T9289] usb 3-1: Manufacturer: syz [ 390.613577][ T9289] usb 3-1: SerialNumber: syz [ 390.640974][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 390.658630][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 390.886881][ T9] usb 1-1: USB disconnect, device number 52 [ 390.978969][ T9704] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 391.054857][ T9706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.102079][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 391.124665][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 391.471190][ T9704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.560938][ T9289] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 391.632300][ T9289] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32 [ 391.734199][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 391.946674][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 391.970587][ T9] usb 2-1: can't read configurations, error -61 [ 392.144574][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 392.254431][ T5937] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 392.346177][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 392.363171][ T9] usb 2-1: can't read configurations, error -61 [ 392.380511][ T9] usb usb2-port1: attempt power cycle [ 392.444146][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 392.461308][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 392.493283][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.544146][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.564364][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 392.569363][ T5937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.656296][ T5937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.692158][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.741942][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 392.769583][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 392.780716][ T9] usb 2-1: can't read configurations, error -61 [ 392.781593][ T24] usb 3-1: USB disconnect, device number 68 [ 392.951902][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 392.962341][ T5937] usb 1-1: GET_CAPABILITIES returned 0 [ 392.968275][ T5937] usbtmc 1-1:16.0: can't read capabilities [ 392.981739][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 393.007132][ T9] usb 2-1: can't read configurations, error -61 [ 393.061734][ T9] usb usb2-port1: unable to enumerate USB device [ 393.074458][ T9289] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 393.179055][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 393.188753][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 393.202291][ T5937] usb 1-1: USB disconnect, device number 53 [ 393.234493][ T9289] usb 5-1: Using ep0 maxpacket: 16 [ 393.241769][ T9289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.255301][ T9289] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 393.308904][ T9289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.328731][ T9289] usb 5-1: config 0 descriptor?? [ 393.379307][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'. [ 393.542496][ T9289] logitech-djreceiver 0003:046D:C513.001E: unknown main item tag 0x0 [ 393.553517][ T9289] logitech-djreceiver 0003:046D:C513.001E: unknown main item tag 0x0 [ 393.578840][ T9289] logitech-djreceiver 0003:046D:C513.001E: unknown main item tag 0x0 [ 393.596701][ T9289] logitech-djreceiver 0003:046D:C513.001E: unknown main item tag 0x0 [ 393.628718][ T9289] logitech-djreceiver 0003:046D:C513.001E: unknown main item tag 0x0 [ 393.852737][ T9746] usb usb8: usbfs: process 9746 (syz.2.991) did not claim interface 0 before use [ 393.862297][ T30] audit: type=1400 audit(1751786601.210:2006): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9740 comm="syz.2.991" [ 393.949546][ T24] usb 5-1: USB disconnect, device number 68 [ 394.355378][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.394827][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.594171][ T5937] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 394.774193][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 394.812530][ T5937] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 394.853972][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.900233][ T5937] usb 5-1: Product: syz [ 394.928658][ T5937] usb 5-1: Manufacturer: syz [ 394.942147][ T5937] usb 5-1: SerialNumber: syz [ 394.988077][ T5937] usb 5-1: config 0 descriptor?? [ 395.316621][ T5937] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 395.335182][ T5937] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 395.379305][ T5937] usb 5-1: USB disconnect, device number 69 [ 396.851092][ T9773] x_tables: unsorted entry at hook 2 [ 398.034215][ T5937] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 398.224912][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.266474][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.314684][ T5937] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 398.358948][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.423599][ T5937] usb 3-1: config 0 descriptor?? [ 398.760269][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 398.773037][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 398.800662][ T5937] usb 3-1: USB disconnect, device number 69 [ 398.835726][ T9289] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 398.994839][ T9289] usb 5-1: device descriptor read/64, error -71 [ 399.364399][ T9289] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 399.504188][ T9289] usb 5-1: device descriptor read/64, error -71 [ 399.614539][ T9289] usb usb5-port1: attempt power cycle [ 399.699731][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 400.041506][ T9289] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 400.177315][ T9289] usb 5-1: device descriptor read/8, error -71 [ 400.194179][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 400.206406][ T24] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 400.214835][ T24] usb 3-1: config 0 has no interface number 0 [ 400.273682][ T24] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 400.293302][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.324552][ T24] usb 3-1: Product: syz [ 400.344183][ T24] usb 3-1: Manufacturer: syz [ 400.354412][ T24] usb 3-1: SerialNumber: syz [ 400.387568][ T24] usb 3-1: config 0 descriptor?? [ 400.454496][ T9289] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 400.475919][ T9289] usb 5-1: device descriptor read/8, error -71 [ 400.534422][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 400.593017][ T9289] usb usb5-port1: unable to enumerate USB device [ 400.664420][ T9] usb 4-1: device descriptor read/64, error -71 [ 400.666881][ T24] kaweth 3-1:0.235: Firmware present in device. [ 400.728596][ T24] kaweth 3-1:0.235: Statistics collection: 0 [ 400.773260][ T24] kaweth 3-1:0.235: Multicast filter limit: 0 [ 400.793539][ T24] kaweth 3-1:0.235: MTU: 0 [ 400.803691][ T24] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00 [ 400.904351][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 401.028291][ T24] kaweth 3-1:0.235: Error setting SOFS wait [ 401.044336][ T24] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 401.064903][ T9] usb 4-1: device descriptor read/64, error -71 [ 401.070463][ T24] usb 3-1: USB disconnect, device number 70 [ 401.184323][ T9289] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 401.194622][ T9] usb usb4-port1: attempt power cycle [ 401.404352][ T9289] usb 2-1: Using ep0 maxpacket: 8 [ 401.416237][ T9289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.433199][ T9289] usb 2-1: config 1 has an invalid interface number: 65 but max is 0 [ 401.447283][ T9289] usb 2-1: config 1 has no interface number 0 [ 401.460127][ T9289] usb 2-1: config 1 interface 65 has no altsetting 0 [ 401.476977][ T9289] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 401.494309][ T9289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.513933][ T9810] syzkaller1: entered promiscuous mode [ 401.529872][ T9810] syzkaller1: entered allmulticast mode [ 401.554267][ T9289] usb 2-1: Product: syz [ 401.563502][ T9289] usb 2-1: Manufacturer: syz [ 401.568872][ T9289] usb 2-1: SerialNumber: syz [ 401.599183][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 401.640443][ T9] usb 4-1: device descriptor read/8, error -71 [ 401.699282][ T9814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.708627][ T9814] bond0: (slave bond1): Enslaving as an active interface with an up link [ 401.904289][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 401.938402][ T9] usb 4-1: device descriptor read/8, error -71 [ 402.074974][ T9] usb usb4-port1: unable to enumerate USB device [ 402.150729][ T9809] syz.0.1008 (9809): drop_caches: 1 [ 402.292427][ T9809] syz.0.1008 (9809): drop_caches: 1 [ 403.507942][ T9831] netlink: 'syz.4.1012': attribute type 15 has an invalid length. [ 403.517165][ T9831] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1012'. [ 403.528906][ T9843] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 403.528906][ T9843] The task syz.3.1015 (9843) triggered the difference, watch for misbehavior. [ 403.861029][ T9289] kalmia 2-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 403.924634][ T9289] kalmia 2-1:1.65: probe with driver kalmia failed with error -22 [ 404.002646][ T9289] usb 2-1: USB disconnect, device number 78 [ 404.794240][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 405.016169][ T9] usb 1-1: config 0 has an invalid interface number: 240 but max is 0 [ 405.041869][ T9] usb 1-1: config 0 has no interface number 0 [ 405.075077][ T9] usb 1-1: New USB device found, idVendor=1bc7, idProduct=10a0, bcdDevice=a1.8f [ 405.116683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.145430][ T9] usb 1-1: Product: syz [ 405.167098][ T9] usb 1-1: Manufacturer: syz [ 405.183498][ T9] usb 1-1: SerialNumber: syz [ 405.234957][ T9] usb 1-1: config 0 descriptor?? [ 405.313554][ T9862] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[9862] [ 405.449773][ T9] option 1-1:0.240: GSM modem (1-port) converter detected [ 405.680463][ T9289] usb 1-1: USB disconnect, device number 54 [ 405.688415][ T9289] option 1-1:0.240: device disconnected [ 406.036764][ T9871] syzkaller1: entered promiscuous mode [ 406.042320][ T9871] syzkaller1: entered allmulticast mode [ 406.137068][ T9870] syz.2.1023 (9870): drop_caches: 1 [ 406.403084][ T9870] syz.2.1023 (9870): drop_caches: 1 [ 406.513734][ T9878] input: syz1 as /devices/virtual/input/input42 [ 407.084195][ T9289] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 407.342061][ T9289] usb 1-1: config 0 has no interfaces? [ 407.361884][ T9289] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 407.384759][ T9289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.394677][ T9289] usb 1-1: Product: syz [ 407.404521][ T9289] usb 1-1: Manufacturer: syz [ 407.413420][ T9289] usb 1-1: SerialNumber: syz [ 407.429923][ T9289] usb 1-1: config 0 descriptor?? [ 407.725953][ T5936] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 407.834233][ T9890] Can't find ip_set type hash:ip, [ 407.907461][ T5936] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 407.915945][ T5936] usb 4-1: config 0 has no interface number 0 [ 407.922275][ T5936] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 407.993939][ T5936] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.047053][ T5936] usb 4-1: config 0 interface 113 has no altsetting 0 [ 408.082634][ T5936] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 408.098768][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.174293][ T5936] usb 4-1: Product: syz [ 408.203995][ T9902] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 408.215311][ T9902] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 408.223436][ T5936] usb 4-1: Manufacturer: syz [ 408.234458][ T5936] usb 4-1: SerialNumber: syz [ 408.275423][ T5936] usb 4-1: config 0 descriptor?? [ 408.294525][ T5936] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 408.500347][ T5936] usb 4-1: USB disconnect, device number 57 [ 409.529486][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 409.550268][ T9913] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 409.564708][ T9913] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 409.804960][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.818280][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.881655][ T9913] sctp: [Deprecated]: syz.4.1032 (pid 9913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.881655][ T9913] Use struct sctp_sack_info instead [ 410.001459][ T9919] netlink: 'syz.2.1034': attribute type 23 has an invalid length. [ 410.027153][ T24] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 410.108819][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.300002][ T24] usb 4-1: config 0 descriptor?? [ 410.562787][ T5937] usb 1-1: USB disconnect, device number 55 [ 410.769399][ T24] hid-led 0003:1D34:000A.001F: item fetching failed at offset 2/3 [ 410.811690][ T24] hid-led 0003:1D34:000A.001F: probe with driver hid-led failed with error -22 [ 410.879629][ T9] usb 4-1: USB disconnect, device number 58 [ 411.024317][ T5937] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 411.208923][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 411.230337][ T5937] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 411.774446][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.803426][ T5937] usb 1-1: Product: syz [ 411.879760][ T5937] usb 1-1: Manufacturer: syz [ 411.891082][ T5937] usb 1-1: SerialNumber: syz [ 411.902509][ T5937] usb 1-1: config 0 descriptor?? [ 411.920641][ T5937] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 412.159722][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1042'. [ 412.672546][ T9947] syz.1.1040 (9947): drop_caches: 2 [ 413.707620][ T9973] Can't find ip_set type hash:ip, [ 414.328449][ T5937] usb 1-1: USB disconnect, device number 56 [ 414.844347][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 414.858763][ T9989] usb usb8: usbfs: process 9989 (syz.3.1049) did not claim interface 0 before use [ 414.896706][ T30] audit: type=1400 audit(1751786622.200:2007): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9984 comm="syz.3.1049" [ 415.137369][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 415.159342][ T9991] bridge0: port 3(vlan2) entered blocking state [ 415.207155][ T9991] bridge0: port 3(vlan2) entered disabled state [ 415.246881][ T9991] vlan2: entered allmulticast mode [ 415.258258][ T9991] bridge0: entered allmulticast mode [ 415.556300][ T9991] vlan2: left allmulticast mode [ 415.561238][ T9991] bridge0: left allmulticast mode [ 416.285138][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1053'. [ 416.324569][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1055'. [ 416.904396][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 416.985602][T10031] binder: 10028:10031 ioctl 80049363 200000000000 returned -22 [ 416.999878][T10031] binder: 10028:10031 ioctl c0306201 200000000100 returned -14 [ 417.074297][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 417.114945][ T24] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 417.124512][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.141138][ T24] usb 1-1: Product: syz [ 417.150959][ T24] usb 1-1: Manufacturer: syz [ 417.161827][ T24] usb 1-1: SerialNumber: syz [ 417.183814][ T24] usb 1-1: config 0 descriptor?? [ 417.206873][ T24] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 417.360407][ T5937] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 417.537096][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.576677][ T5937] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 417.606278][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.637514][ T5937] usb 3-1: config 0 descriptor?? [ 417.651194][ T5937] pwc: Askey VC010 type 2 USB webcam detected. [ 418.207880][ T5937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.221993][ T5937] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.237737][ T5937] pwc: recv_control_msg error -32 req 02 val 2c00 [ 418.246192][ T5937] pwc: recv_control_msg error -32 req 04 val 1000 [ 418.278785][ T5937] pwc: recv_control_msg error -32 req 04 val 1300 [ 418.384130][ T5937] pwc: recv_control_msg error -32 req 04 val 1400 [ 418.394697][ T5937] pwc: recv_control_msg error -32 req 02 val 2000 [ 418.402687][ T5937] pwc: recv_control_msg error -32 req 02 val 2100 [ 418.412895][ T5937] pwc: recv_control_msg error -32 req 04 val 1500 [ 418.420876][ T5937] pwc: recv_control_msg error -32 req 02 val 2500 [ 418.452772][ T5937] pwc: recv_control_msg error -32 req 02 val 2400 [ 418.523324][ T5937] pwc: recv_control_msg error -32 req 02 val 2600 [ 418.535144][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 418.560652][ T5937] pwc: recv_control_msg error -32 req 02 val 2900 [ 418.656194][ T5937] pwc: recv_control_msg error -32 req 02 val 2800 [ 418.694685][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 418.709540][T10050] bridge0: port 2(vlan2) entered blocking state [ 418.716515][T10050] bridge0: port 2(vlan2) entered disabled state [ 418.723080][T10050] vlan2: entered allmulticast mode [ 418.733898][T10050] bridge0: entered allmulticast mode [ 418.739436][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 418.751304][ T9] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 418.761109][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.769563][ T9] usb 5-1: Product: syz [ 418.773984][ T9] usb 5-1: Manufacturer: syz [ 418.785010][T10051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1066'. [ 418.800404][ T9] usb 5-1: SerialNumber: syz [ 418.807824][T10050] vlan2: left allmulticast mode [ 418.813084][T10050] bridge0: left allmulticast mode [ 418.946499][ T9] usb 5-1: config 0 descriptor?? [ 419.031418][ T9] as10x_usb: device has been detected [ 419.041622][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 419.153650][T10049] netlink: 'syz.1.1066': attribute type 4 has an invalid length. [ 419.273919][T10049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1066'. [ 419.345578][ T9] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 419.356929][T10020] random: crng reseeded on system resumption [ 419.367451][T10049] wlan1: mtu less than device minimum [ 419.403749][ T9] as10x_usb: error during firmware upload part1 [ 419.417862][ T9] Registered device Sky IT Digital Key (green led) [ 419.454902][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 419.503349][ T5936] usb 1-1: USB disconnect, device number 57 [ 419.586489][T10055] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 419.647675][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 419.671364][T10054] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 420.060853][ T5937] pwc: recv_control_msg error -71 req 04 val 1200 [ 420.123925][ T5937] pwc: Registered as video103. [ 420.162936][ T5937] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 420.260373][ T5937] usb 3-1: USB disconnect, device number 71 [ 420.794487][ T9] usb 5-1: USB disconnect, device number 74 [ 420.884844][ T9] Unregistered device Sky IT Digital Key (green led) [ 420.905152][ T9] as10x_usb: device has been disconnected [ 420.936219][T10073] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[10073] [ 421.315662][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 421.366292][T10091] program syz.2.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.372503][T10089] bridge0: port 3(vlan2) entered blocking state [ 421.389786][T10089] bridge0: port 3(vlan2) entered disabled state [ 421.396351][ T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 421.404721][T10089] vlan2: entered allmulticast mode [ 421.410582][T10089] bridge0: entered allmulticast mode [ 421.410584][T10091] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 421.485733][T10089] vlan2: left allmulticast mode [ 421.492906][T10089] bridge0: left allmulticast mode [ 421.561683][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.576307][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.604632][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.644749][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.663621][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.684828][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.695293][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.706933][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.717844][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.729272][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 421.737049][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.824226][ T5936] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 421.953729][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1073'. [ 421.963989][ T9] usb 5-1: usb_control_msg returned -32 [ 421.971285][ T9] usbtmc 5-1:16.0: can't read capabilities [ 421.974681][ T24] usb 3-1: device descriptor read/64, error -71 [ 422.034126][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 422.049279][ T5936] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 422.068007][ T5936] usb 1-1: config 0 has no interface number 0 [ 422.093535][ T5936] usb 1-1: config 0 interface 12 has no altsetting 0 [ 422.161277][ T5936] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 422.179793][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.190654][ T5936] usb 1-1: Product: syz [ 422.195294][ T5936] usb 1-1: Manufacturer: syz [ 422.200135][ T5936] usb 1-1: SerialNumber: syz [ 422.209925][ T5936] usb 1-1: config 0 descriptor?? [ 422.284276][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 422.343493][T10106] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 422.375543][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.388348][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.424931][ T5937] usb 5-1: USB disconnect, device number 75 [ 422.432494][ T5936] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 422.444142][ T24] usb 3-1: device descriptor read/64, error -71 [ 422.464179][ T5936] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 422.497643][ T5936] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 422.505806][ T5936] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 422.544689][ T5936] usb 1-1: USB disconnect, device number 58 [ 422.595242][ T24] usb usb3-port1: attempt power cycle [ 422.944216][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 423.004919][ T24] usb 3-1: device descriptor read/8, error -71 [ 423.110253][ T5936] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 423.244521][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 423.265238][ T5936] usb 4-1: too many configurations: 78, using maximum allowed: 8 [ 423.273579][ T24] usb 3-1: device descriptor read/8, error -71 [ 423.291939][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.301147][ T5937] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 423.309073][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.324006][ T5936] usb 4-1: Product: syz [ 423.328452][ T5936] usb 4-1: Manufacturer: syz [ 423.349977][ T5936] usb 4-1: SerialNumber: syz [ 423.362624][ T5936] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.397317][ T5966] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.412415][ T24] usb usb3-port1: unable to enumerate USB device [ 423.434234][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 423.506180][ T5937] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.520603][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.648900][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.669726][ T5937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.724318][T10130] vivid-000: disconnect [ 423.870149][ T5937] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.879559][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.888148][ T5937] usb 2-1: Product: syz [ 423.892470][ T5937] usb 2-1: Manufacturer: syz [ 423.894827][ T9289] usb 4-1: USB disconnect, device number 59 [ 423.941602][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 423.950391][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 423.956987][T10124] vivid-000: reconnect [ 423.964663][ T5937] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 423.996449][ T5937] cdc_wdm 2-1:1.0: Unknown control protocol [ 424.172255][ C1] wdm_int_callback: 3 callbacks suppressed [ 424.172287][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.184762][ C1] wdm_int_callback: 3 callbacks suppressed [ 424.184777][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.196746][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.204321][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.210970][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.218829][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.225491][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.232403][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.239046][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.245427][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.252061][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.258528][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.265182][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.271472][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.278117][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.284494][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.291133][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.297468][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.304105][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.310413][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 424.317138][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.396144][ T5937] usb 2-1: USB disconnect, device number 79 [ 424.402233][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 424.532780][ T5966] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 424.546061][ T5966] ath9k_htc: Failed to initialize the device [ 424.568169][ T9289] usb 4-1: ath9k_htc: USB layer deinitialized [ 424.837775][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 424.846891][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 425.332969][T10154] Can't find ip_set type hash:ip,ma [ 425.489882][ T9289] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 425.728870][ T9289] usb 4-1: Using ep0 maxpacket: 16 [ 425.768270][ T9289] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 425.778751][ T9289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.789768][ T9289] usb 4-1: Product: syz [ 425.798181][ T9289] usb 4-1: Manufacturer: syz [ 425.802848][ T9289] usb 4-1: SerialNumber: syz [ 425.823731][ T9289] usb 4-1: config 0 descriptor?? [ 425.855419][ T9289] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 426.314602][ T5937] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 426.508158][ T5937] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.529853][ T5937] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.580136][ T5937] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.610324][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.643856][T10170] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 426.761652][ T9289] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 426.926735][ T5937] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.056863][ T9289] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.090048][ T9289] usb 3-1: config 0 interface 0 has no altsetting 0 [ 427.095268][ T5937] usb 1-1: USB disconnect, device number 59 [ 427.153594][ T9289] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 427.199300][ T9289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.247523][ T9289] usb 3-1: config 0 descriptor?? [ 427.603198][ T30] audit: type=1400 audit(1751786634.910:2008): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10177 comm="syz.4.1098" [ 427.733451][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.746665][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.773247][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.782309][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.813885][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.845727][ T9289] sunplus 0003:04FC:05D8.0020: unknown main item tag 0x0 [ 427.858135][ T9289] sunplus 0003:04FC:05D8.0020: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 427.894751][ T9289] usb 4-1: USB disconnect, device number 60 [ 428.014176][ T5937] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 428.175878][ T9289] usb 3-1: USB disconnect, device number 76 [ 428.207776][T10180] usb usb8: usbfs: process 10180 (syz.4.1098) did not claim interface 0 before use [ 428.896855][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.922288][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.005263][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 429.064177][ T5966] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 429.194368][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 429.202735][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.215997][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 429.225802][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.254319][ T9289] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 429.254635][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.273443][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.283549][ T5966] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 429.298688][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.308116][ T24] usb 1-1: config 0 descriptor?? [ 429.324628][ T5966] usb 3-1: config 0 descriptor?? [ 429.454560][ T9289] usb 2-1: Using ep0 maxpacket: 16 [ 429.465105][ T9289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.480889][ T9289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.491439][ T9289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.509521][ T9289] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.520266][ T9289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.539160][ T9289] usb 2-1: config 0 descriptor?? [ 429.760120][ T5966] hid-steam 0003:28DE:1142.0021: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 429.840091][T10207] fuse: Unknown parameter 'eroup_id' [ 429.868860][ T5966] hid-steam 0003:28DE:1142.0021: Steam wireless receiver connected [ 429.907513][ T5966] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 429.958794][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 429.970945][ T9289] microsoft 0003:045E:07DA.0023: item fetching failed at offset 30/34 [ 429.978164][ T5966] usb 3-1: USB disconnect, device number 77 [ 430.007410][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 430.009245][ T9289] microsoft 0003:045E:07DA.0023: parse failed [ 430.042312][ T9289] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 430.079357][ T5966] hid-steam 0003:28DE:1142.0021: Steam wireless receiver disconnected [ 430.090228][T10209] fido_id[10209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 430.108827][ T24] usb 1-1: USB disconnect, device number 60 [ 430.153588][ T9289] usb 2-1: USB disconnect, device number 80 [ 430.319706][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 430.338340][ T5937] usb 5-1: no configurations [ 430.354497][ T5937] usb 5-1: can't read configurations, error -22 [ 430.387566][T10211] binder: 10210:10211 ioctl c018620c 200000000100 returned -22 [ 430.706807][ T5937] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 430.774182][ T9289] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 430.820368][ T24] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 430.851199][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 430.914176][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 430.923895][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.932649][ T5937] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 430.954531][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.976809][ T5937] usb 5-1: config 0 descriptor?? [ 431.077682][ T9289] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 431.086038][ T9289] usb 4-1: config 0 has no interface number 0 [ 431.097184][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.099632][ T9289] usb 4-1: config 0 interface 29 has no altsetting 0 [ 431.116678][ T9289] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 431.126293][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.126619][ T9289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.147337][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.394151][ T9288] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 431.402371][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.413671][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.442575][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.453894][ T9289] usb 4-1: Product: syz [ 431.495104][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 431.509065][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.513450][ T9289] usb 4-1: Manufacturer: syz [ 431.520011][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.552238][ T24] usb 3-1: string descriptor 0 read error: -22 [ 431.565358][ T9288] usb 2-1: Using ep0 maxpacket: 16 [ 431.586849][ T5937] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 431.606394][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 431.626732][ T9289] usb 4-1: SerialNumber: syz [ 431.631582][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.681296][ T24] adutux 3-1:168.0: interrupt endpoints not found [ 431.708926][ T9289] usb 4-1: config 0 descriptor?? [ 431.726200][ T9288] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 431.752421][ T9288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.824871][ T9288] usb 2-1: Product: syz [ 431.829185][ T9288] usb 2-1: Manufacturer: syz [ 431.884647][ T9] usb 3-1: USB disconnect, device number 78 [ 431.898350][ T9288] usb 2-1: SerialNumber: syz [ 431.939669][ T9288] usb 2-1: config 0 descriptor?? [ 432.016162][ T5937] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -71 [ 432.040092][ T9289] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v62 fw v249.183.87 (2 channels) [ 432.077386][ T5937] usb 5-1: USB disconnect, device number 78 [ 432.078254][ T9288] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 432.113683][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 432.160188][ T9289] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 432.206512][ T9289] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 432.316674][ T9289] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 432.338235][ T9289] usb 4-1: USB disconnect, device number 62 [ 432.413777][T10241] futex_wake_op: syz.2.1116 tries to shift op by 36; fix this program [ 432.614150][ T5937] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 432.906129][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 432.915821][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 432.937626][T10245] bridge0: entered promiscuous mode [ 432.960588][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'. [ 433.000801][T10245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 433.011091][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 433.061203][ T30] audit: type=1804 audit(1751786640.410:2009): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1117" name="/newroot/231/file1" dev="fuse" ino=1 res=1 errno=0 [ 433.098939][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.121667][ T5937] usb 1-1: config 0 interface 0 has no altsetting 1 [ 433.138530][ T5937] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 433.147989][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 433.156460][ T5937] usb 1-1: Product: syz [ 433.161265][ T5937] usb 1-1: Manufacturer: syz [ 433.169520][ T5937] usb 1-1: SerialNumber: syz [ 433.215430][ T5937] usb 1-1: config 0 descriptor?? [ 433.592353][ T30] audit: type=1326 audit(1751786640.950:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 433.623158][ T30] audit: type=1326 audit(1751786640.950:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 433.763241][ T9] usb 2-1: USB disconnect, device number 81 [ 433.922938][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.944175][ T9288] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 433.981590][ T30] audit: type=1326 audit(1751786640.950:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.051171][ T30] audit: type=1326 audit(1751786640.950:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.075023][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.116856][ T9288] usb 5-1: Using ep0 maxpacket: 32 [ 434.135455][ T30] audit: type=1326 audit(1751786640.950:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.147849][ T9288] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 434.207307][ T30] audit: type=1326 audit(1751786640.950:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.215436][ T9288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.277230][ T5937] usb 1-1: USB disconnect, device number 61 [ 434.287324][ T9288] usb 5-1: Product: syz [ 434.291565][ T9288] usb 5-1: Manufacturer: syz [ 434.303498][ T30] audit: type=1326 audit(1751786640.950:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.330756][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.364193][ T9288] usb 5-1: SerialNumber: syz [ 434.364840][ T30] audit: type=1326 audit(1751786640.950:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.401894][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1120'. [ 434.424184][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 434.467718][ T30] audit: type=1326 audit(1751786640.950:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fda3ef8e929 code=0x7ffc0000 [ 434.564787][ T9] usb 2-1: device descriptor read/64, error -71 [ 434.724490][ T9288] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 434.732298][ T9288] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 434.767308][ T9288] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 434.792702][ T9288] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 434.804349][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 434.974200][ T9] usb 2-1: device descriptor read/64, error -71 [ 435.060058][T10279] usb usb8: usbfs: process 10279 (syz.2.1122) did not claim interface 0 before use [ 435.195784][ T9] usb usb2-port1: attempt power cycle [ 435.584347][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 435.660763][ T9] usb 2-1: device descriptor read/8, error -71 [ 435.704399][ T5966] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 435.855935][ T5966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 435.869835][ T5966] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 435.914447][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 435.935605][ T9] usb 2-1: device descriptor read/8, error -71 [ 435.942028][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.972382][ T5966] usb 1-1: config 0 descriptor?? [ 436.054802][ T9] usb usb2-port1: unable to enumerate USB device [ 436.268224][ T5966] (null): keene_cmd_main failed (-71) [ 436.302220][ T5966] video4linux radio48: keene_cmd_main failed (-71) [ 436.328403][ T5966] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 436.353102][ T5966] usb 1-1: USB disconnect, device number 62 [ 436.388927][T10286] cifs: Unknown parameter '00000000000000000000' [ 436.561344][ T24] usb 5-1: USB disconnect, device number 79 [ 436.578798][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 436.615209][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 436.625794][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 436.647706][ T24] visor 5-1:1.0: device disconnected [ 436.653289][T10291] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1127'. [ 436.695211][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 436.695215][ T5966] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 436.738975][T10294] netlink: 'syz.4.1128': attribute type 10 has an invalid length. [ 436.750964][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1128'. [ 436.762246][T10293] netlink: 'syz.4.1128': attribute type 10 has an invalid length. [ 436.844943][ T5966] usb 4-1: device descriptor read/64, error -71 [ 436.951852][T10301] Invalid logical block size (3) [ 436.971629][T10302] pim6reg: entered allmulticast mode [ 436.982605][T10302] pim6reg: left allmulticast mode [ 437.104180][ T5966] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 437.244184][ T5966] usb 4-1: device descriptor read/64, error -71 [ 437.274586][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 437.355044][ T5966] usb usb4-port1: attempt power cycle [ 437.440022][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 437.458625][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 437.475690][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.491397][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.544414][ T9289] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 437.570748][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.606684][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 437.704294][ T9289] usb 2-1: Using ep0 maxpacket: 16 [ 437.704971][ T5966] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 437.721893][ T9289] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 437.736407][ T5966] usb 4-1: device descriptor read/8, error -71 [ 437.739527][ T9289] usb 2-1: config 0 has no interface number 0 [ 437.753060][T10303] kAFS: unable to lookup cell '.,' [ 437.767327][ T9] usb 5-1: USB disconnect, device number 80 [ 437.775530][ T9289] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 437.819188][ T9289] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 437.842796][ T9289] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.858912][ T9289] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 437.879720][T10312] netlink: 'syz.0.1133': attribute type 5 has an invalid length. [ 437.888782][ T9289] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 437.902739][ T9289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.914263][ T9289] usb 2-1: Product: syz [ 437.918509][ T9289] usb 2-1: Manufacturer: syz [ 437.923333][ T9289] usb 2-1: SerialNumber: syz [ 437.942298][ T9289] usb 2-1: config 0 descriptor?? [ 437.949008][T10306] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 437.976107][ T5966] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 438.014884][ T5966] usb 4-1: device descriptor read/8, error -71 [ 438.124566][ T5966] usb usb4-port1: unable to enumerate USB device [ 438.225888][T10330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1131'. [ 438.235298][T10330] tipc: Invalid UDP bearer configuration [ 438.235380][T10330] tipc: Enabling of bearer rejected, failed to enable media [ 438.488420][T10337] usb usb8: usbfs: process 10337 (syz.0.1138) did not claim interface 0 before use [ 438.499217][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 438.499234][ T30] audit: type=1400 audit(1751786645.840:2068): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10328 comm="syz.0.1138" [ 438.560099][ T5937] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 438.581262][ T9289] qcserial 2-1:0.49: Qualcomm USB modem converter detected [ 438.636820][T10336] macvlan2: entered allmulticast mode [ 438.669460][ T9289] usb 2-1: USB disconnect, device number 86 [ 438.736972][ T5937] usb 3-1: config 0 has no interfaces? [ 438.741760][ T9289] qcserial 2-1:0.49: device disconnected [ 438.749367][ T5937] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 438.800733][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.809258][ T5937] usb 3-1: Product: syz [ 438.819462][ T5937] usb 3-1: Manufacturer: syz [ 438.831480][ T5937] usb 3-1: SerialNumber: syz [ 438.844433][ T5937] usb 3-1: config 0 descriptor?? [ 439.074913][ T9288] usb 3-1: USB disconnect, device number 79 [ 439.681099][T10352] syz.3.1142: attempt to access beyond end of device [ 439.681099][T10352] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 440.384505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.391483][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.472077][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 441.488221][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 441.584165][ T9289] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 441.636733][ T5966] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 441.757768][ T9289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.768540][ T9289] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.781854][ T9289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.801864][ T9289] usb 1-1: config 0 descriptor?? [ 441.814154][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 441.824679][ T9289] pwc: Askey VC010 type 2 USB webcam detected. [ 441.824981][ T5966] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 441.854136][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.872738][ T5966] usb 4-1: Product: syz [ 441.874327][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 441.882963][ T5966] usb 4-1: Manufacturer: syz [ 441.891973][ T5966] usb 4-1: SerialNumber: syz [ 441.908221][ T5966] usb 4-1: config 0 descriptor?? [ 441.928290][ T5966] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 441.944673][ T9288] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 442.041109][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.052480][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 442.067843][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.095390][ T9] usb 5-1: config 0 descriptor?? [ 442.107718][ T9288] usb 2-1: Using ep0 maxpacket: 8 [ 442.132084][ T9288] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 442.150356][ T9288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 442.158763][ T9288] usb 2-1: can't read configurations, error -61 [ 442.214795][ T9289] pwc: recv_control_msg error -32 req 02 val 2b00 [ 442.223981][ T9289] pwc: recv_control_msg error -32 req 02 val 2700 [ 442.233632][ T9289] pwc: recv_control_msg error -32 req 02 val 2c00 [ 442.244859][ T9289] pwc: recv_control_msg error -32 req 04 val 1000 [ 442.252979][ T9289] pwc: recv_control_msg error -32 req 04 val 1300 [ 442.262894][ T9289] pwc: recv_control_msg error -32 req 04 val 1400 [ 442.276116][ T9289] pwc: recv_control_msg error -32 req 02 val 2000 [ 442.304464][ T9288] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 442.340713][ T9] ath6kl: Failed to submit usb control message: -71 [ 442.347821][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 442.355416][ T9] ath6kl: Unable to send get target info: -71 [ 442.362350][ T9289] pwc: recv_control_msg error -32 req 02 val 2100 [ 442.370946][ T9] ath6kl: Failed to init ath6kl core: -71 [ 442.377607][ T9289] pwc: recv_control_msg error -32 req 04 val 1500 [ 442.391571][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 442.401326][ T9289] pwc: recv_control_msg error -32 req 02 val 2500 [ 442.410305][ T9289] pwc: recv_control_msg error -32 req 02 val 2400 [ 442.421867][ T9289] pwc: recv_control_msg error -32 req 02 val 2600 [ 442.430248][ T9289] pwc: recv_control_msg error -32 req 02 val 2900 [ 442.439129][ T9289] pwc: recv_control_msg error -32 req 02 val 2800 [ 442.447061][ T9289] pwc: recv_control_msg error -32 req 04 val 1100 [ 442.454789][ T9289] pwc: recv_control_msg error -32 req 04 val 1200 [ 442.473653][ T9289] pwc: Registered as video103. [ 442.498859][ T9] usb 5-1: USB disconnect, device number 81 [ 442.505216][ T9288] usb 2-1: Using ep0 maxpacket: 8 [ 442.516457][ T9289] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 442.531356][ T9288] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 442.561880][ T9288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 442.591497][ T9288] usb 2-1: can't read configurations, error -61 [ 442.602626][ T9288] usb usb2-port1: attempt power cycle [ 442.782385][ T5966] gspca_topro: reg_w err -71 [ 442.814538][ T5966] gspca_topro: Sensor soi763a [ 442.824719][ T5966] videodev: could not get a free minor [ 442.830253][ T5966] gspca_main: video_register_device err -23 [ 442.848441][ T5966] gspca_topro 4-1:0.0: probe with driver gspca_topro failed with error -23 [ 442.873417][ T5966] usb 4-1: USB disconnect, device number 67 [ 443.017707][T10392] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1153'. [ 443.041242][T10392] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1153'. [ 443.149231][T10399] syz.1.1155 (10399): drop_caches: 1 [ 443.173315][T10400] syzkaller1: entered promiscuous mode [ 443.179438][T10400] syzkaller1: entered allmulticast mode [ 443.232708][T10399] syz.1.1155 (10399): drop_caches: 1 [ 443.304365][ T24] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 443.354436][ T5966] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 443.489565][ T24] usb 5-1: config 0 has no interfaces? [ 443.499110][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 443.508585][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 443.515250][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.523703][ T24] usb 5-1: Product: syz [ 443.529670][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.550311][ T24] usb 5-1: Manufacturer: syz [ 443.558306][ T5966] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.568106][ T24] usb 5-1: SerialNumber: syz [ 443.579146][ T24] usb 5-1: config 0 descriptor?? [ 443.587478][ T5966] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 443.617663][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.636862][ T5966] usb 4-1: Product: syz [ 443.641956][ T5966] usb 4-1: Manufacturer: syz [ 443.647157][ T5966] usb 4-1: SerialNumber: syz [ 443.660025][ T5966] usb 4-1: config 0 descriptor?? [ 443.809470][T10398] program syz.4.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.821277][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.833137][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.994209][ T9288] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 444.154258][ T9288] usb 2-1: Using ep0 maxpacket: 16 [ 444.162940][ T9288] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 444.181654][ T9288] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 444.196087][ T9288] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 444.212864][ T9288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.226727][ T9288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 444.235239][ T9288] usb 2-1: SerialNumber: syz [ 444.244745][T10405] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 444.363447][ T9289] usb 1-1: USB disconnect, device number 63 [ 444.387761][ T9] usb 4-1: USB disconnect, device number 68 [ 444.480294][T10405] openvswitch: netlink: Duplicate or invalid key (type 0). [ 444.492413][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.512720][ T9288] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 444.562008][T10410] netlink: 'syz.3.1158': attribute type 12 has an invalid length. [ 444.575108][ T9288] usb 2-1: USB disconnect, device number 90 [ 444.577630][T10410] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1158'. [ 444.693097][T10414] fuse: Unknown parameter '' [ 444.894309][ T9289] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 444.934344][ T978] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 445.054169][ T9289] usb 1-1: Using ep0 maxpacket: 16 [ 445.064348][ T9289] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 445.073960][ T9289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.082371][ T9289] usb 1-1: Product: syz [ 445.087382][ T9289] usb 1-1: Manufacturer: syz [ 445.092128][ T9289] usb 1-1: SerialNumber: syz [ 445.102635][ T9289] usb 1-1: config 0 descriptor?? [ 445.107934][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 445.119445][ T9289] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 445.128375][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 445.154156][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 445.182456][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.209881][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.243657][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.261343][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.504712][ T9289] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 445.513503][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 445.536512][ T978] usbtmc 4-1:16.0: can't read capabilities [ 445.707756][ T9289] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.719099][T10414] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 445.728325][ T9289] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 445.758629][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 445.774970][ T978] usb 4-1: USB disconnect, device number 69 [ 445.797326][ T9289] usb 2-1: config 0 interface 0 has no altsetting 0 [ 445.861845][ T9289] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 445.880139][ T9289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.907706][ T9289] usb 2-1: config 0 descriptor?? [ 446.021934][ T978] usb 5-1: USB disconnect, device number 82 [ 446.024225][ T5966] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 446.162238][ T30] audit: type=1326 audit(1751786653.520:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f959578e929 code=0x0 [ 446.202472][ T5966] usb 3-1: device descriptor read/64, error -71 [ 446.304225][ T9289] usb 2-1: string descriptor 0 read error: -71 [ 446.359973][ T9289] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input45 [ 446.405700][ T5201] bcm5974 2-1:0.0: could not read from device [ 446.428998][ T5201] bcm5974 2-1:0.0: could not read from device [ 446.444013][ T9289] usb 2-1: USB disconnect, device number 91 [ 446.452009][ T5201] bcm5974 2-1:0.0: could not read from device [ 446.459236][ T5201] bcm5974 2-1:0.0: could not read from device [ 446.489687][ T5850] bcm5974 2-1:0.0: could not read from device [ 446.504139][ T5966] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 446.561248][ T5850] udevd[5850]: Error opening device "/dev/input/event4": No such device [ 446.570668][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 446.580120][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 446.592796][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 446.603214][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 446.646394][ T5966] usb 3-1: device descriptor read/64, error -71 [ 446.764467][ T5966] usb usb3-port1: attempt power cycle [ 446.839846][T10440] bridge0: port 2(team_slave_1) entered blocking state [ 446.868051][T10440] bridge0: port 2(team_slave_1) entered disabled state [ 446.878463][T10440] team_slave_1: entered allmulticast mode [ 446.894245][T10440] team_slave_1: entered promiscuous mode [ 447.106362][ T5966] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 447.143673][ T5966] usb 3-1: device descriptor read/8, error -71 [ 447.394307][ T5966] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 447.430157][ T5966] usb 3-1: device descriptor read/8, error -71 [ 447.445015][ T5937] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 447.494424][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 447.560064][ T5966] usb usb3-port1: unable to enumerate USB device [ 447.594314][ T5937] usb 5-1: device descriptor read/64, error -71 [ 447.664126][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 447.670990][ T24] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 447.679794][ T24] usb 2-1: config 0 has no interface number 0 [ 447.686586][ T24] usb 2-1: config 0 interface 161 has no altsetting 0 [ 447.709132][ T24] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 447.722275][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.740953][ T24] usb 2-1: Product: syz [ 447.750845][ T24] usb 2-1: Manufacturer: syz [ 447.756906][ T24] usb 2-1: SerialNumber: syz [ 447.775430][T10456] PKCS7: Unknown OID: [5] (bad) [ 447.780471][T10456] PKCS7: Only support pkcs7_signedData type [ 447.805540][ T24] usb 2-1: config 0 descriptor?? [ 447.814012][ T24] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 447.864903][ T5937] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 447.886961][ T24] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 448.014192][ T5937] usb 5-1: device descriptor read/64, error -71 [ 448.066350][ T24] usb 2-1: USB disconnect, device number 92 [ 448.144769][ T5937] usb usb5-port1: attempt power cycle [ 448.585329][ T9289] usb 1-1: USB disconnect, device number 64 [ 448.634263][ T5937] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 448.656322][ T5937] usb 5-1: device descriptor read/8, error -71 [ 448.860164][T10465] netlink: 'syz.1.1173': attribute type 12 has an invalid length. [ 448.900440][T10465] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1173'. [ 448.910609][ T5937] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 448.939248][ T5937] usb 5-1: device descriptor read/8, error -71 [ 449.065565][ T5937] usb usb5-port1: unable to enumerate USB device [ 449.077594][ T9289] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 449.134233][ T978] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 449.266209][ T9289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.294210][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 449.303080][ T978] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 449.311358][ T9289] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 449.321030][ T978] usb 2-1: config index 0 descriptor too short (expected 21768, got 36) [ 449.339751][ T9289] usb 1-1: config 7 has no interface number 0 [ 449.354224][ T978] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 449.391107][ T978] usb 2-1: can't read configurations, error -22 [ 449.409906][ T9289] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 449.420378][ T9289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.428676][ T9289] usb 1-1: Product: 㯑 [ 449.554407][ T978] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 449.644916][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.660510][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.714387][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 449.730742][ T978] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 449.748342][T10462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.753034][ T978] usb 2-1: config index 0 descriptor too short (expected 21768, got 36) [ 449.766116][ T978] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 449.786091][ T9289] usb 1-1: USB disconnect, device number 65 [ 449.795813][ T978] usb 2-1: can't read configurations, error -22 [ 449.809047][ T978] usb usb2-port1: attempt power cycle [ 450.157301][ T978] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 450.195131][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 450.201941][ T978] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 450.229899][ T978] usb 2-1: config index 0 descriptor too short (expected 21768, got 36) [ 450.245335][ T978] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 450.274337][ T978] usb 2-1: can't read configurations, error -22 [ 450.430840][ T978] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 450.434187][ T30] audit: type=1326 audit(1751786657.790:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 450.498269][ T30] audit: type=1326 audit(1751786657.790:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 450.521074][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 450.525375][ T30] audit: type=1326 audit(1751786657.790:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 450.530040][ T978] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 450.588427][ T978] usb 2-1: config index 0 descriptor too short (expected 21768, got 36) [ 450.600058][ T978] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 450.610124][ T978] usb 2-1: can't read configurations, error -22 [ 450.624170][ T5937] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 450.635135][ T978] usb usb2-port1: unable to enumerate USB device [ 450.732091][ T30] audit: type=1326 audit(1751786657.790:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 450.775357][ T30] audit: type=1326 audit(1751786657.790:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 450.820619][ T30] audit: type=1326 audit(1751786657.790:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 451.067121][ T30] audit: type=1326 audit(1751786657.830:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.103222][ T30] audit: type=1326 audit(1751786657.830:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.105501][ T5937] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 451.164199][ T5966] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 451.203389][ T30] audit: type=1326 audit(1751786657.830:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.254129][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.262367][ T5937] usb 5-1: Product: syz [ 451.267688][ T5937] usb 5-1: Manufacturer: syz [ 451.272340][ T5937] usb 5-1: SerialNumber: syz [ 451.277749][ T30] audit: type=1326 audit(1751786657.830:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.366784][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 451.372819][ T5937] usb 5-1: config 0 descriptor?? [ 451.417119][ T5966] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 451.434156][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.484172][ T30] audit: type=1326 audit(1751786657.830:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.553239][ T5966] usb 4-1: Product: syz [ 451.567193][ T5966] usb 4-1: Manufacturer: syz [ 451.584184][ T5966] usb 4-1: SerialNumber: syz [ 451.616060][ T30] audit: type=1326 audit(1751786657.830:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.639038][ T5937] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 451.649917][ T5966] usb 4-1: config 0 descriptor?? [ 451.756906][ T5966] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 451.797708][ T30] audit: type=1326 audit(1751786657.830:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.826927][ T30] audit: type=1326 audit(1751786657.830:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.877669][ T30] audit: type=1326 audit(1751786657.830:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.901214][ T30] audit: type=1326 audit(1751786657.830:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fac92ab19 code=0x7ffc0000 [ 451.924087][ T30] audit: type=1326 audit(1751786657.830:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 451.954454][ T30] audit: type=1326 audit(1751786657.830:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac98e929 code=0x7ffc0000 [ 452.055716][ T5937] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 452.266104][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1178'. [ 452.331859][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 452.662008][ T5937] usb 5-1: USB disconnect, device number 87 [ 452.806921][T10522] pim6reg: entered allmulticast mode [ 452.867987][T10524] pim6reg: left allmulticast mode [ 453.209418][T10446] syz.3.1166 (10446) used greatest stack depth: 19032 bytes left [ 453.342367][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 453.423119][T10529] bridge0: port 3(vlan2) entered blocking state [ 453.429621][T10529] bridge0: port 3(vlan2) entered disabled state [ 453.436863][T10529] vlan2: entered allmulticast mode [ 453.442116][T10529] bridge0: entered allmulticast mode [ 453.468738][T10529] vlan2: left allmulticast mode [ 453.508518][T10529] bridge0: left allmulticast mode [ 454.964332][ T9289] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 455.124800][ T9289] usb 1-1: Using ep0 maxpacket: 32 [ 455.163219][T10533] binder: 10532:10533 ioctl c00c6211 ffffffffffffffff returned -14 [ 455.449298][ T9289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 455.470282][ T9289] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 455.500008][ T9289] usb 1-1: can't read configurations, error -71 [ 455.864217][ T5937] usb 4-1: USB disconnect, device number 70 [ 457.824444][T10575] program syz.0.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.834482][T10575] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 459.521357][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 459.701735][T10588] bridge0: port 3(vlan2) entered blocking state [ 459.708294][T10588] bridge0: port 3(vlan2) entered disabled state [ 459.715644][T10588] vlan2: entered allmulticast mode [ 459.720892][T10588] bridge0: entered allmulticast mode [ 459.731384][T10588] vlan2: left allmulticast mode [ 459.760902][T10588] bridge0: left allmulticast mode [ 459.774279][ T9289] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 459.975545][ T9289] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 460.016877][ T9289] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 460.054158][ T9289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.085607][ T9289] usb 3-1: Product: syz [ 460.089856][ T9289] usb 3-1: Manufacturer: syz [ 460.105417][ T9289] usb 3-1: SerialNumber: syz [ 460.353388][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.379926][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 460.387819][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.412462][T10599] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1202'. [ 460.420018][ T9289] usb 3-1: selecting invalid altsetting 1 [ 460.473429][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 460.584196][ T5966] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 460.628993][T10589] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 460.638790][ T9289] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 460.652397][ T9289] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 460.694474][ T9288] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 460.754552][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 460.765453][ T5966] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 460.778768][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.812819][ T5966] usb 4-1: Product: syz [ 460.826027][ T5966] usb 4-1: Manufacturer: syz [ 460.835832][ T5966] usb 4-1: SerialNumber: syz [ 460.854206][ T9288] usb 2-1: Using ep0 maxpacket: 16 [ 460.855355][ T5966] usb 4-1: config 0 descriptor?? [ 460.878022][ T9288] usb 2-1: config 3 has an invalid interface number: 156 but max is 0 [ 460.878460][ T5966] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 460.906135][ T9288] usb 2-1: config 3 has no interface number 0 [ 460.926978][ T9288] usb 2-1: config 3 interface 156 has no altsetting 0 [ 460.965732][ T9288] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 460.976158][ T9288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.028644][ T9288] usb 2-1: Product: syz [ 461.041633][ T9288] usb 2-1: Manufacturer: syz [ 461.068295][ T9288] usb 2-1: SerialNumber: syz [ 461.317892][ T9288] gl620a 2-1:3.156: probe with driver gl620a failed with error -22 [ 461.346894][ T9288] usb 2-1: USB disconnect, device number 97 [ 461.472651][ T5966] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 461.634133][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 461.657073][ T5966] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 461.685914][ T5966] usb 1-1: config 0 has no interface number 0 [ 461.727639][ T5966] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 461.736921][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.745153][ T5966] usb 1-1: Product: syz [ 461.749431][ T5966] usb 1-1: Manufacturer: syz [ 461.754344][ T5966] usb 1-1: SerialNumber: syz [ 461.784900][ T5966] usb 1-1: config 0 descriptor?? [ 462.469021][ T5966] usbserial_generic 1-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 462.503512][ T5966] usbserial_generic 1-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 462.544145][ T5966] usbserial_generic 1-1:0.175: device has no bulk endpoints [ 462.580814][ T9288] usb 3-1: USB disconnect, device number 85 [ 462.654667][ T5966] safe_serial 1-1:0.175: safe_serial converter detected [ 462.673432][ T5966] safe_serial 1-1:0.175: probe with driver safe_serial failed with error -22 [ 462.763206][ T5966] usb 1-1: USB disconnect, device number 68 [ 463.059120][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 463.443536][T10638] bridge0: port 3(vlan2) entered blocking state [ 463.454898][T10638] bridge0: port 3(vlan2) entered disabled state [ 463.463067][T10638] vlan2: entered allmulticast mode [ 463.481796][T10638] bridge0: entered allmulticast mode [ 463.533640][T10638] vlan2: left allmulticast mode [ 463.558047][T10638] bridge0: left allmulticast mode [ 463.758202][ T9288] usb 4-1: USB disconnect, device number 71 [ 464.164470][ T978] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 464.334162][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 464.341149][ T978] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 464.354212][ T978] usb 5-1: config 0 has no interface number 0 [ 464.365829][ T978] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.431965][ T978] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 464.441491][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.526617][ T978] usb 5-1: Product: syz [ 464.552866][ T978] usb 5-1: Manufacturer: syz [ 464.579735][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 464.594338][T10667] usb usb8: usbfs: process 10667 (syz.3.1216) did not claim interface 0 before use [ 464.636661][ T978] usb 5-1: SerialNumber: syz [ 464.721924][ T978] usb 5-1: config 0 descriptor?? [ 466.792847][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 466.792867][ T30] audit: type=1400 audit(1751786674.150:2143): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10681 comm="syz.0.1220" [ 466.818909][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 466.872370][T10691] usb usb8: usbfs: process 10691 (syz.0.1220) did not claim interface 0 before use [ 467.049291][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 467.068908][T10699] bridge0: port 3(vlan2) entered blocking state [ 467.077271][T10699] bridge0: port 3(vlan2) entered disabled state [ 467.084594][T10699] vlan2: entered allmulticast mode [ 467.089968][T10699] bridge0: entered allmulticast mode [ 467.095768][ T9288] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 467.108355][T10699] vlan2: left allmulticast mode [ 467.113596][T10699] bridge0: left allmulticast mode [ 467.257043][ T9288] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 52439, setting to 64 [ 467.276510][ T9288] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.292520][ T9288] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 467.325998][ T9288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.357755][ T9288] usb 4-1: config 0 descriptor?? [ 467.375627][T10693] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.596236][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.674580][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.114745][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.268377][ T978] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 468.268817][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.403962][ T9288] konepure 0003:1E7D:2DBE.0025: unknown main item tag 0x0 [ 468.411860][ T9288] konepure 0003:1E7D:2DBE.0025: unknown main item tag 0x0 [ 468.425549][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.488012][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 468.502824][ T9288] konepure 0003:1E7D:2DBE.0025: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 468.567135][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.603763][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.653000][ T978] usb 3-1: Product: syz [ 468.673313][ T978] usb 3-1: Manufacturer: syz [ 468.674104][ T5966] usb 5-1: USB disconnect, device number 88 [ 468.696718][ T9288] usb 4-1: USB disconnect, device number 72 [ 468.744192][ T978] usb 3-1: SerialNumber: syz [ 468.800455][ T978] usb 3-1: config 0 descriptor?? [ 468.910199][T10710] fido_id[10710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 468.998789][T10719] PKCS7: Unknown OID: [5] (bad) [ 469.003919][T10719] PKCS7: Only support pkcs7_signedData type [ 469.333593][T10720] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 469.405481][T10720] bond2: entered promiscuous mode [ 469.410680][T10720] bond2: entered allmulticast mode [ 469.417141][T10720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.114187][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 471.494180][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 471.606009][ T43] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 471.631620][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 471.694105][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.702189][ T43] usb 4-1: Product: syz [ 471.719790][T10748] bridge0: port 3(vlan2) entered blocking state [ 471.769164][T10748] bridge0: port 3(vlan2) entered disabled state [ 471.808759][T10748] vlan2: entered allmulticast mode [ 471.814354][ T43] usb 4-1: Manufacturer: syz [ 471.827278][ T43] usb 4-1: SerialNumber: syz [ 471.880570][ T43] usb 4-1: config 0 descriptor?? [ 471.906075][T10748] bridge0: entered allmulticast mode [ 471.911886][ T43] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 472.013015][T10748] vlan2: left allmulticast mode [ 472.021875][T10748] bridge0: left allmulticast mode [ 472.814723][T10760] PKCS7: Unknown OID: [5] (bad) [ 472.819756][T10760] PKCS7: Only support pkcs7_signedData type [ 472.967106][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 472.977822][ T30] audit: type=1400 audit(1751786680.330:2144): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10758 comm="syz.0.1238" [ 473.033110][T10759] usb usb8: usbfs: process 10759 (syz.0.1238) did not claim interface 0 before use [ 473.824319][ T9288] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 473.866747][T10772] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 474.114291][ T9288] usb 5-1: Using ep0 maxpacket: 8 [ 474.164679][ T9288] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 474.322401][ T9288] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 474.354724][ T9288] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.459951][ T9288] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.484344][ T9288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.534235][ T9288] usb 5-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 474.635040][ T9289] usb 4-1: USB disconnect, device number 73 [ 474.791689][ T9288] usb 5-1: 0:2 : does not exist [ 474.858741][ T9288] usb 5-1: USB disconnect, device number 89 [ 475.185612][ T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 475.374197][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 475.400351][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 475.494191][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.564122][ T43] usb 4-1: Product: syz [ 475.568458][ T43] usb 4-1: Manufacturer: syz [ 475.573096][ T43] usb 4-1: SerialNumber: syz [ 475.635016][ T43] usb 4-1: config 0 descriptor?? [ 475.663205][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 475.846549][ T43] gspca_sn9c2028: read1 error -32 [ 475.866941][T10783] netlink: 'syz.1.1243': attribute type 5 has an invalid length. [ 475.946070][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 475.955524][T10793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1245'. [ 476.027376][ T9289] usb 3-1: USB disconnect, device number 86 [ 476.224360][ T5966] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 476.259510][ T43] usb 4-1: USB disconnect, device number 74 [ 476.404335][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 476.416197][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.448244][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 476.527471][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.578373][ T5966] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 476.635827][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.700379][ T5966] usb 1-1: config 0 descriptor?? [ 476.711255][T10793] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 476.730513][ T5966] hub 1-1:0.0: USB hub found [ 476.864263][ T43] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 476.932294][ T5966] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 477.046427][ T43] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.064293][ T9288] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 477.096139][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 477.141199][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 477.151414][ T5966] usbhid 1-1:0.0: can't add hid device: -71 [ 477.184286][ T5966] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 477.192214][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.226074][ T5966] usb 1-1: USB disconnect, device number 69 [ 477.234201][ T9288] usb 3-1: Using ep0 maxpacket: 8 [ 477.244778][ T43] usb 5-1: config 0 descriptor?? [ 477.277262][ T9288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 477.333006][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.380056][ T9288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.427869][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.490662][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.521016][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 477.540698][ T9288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 477.569208][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.570112][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.645129][ T9288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.657291][ T43] usb 5-1: USB disconnect, device number 90 [ 477.703429][T10812] binder: BINDER_SET_CONTEXT_MGR already set [ 477.710288][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.711120][T10813] binder_alloc: 10811: binder_alloc_buf, no vma [ 477.734950][T10812] binder: 10811:10812 ioctl 4018620d 200000000040 returned -16 [ 477.789774][ T5966] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 477.830969][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.916762][ T9288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 477.941013][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 477.965579][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 477.975622][ T5966] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 477.994285][ T9288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.995460][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.064683][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.077301][ T9288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.092861][ T9288] usb 3-1: string descriptor 0 read error: -22 [ 478.101441][ T9288] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 478.126194][ T9288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.255452][ T9288] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 478.288729][ T5966] usb 2-1: Product: syz [ 478.300234][ T5966] usb 2-1: Manufacturer: syz [ 478.314179][ T5966] usb 2-1: SerialNumber: syz [ 478.350754][ T5966] usb 2-1: config 0 descriptor?? [ 478.383176][ T5966] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 478.929217][T10830] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 479.342863][ T5966] gspca_sonixj: reg_r err -32 [ 479.352302][ T5966] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 479.535943][ T9288] usb 2-1: USB disconnect, device number 98 [ 479.914588][ T9288] usb 3-1: USB disconnect, device number 87 [ 480.344679][T10860] PKCS7: Unknown OID: [5] (bad) [ 480.349724][T10860] PKCS7: Only support pkcs7_signedData type [ 480.707384][T10837] syz.3.1257 (10837): drop_caches: 1 [ 480.724142][ T9288] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 480.857495][ T9288] usb 2-1: device descriptor read/64, error -71 [ 480.979088][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 481.114270][ T9288] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 481.205587][ T43] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 481.234163][ T5966] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 481.254328][ T9288] usb 2-1: device descriptor read/64, error -71 [ 481.334146][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 481.374620][ T9288] usb usb2-port1: attempt power cycle [ 481.396922][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 481.414157][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 481.421532][ T43] usb 5-1: config 255 has an invalid interface number: 225 but max is 2 [ 481.440870][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.452459][ T43] usb 5-1: config 255 has an invalid interface number: 78 but max is 2 [ 481.467434][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.478631][ T43] usb 5-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 481.492269][ T43] usb 5-1: config 255 has an invalid interface number: 135 but max is 2 [ 481.501388][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.514657][ T43] usb 5-1: config 255 has no interface number 0 [ 481.521119][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.529591][ T24] usb 3-1: config 0 has no interface number 0 [ 481.535829][ T5966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.545606][ T43] usb 5-1: config 255 has no interface number 1 [ 481.551896][ T43] usb 5-1: config 255 has no interface number 2 [ 481.558927][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.569968][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.582967][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.592884][ T43] usb 5-1: config 255 interface 78 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 481.602962][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.615910][ T43] usb 5-1: config 255 interface 78 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 481.629359][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 481.638577][ T43] usb 5-1: too many endpoints for config 255 interface 135 altsetting 15: 37, using maximum allowed: 30 [ 481.650010][ T5966] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.659869][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.668016][ T43] usb 5-1: config 255 interface 135 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 481.679079][ T5966] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.690374][ T24] usb 3-1: config 0 descriptor?? [ 481.695488][ T43] usb 5-1: config 255 interface 135 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 481.706953][ T5966] usb 4-1: Manufacturer: syz [ 481.718086][ T5966] usb 4-1: config 0 descriptor?? [ 481.723586][ T43] usb 5-1: config 255 interface 135 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 37 [ 481.734363][ T9288] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 481.737242][ T43] usb 5-1: config 255 interface 225 has no altsetting 0 [ 481.745437][ T9289] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 481.751825][ T43] usb 5-1: config 255 interface 78 has no altsetting 0 [ 481.770305][ T43] usb 5-1: config 255 interface 135 has no altsetting 0 [ 481.779570][ T43] usb 5-1: New USB device found, idVendor=0403, idProduct=f3c2, bcdDevice= 9.29 [ 481.788772][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.789033][ T9288] usb 2-1: device descriptor read/8, error -71 [ 481.796871][ T43] usb 5-1: Product: syz [ 481.796894][ T43] usb 5-1: Manufacturer: syz [ 481.796911][ T43] usb 5-1: SerialNumber: syz [ 481.919198][ T9289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 481.929199][ T9289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 481.941961][ T9289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 481.954699][ T9289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 481.968766][ T9289] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 481.978414][ T9289] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 481.986707][ T9289] usb 1-1: Manufacturer: syz [ 482.005185][ T9289] usb 1-1: config 0 descriptor?? [ 482.011099][T10878] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 482.026118][ T9289] smsusb:smsusb_probe: board id=9, interface number 0 [ 482.040101][ T43] ftdi_sio 5-1:255.225: FTDI USB Serial Device converter detected [ 482.051975][ T43] ftdi_sio ttyUSB0: unknown device type: 0x929 [ 482.054854][ T9289] smsusb:siano_media_device_register: media controller created [ 482.072789][ T9289] ------------[ cut here ]------------ [ 482.078991][ T9289] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 482.083123][ T43] ftdi_sio 5-1:255.78: FTDI USB Serial Device converter detected [ 482.086946][ T9288] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 482.102352][ T9289] WARNING: CPU: 0 PID: 9289 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 482.110273][ T43] ftdi_sio ttyUSB1: unknown device type: 0x929 [ 482.112321][ T9289] Modules linked in: [ 482.121135][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.122679][ T9289] CPU: 0 UID: 0 PID: 9289 Comm: kworker/0:9 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 482.143585][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.149059][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.153769][ T9289] Workqueue: usb_hub_wq hub_event [ 482.166721][ T9289] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 482.173477][ T9289] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 39 34 8c 4c 89 f6 4c 89 fa e8 ff bf 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2e de 8e e8 c5 [ 482.193307][ T43] ftdi_sio 5-1:255.135: FTDI USB Serial Device converter detected [ 482.196815][ T43] ftdi_sio ttyUSB2: unknown device type: 0x929 [ 482.201975][ T9289] RSP: 0018:ffffc90003e9ead0 EFLAGS: 00010246 [ 482.202003][ T9289] RAX: a22697ccf6894400 RBX: ffff8880780d3a00 RCX: 0000000000100000 [ 482.222814][ T9289] RDX: ffffc900191e3000 RSI: 0000000000044e72 RDI: 0000000000044e73 [ 482.230924][ T9289] RBP: 0000000000000000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e [ 482.239063][ T9289] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8c34376c [ 482.247282][ T9289] R13: dffffc0000000000 R14: ffffffff8c34a260 R15: ffff888146b58d60 [ 482.255387][ T9289] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 482.264480][ T9289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.267301][ T43] usb 5-1: USB disconnect, device number 91 [ 482.271963][ T9289] CR2: 00007fcef90ca548 CR3: 00000000341a2000 CR4: 00000000003526f0 [ 482.286214][ T9289] Call Trace: [ 482.289530][ T9289] [ 482.292521][ T9289] smsusb_start_streaming+0x22/0x340 [ 482.297927][ T9289] smsusb_probe+0x18f6/0x2060 [ 482.302696][ T9289] ? __pfx_smsusb_probe+0x10/0x10 [ 482.307895][ T9289] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 482.313510][ T9289] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 482.319615][ T9289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.326257][ T9289] ? __pm_runtime_set_status+0x785/0xa50 [ 482.331964][ T9289] usb_probe_interface+0x641/0xbc0 [ 482.337191][ T9289] ? __pfx_usb_probe_interface+0x10/0x10 [ 482.342888][ T9289] really_probe+0x26a/0x9a0 [ 482.347545][ T9289] __driver_probe_device+0x18c/0x2f0 [ 482.352905][ T9289] driver_probe_device+0x4f/0x430 [ 482.358297][ T9289] __device_attach_driver+0x2ce/0x530 [ 482.363750][ T9289] bus_for_each_drv+0x251/0x2e0 [ 482.368743][ T9289] ? __pfx___device_attach_driver+0x10/0x10 [ 482.372221][T10878] vivid-000: ================= START STATUS ================= [ 482.375522][ T9289] ? __pfx_bus_for_each_drv+0x10/0x10 [ 482.383676][T10878] vivid-000: Test Pattern: [ 482.389125][ T9289] __device_attach+0x2b8/0x400 [ 482.393895][T10878] 75% Colorbar [ 482.398550][ T9289] ? __pfx___device_attach+0x10/0x10 [ 482.398595][ T9289] ? do_raw_spin_unlock+0x122/0x240 [ 482.398635][ T9289] bus_probe_device+0x185/0x260 [ 482.398664][ T9289] device_add+0x7b6/0xb50 [ 482.398699][ T9289] usb_set_configuration+0x1a87/0x20e0 [ 482.427756][ T9289] usb_generic_driver_probe+0x8d/0x150 [ 482.433275][ T9289] usb_probe_device+0x1c4/0x390 [ 482.438256][ T9289] ? __pfx_usb_probe_device+0x10/0x10 [ 482.443799][ T9289] really_probe+0x26a/0x9a0 [ 482.448448][ T9289] __driver_probe_device+0x18c/0x2f0 [ 482.451188][T10878] [ 482.453774][ T9289] driver_probe_device+0x4f/0x430 [ 482.459348][ T43] ftdi_sio 5-1:255.225: device disconnected [ 482.461208][ T9289] __device_attach_driver+0x2ce/0x530 [ 482.461255][ T9289] bus_for_each_drv+0x251/0x2e0 [ 482.478504][ T9289] ? __pfx___device_attach_driver+0x10/0x10 [ 482.479260][ T5966] rc_core: IR keymap rc-hauppauge not found [ 482.485433][ T9289] ? __pfx_bus_for_each_drv+0x10/0x10 [ 482.496337][ T9289] __device_attach+0x2b8/0x400 [ 482.501165][ T9289] ? __pfx___device_attach+0x10/0x10 [ 482.506617][ T9289] ? do_raw_spin_unlock+0x122/0x240 [ 482.511892][ T9289] bus_probe_device+0x185/0x260 [ 482.516877][ T9289] device_add+0x7b6/0xb50 [ 482.521277][ T9289] usb_new_device+0xa39/0x16c0 [ 482.525764][ T5966] Registered IR keymap rc-empty [ 482.526163][ T9289] ? __pfx_usb_new_device+0x10/0x10 [ 482.536291][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.541543][ T9289] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.546884][ T9289] hub_event+0x2941/0x4a00 [ 482.550266][ T5966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 482.551393][ T9289] ? __pfx_hub_event+0x10/0x10 [ 482.563377][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 482.566464][ T43] ftdi_sio 5-1:255.78: device disconnected [ 482.569655][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.581020][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 482.587568][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 482.593360][ T9289] process_scheduled_works+0xade/0x17b0 [ 482.599087][ T9289] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.604831][ T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0026/input/input47 [ 482.605208][ T9289] worker_thread+0x8a0/0xda0 [ 482.621285][ T9289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.627764][ T9289] ? __kthread_parkme+0x7b/0x200 [ 482.632771][ T9289] kthread+0x70e/0x8a0 [ 482.636965][ T9289] ? __pfx_worker_thread+0x10/0x10 [ 482.642144][ T9289] ? __pfx_kthread+0x10/0x10 [ 482.646015][ T5966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 482.647242][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.659310][ T9289] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.664618][ T9289] ? __pfx_kthread+0x10/0x10 [ 482.669295][ T9289] ret_from_fork+0x3fc/0x770 [ 482.672889][ T43] ftdi_sio 5-1:255.135: device disconnected [ 482.673918][ T9289] ? __pfx_ret_from_fork+0x10/0x10 [ 482.681029][T10878] vivid-000: Fill Percentage of Frame: [ 482.685884][ T9289] ? __switch_to_asm+0x39/0x70 [ 482.689185][ T5966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 482.692118][ T9289] ? __switch_to_asm+0x33/0x70 [ 482.692153][ T9289] ? __pfx_kthread+0x10/0x10 [ 482.706532][T10878] 100 [ 482.708608][ T9289] ret_from_fork_asm+0x1a/0x30 [ 482.725710][ T9289] [ 482.728802][ T9289] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 482.736126][ T9289] CPU: 0 UID: 0 PID: 9289 Comm: kworker/0:9 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 482.748365][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.758476][ T9289] Workqueue: usb_hub_wq hub_event [ 482.763574][ T9289] Call Trace: [ 482.766900][ T9289] [ 482.769872][ T9289] dump_stack_lvl+0x99/0x250 [ 482.774519][ T9289] ? __asan_memcpy+0x40/0x70 [ 482.779169][ T9289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.784422][ T9289] ? __pfx__printk+0x10/0x10 [ 482.789089][ T9289] panic+0x2db/0x790 [ 482.793063][ T9289] ? __pfx_panic+0x10/0x10 [ 482.797550][ T9289] ? ret_from_fork_asm+0x1a/0x30 [ 482.802560][ T9289] __warn+0x31b/0x4b0 [ 482.806640][ T9289] ? usb_submit_urb+0xc82/0x1890 [ 482.811632][ T9289] ? usb_submit_urb+0xc82/0x1890 [ 482.816617][ T9289] report_bug+0x2be/0x4f0 [ 482.821093][ T9289] ? usb_submit_urb+0xc82/0x1890 [ 482.826082][ T9289] ? usb_submit_urb+0xc82/0x1890 [ 482.831077][ T9289] ? usb_submit_urb+0xc84/0x1890 [ 482.836061][ T9289] handle_bug+0x84/0x160 [ 482.840359][ T9289] exc_invalid_op+0x1a/0x50 [ 482.844942][ T9289] asm_exc_invalid_op+0x1a/0x20 [ 482.849858][ T9289] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 482.855457][ T9289] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 39 34 8c 4c 89 f6 4c 89 fa e8 ff bf 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2e de 8e e8 c5 [ 482.875114][ T9289] RSP: 0018:ffffc90003e9ead0 EFLAGS: 00010246 [ 482.881234][ T9289] RAX: a22697ccf6894400 RBX: ffff8880780d3a00 RCX: 0000000000100000 [ 482.889262][ T9289] RDX: ffffc900191e3000 RSI: 0000000000044e72 RDI: 0000000000044e73 [ 482.897282][ T9289] RBP: 0000000000000000 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e [ 482.905298][ T9289] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8c34376c [ 482.913297][ T9289] R13: dffffc0000000000 R14: ffffffff8c34a260 R15: ffff888146b58d60 [ 482.921316][ T9289] smsusb_start_streaming+0x22/0x340 [ 482.926637][ T9289] smsusb_probe+0x18f6/0x2060 [ 482.931355][ T9289] ? __pfx_smsusb_probe+0x10/0x10 [ 482.936434][ T9289] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 482.942029][ T9289] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 482.948007][ T9289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.954370][ T9289] ? __pm_runtime_set_status+0x785/0xa50 [ 482.960114][ T9289] usb_probe_interface+0x641/0xbc0 [ 482.965267][ T9289] ? __pfx_usb_probe_interface+0x10/0x10 [ 482.970926][ T9289] really_probe+0x26a/0x9a0 [ 482.975462][ T9289] __driver_probe_device+0x18c/0x2f0 [ 482.980770][ T9289] driver_probe_device+0x4f/0x430 [ 482.985818][ T9289] __device_attach_driver+0x2ce/0x530 [ 482.991220][ T9289] bus_for_each_drv+0x251/0x2e0 [ 482.996094][ T9289] ? __pfx___device_attach_driver+0x10/0x10 [ 483.002051][ T9289] ? __pfx_bus_for_each_drv+0x10/0x10 [ 483.007467][ T9289] __device_attach+0x2b8/0x400 [ 483.012285][ T9289] ? __pfx___device_attach+0x10/0x10 [ 483.017634][ T9289] ? do_raw_spin_unlock+0x122/0x240 [ 483.022869][ T9289] bus_probe_device+0x185/0x260 [ 483.027762][ T9289] device_add+0x7b6/0xb50 [ 483.032118][ T9289] usb_set_configuration+0x1a87/0x20e0 [ 483.037628][ T9289] usb_generic_driver_probe+0x8d/0x150 [ 483.043101][ T9289] usb_probe_device+0x1c4/0x390 [ 483.047980][ T9289] ? __pfx_usb_probe_device+0x10/0x10 [ 483.053373][ T9289] really_probe+0x26a/0x9a0 [ 483.057906][ T9289] __driver_probe_device+0x18c/0x2f0 [ 483.063228][ T9289] driver_probe_device+0x4f/0x430 [ 483.068282][ T9289] __device_attach_driver+0x2ce/0x530 [ 483.073685][ T9289] bus_for_each_drv+0x251/0x2e0 [ 483.078570][ T9289] ? __pfx___device_attach_driver+0x10/0x10 [ 483.084487][ T9289] ? __pfx_bus_for_each_drv+0x10/0x10 [ 483.089897][ T9289] __device_attach+0x2b8/0x400 [ 483.094708][ T9289] ? __pfx___device_attach+0x10/0x10 [ 483.100024][ T9289] ? do_raw_spin_unlock+0x122/0x240 [ 483.105273][ T9289] bus_probe_device+0x185/0x260 [ 483.110155][ T9289] device_add+0x7b6/0xb50 [ 483.114542][ T9289] usb_new_device+0xa39/0x16c0 [ 483.119332][ T9289] ? __pfx_usb_new_device+0x10/0x10 [ 483.124563][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.129785][ T9289] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.134999][ T9289] hub_event+0x2941/0x4a00 [ 483.139472][ T9289] ? __pfx_hub_event+0x10/0x10 [ 483.144249][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 483.149992][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.155209][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 483.160944][ T9289] ? process_scheduled_works+0x9ef/0x17b0 [ 483.166701][ T9289] process_scheduled_works+0xade/0x17b0 [ 483.172290][ T9289] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.178298][ T9289] worker_thread+0x8a0/0xda0 [ 483.182906][ T9289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 483.189264][ T9289] ? __kthread_parkme+0x7b/0x200 [ 483.194243][ T9289] kthread+0x70e/0x8a0 [ 483.198353][ T9289] ? __pfx_worker_thread+0x10/0x10 [ 483.203480][ T9289] ? __pfx_kthread+0x10/0x10 [ 483.208094][ T9289] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.213315][ T9289] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.218520][ T9289] ? __pfx_kthread+0x10/0x10 [ 483.223132][ T9289] ret_from_fork+0x3fc/0x770 [ 483.227741][ T9289] ? __pfx_ret_from_fork+0x10/0x10 [ 483.232870][ T9289] ? __switch_to_asm+0x39/0x70 [ 483.237660][ T9289] ? __switch_to_asm+0x33/0x70 [ 483.242447][ T9289] ? __pfx_kthread+0x10/0x10 [ 483.247059][ T9289] ret_from_fork_asm+0x1a/0x30 [ 483.251858][ T9289] [ 483.255220][ T9289] Kernel Offset: disabled [ 483.259610][ T9289] Rebooting in 86400 seconds..