last executing test programs: 17.137397991s ago: executing program 3 (id=708): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 16.884650202s ago: executing program 2 (id=710): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000002100", 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) 13.902140516s ago: executing program 4 (id=713): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_delete(0x0) unshare(0x22020600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 13.510574532s ago: executing program 3 (id=714): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 13.366300083s ago: executing program 2 (id=716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 11.906677147s ago: executing program 1 (id=717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x0, [{@remote}, {@multicast2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) ppoll(&(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 10.476065753s ago: executing program 3 (id=718): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.466976254s ago: executing program 2 (id=719): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f00000003c0)={0x40, 0xf, 0x2, 'pd'}, 0x0, 0x0, 0x0, 0x0}) 10.07132603s ago: executing program 1 (id=720): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) getresuid(&(0x7f0000000ec0), 0x0, &(0x7f0000000f40)) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) 10.014199453s ago: executing program 4 (id=721): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600090400020103"], 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 8.825200489s ago: executing program 1 (id=724): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071041003dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000800)={0xc, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 7.84505472s ago: executing program 0 (id=726): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xbb8) 7.835210424s ago: executing program 4 (id=727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.896905454s ago: executing program 2 (id=728): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0xc020) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.346971003s ago: executing program 0 (id=729): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 5.18484894s ago: executing program 3 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.089009063s ago: executing program 1 (id=731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 3.61412007s ago: executing program 0 (id=732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b203c0a8b089b3f32356c030890e0879b0a45c6e70a9b334a959b6696048ed30af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8042001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771a0000119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) 3.452836211s ago: executing program 2 (id=733): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_delete(0x0) unshare(0x22020600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 3.00200656s ago: executing program 4 (id=734): socket(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$usbmon(&(0x7f0000000040), 0x5b, 0x2340) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x6d4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.674834292s ago: executing program 4 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0x20ec}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x1, 0xc7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r2, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x800, 0x50, 0x2, 0xe}) 2.163455684s ago: executing program 3 (id=736): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) timer_delete(r7) timer_getoverrun(r7) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 1.694477907s ago: executing program 1 (id=737): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b80)=@nat={'nat\x00', 0x62, 0x5, 0x4b8, 0x1f4, 0x298, 0xffffffff, 0x298, 0x1f4, 0x424, 0x424, 0xffffffff, 0x424, 0x424, 0x5, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x1f4, 0x0, {0x22e}, [@common=@inet=@hashlimit2={{0x150}, {'virt_wifi0\x00', {0x7fffdfffffffffff, 0x80000000001000, 0x3, 0x100004, 0x82, 0x4000005, 0x3, 0x0, 0x18}, {0x6}}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @gre_key=0x7, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port=0x5, @port=0x4e21}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8, 0x3}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port=0x4e20, @gre_key=0x8}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0xff}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x514) 1.636407489s ago: executing program 0 (id=738): listen(0xffffffffffffffff, 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.528756942s ago: executing program 4 (id=739): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c00009"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x17c, 0x26c, 0x33c, 0x0, 0x0, 0x3f4, 0x3f4, 0x3f4, 0x3f4, 0x3f4, 0x6, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'team_slave_1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @TTL={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@loopback, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x8, 0x31, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0xe03e4f23e3ef404d, 0x0, 0x4, 0x0, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x3, 0x7, 0x2, 0x1, 0x2], 0x2, 0x4}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket2={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x494) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.346862727s ago: executing program 0 (id=740): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x1000, 0xa, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 481.96143ms ago: executing program 3 (id=741): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f00000024c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x24, r3, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000040)="442810bc996c301c8107070400", 0x28) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0xc4, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x98, 0x2b}}}}, [@NL80211_ATTR_CQM={0x7c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0x10001, 0x5, 0x2, 0x3, 0x5, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80000000, 0x8, 0x4, 0x5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xad}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x90}, 0x4c050) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000200)=[{0x3, 0x1000, 0x0, 0x0}, {0x8000, 0xa00, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x20, 0x9, 0xeb, {0xeb, 0x30, "304feb07e8a22499e5f36b8285a0996ffe911ae4ec2c7c689a1b6b49100eb14f56aef945c5eebb7e841de3867ccffa53354c41b78d2e85c9c9890274b7bdb96d182986bd994a0a99dc4938fe0591859c8e51e05031b08c9328cab17262355e9abaf6d8372aa37fc8c048a97de8574d64df17ee386b43d7e1d41a42940c8d9be3e6c70411d8992efc17d04f07c6c5605ba8c5f92efc62435c46333828afa46c65256f3b73e779459ae9c6c9b3771d2c19c878157a2fbeac7dc7ae003313e4a6f87c073f9ac6d257f6b273d29fbeeb3505f6fd9734f0de0e62229e2eb992ac149eff6b9ca187f66a751c"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x24, &(0x7f0000000240)={0x40, 0xc, 0xb9, "517124dc1daaa5bf52686176e136b0931945f03671611ed68afa024717b62fb2332af3a8eabc3a79c37a443b8c62466b7249b90e84617dee302bd3504858acd940726b429487f3465539ca614dd8cdef39363160ca95928706b46216f1d9a763d86d3f78796ab6d744fe7e0dec4943bb5aebd8d4da9fc1ad2a49ffd9dd8a1b83c7e8863acd2714834f7d5232593209218704ee710ba56151172d21dc6b325552ef173a535594a4bfae31d93c2fe2819f6c2d0d1ba4caa26175"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x1000, 0x7, 0x401, 0x5, 0x5, 0xf800, 0xf2d, 0x9, 0x6c8f, 0xfbff, 0xc7b, 0x96c}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xc7}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 231.5602ms ago: executing program 2 (id=742): socket(0x15, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b73801020301090212"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x22020600) epoll_create1(0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 70.150945ms ago: executing program 0 (id=743): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '/'}]}, 0x88}, 0x1, 0x7}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x20000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r4, 0xffffa28b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 1 (id=744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): 941537][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 188.990454][ T5906] usb 5-1: USB disconnect, device number 6 [ 189.027171][ T5892] (NULL device *): no alternate interface [ 189.288571][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 189.451559][ T5892] usb 4-1: USB disconnect, device number 7 [ 189.748763][ T6847] kvm: kvm [6846]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 190.841528][ T1611] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.022941][ T1611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.079287][ T1611] usb 4-1: config 0 has no interfaces? [ 191.106494][ T1611] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.121556][ T1611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.132798][ T1611] usb 4-1: config 0 descriptor?? [ 191.359944][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.397132][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.578760][ T978] usb 4-1: USB disconnect, device number 8 [ 191.766755][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 192.570562][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 192.781554][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 192.797372][ T5892] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 192.824039][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.851117][ T5892] usb 2-1: Product: syz [ 192.869458][ T5892] usb 2-1: Manufacturer: syz [ 192.886527][ T5892] usb 2-1: SerialNumber: syz [ 192.938294][ T5892] usb 2-1: config 0 descriptor?? [ 192.947638][ T5892] gspca_main: sq905-2.14.0 probing 2770:9120 [ 193.507260][ T6889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.531474][ T5892] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 193.552571][ T5892] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 193.619097][ T6902] syz.1.267: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.620209][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.1.267 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 193.620235][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.620247][ T6902] Call Trace: [ 193.620255][ T6902] [ 193.620265][ T6902] dump_stack_lvl+0x189/0x250 [ 193.620419][ T6902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.620459][ T6902] ? __pfx__printk+0x10/0x10 [ 193.620483][ T6902] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.620511][ T6902] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.620541][ T6902] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 193.620566][ T6902] warn_alloc+0x214/0x310 [ 193.620593][ T6902] ? stack_depot_save_flags+0x40/0x900 [ 193.620636][ T6902] ? __pfx_warn_alloc+0x10/0x10 [ 193.620666][ T6902] ? kasan_save_track+0x4f/0x80 [ 193.620689][ T6902] ? xskq_create+0x56/0x170 [ 193.620719][ T6902] ? xsk_init_queue+0xb0/0x110 [ 193.620747][ T6902] ? xsk_setsockopt+0x43f/0x710 [ 193.620774][ T6902] ? do_sock_setsockopt+0x257/0x3e0 [ 193.620800][ T6902] ? __ia32_sys_setsockopt+0x18b/0x220 [ 193.620825][ T6902] ? __do_fast_syscall_32+0xb6/0x2b0 [ 193.620845][ T6902] ? do_fast_syscall_32+0x34/0x80 [ 193.620874][ T6902] __vmalloc_node_range_noprof+0x125/0x12f0 [ 193.620939][ T6902] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.620975][ T6902] ? __kasan_kmalloc+0x93/0xb0 [ 193.621003][ T6902] vmalloc_user_noprof+0xad/0xf0 [ 193.621030][ T6902] ? xskq_create+0xbf/0x170 [ 193.621062][ T6902] xskq_create+0xbf/0x170 [ 193.621098][ T6902] xsk_init_queue+0xb0/0x110 [ 193.621133][ T6902] xsk_setsockopt+0x43f/0x710 [ 193.621165][ T6902] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.621196][ T6902] ? __lock_acquire+0xab9/0xd20 [ 193.621238][ T6902] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 193.621269][ T6902] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.621300][ T6902] do_sock_setsockopt+0x257/0x3e0 [ 193.621344][ T6902] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 193.621369][ T6902] ? __fget_files+0x2a/0x420 [ 193.621404][ T6902] ? __fget_files+0x3a0/0x420 [ 193.621430][ T6902] ? __fget_files+0x2a/0x420 [ 193.621467][ T6902] __ia32_sys_setsockopt+0x18b/0x220 [ 193.621503][ T6902] __do_fast_syscall_32+0xb6/0x2b0 [ 193.621525][ T6902] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.621564][ T6902] do_fast_syscall_32+0x34/0x80 [ 193.621585][ T6902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.621613][ T6902] RIP: 0023:0xf7fb8539 [ 193.621641][ T6902] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 193.621661][ T6902] RSP: 002b:00000000f50b555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 193.621685][ T6902] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 193.621701][ T6902] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 193.621715][ T6902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.621729][ T6902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.621742][ T6902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.621776][ T6902] [ 193.621869][ T6902] Mem-Info: [ 193.945779][ T6907] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.105590][ T6902] active_anon:8833 inactive_anon:0 isolated_anon:0 [ 194.105590][ T6902] active_file:11291 inactive_file:39848 isolated_file:0 [ 194.105590][ T6902] unevictable:768 dirty:136 writeback:0 [ 194.105590][ T6902] slab_reclaimable:10289 slab_unreclaimable:98446 [ 194.105590][ T6902] mapped:34964 shmem:4233 pagetables:1139 [ 194.105590][ T6902] sec_pagetables:0 bounce:0 [ 194.105590][ T6902] kernel_misc_reclaimable:0 [ 194.105590][ T6902] free:1315482 free_pcp:13705 free_cma:0 [ 194.190937][ T6902] Node 0 active_anon:35332kB inactive_anon:0kB active_file:45164kB inactive_file:159192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139756kB dirty:544kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.381947][ T6902] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.413442][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.558282][ T6902] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.587135][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.608698][ T6902] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 194.913059][ T6902] Node 0 DMA32 free:1348236kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31484kB inactive_anon:0kB active_file:45164kB inactive_file:157384kB unevictable:1536kB writepending:544kB present:3129332kB managed:2561184kB mlocked:0kB bounce:0kB free_pcp:42612kB local_pcp:17132kB free_cma:0kB [ 194.945529][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.081557][ T6902] lowmem_reserve[]: 0 0 1 1 1 [ 195.086394][ T6902] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 195.176107][ T6902] lowmem_reserve[]: 0 0 0 0 0 [ 195.192288][ T978] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.220690][ T6920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.241732][ T6902] Node 1 Normal free:3898060kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19392kB local_pcp:8192kB free_cma:0kB [ 195.367564][ T6902] lowmem_reserve[]: 0 0 0 0 0 [ 195.374080][ T6902] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.673121][ T6902] Node 0 DMA32: 958*4kB (UM) 1106*8kB (UME) 768*16kB (UM) 499*32kB (UM) 262*64kB (UME) 67*128kB (UME) 44*256kB (UM) 19*512kB (UM) 9*1024kB (UM) 5*2048kB (UME) 305*4096kB (UM) = 1356008kB [ 195.701430][ T6902] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 195.718589][ T6902] Node 1 Normal: 221*4kB (UME) 45*8kB (UME) 41*16kB (UME) 105*32kB (UME) 33*64kB (UME) 8*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3898060kB [ 195.742169][ T6902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.759688][ T6902] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.759706][ T978] usb 5-1: config 0 has no interfaces? [ 195.787991][ T6902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.799191][ T6902] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.813745][ T6902] 52509 total pagecache pages [ 195.818767][ T6902] 0 pages in swap cache [ 195.906119][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 195.913698][ T6902] Free swap = 124996kB [ 195.952213][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.971450][ T978] usb 5-1: Product: syz [ 195.989364][ T6902] Total swap = 124996kB [ 195.996077][ T978] usb 5-1: Manufacturer: syz [ 196.007089][ T978] usb 5-1: SerialNumber: syz [ 196.012075][ T6902] 2097051 pages RAM [ 196.028705][ T978] usb 5-1: config 0 descriptor?? [ 196.038659][ T6902] 0 pages HighMem/MovableOnly [ 196.074682][ T6902] 424649 pages reserved [ 196.109351][ T6902] 0 pages cma reserved [ 196.190858][ T978] usb 2-1: USB disconnect, device number 7 [ 196.879752][ T5841] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 197.067666][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 197.316417][ T5841] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 197.344362][ T5841] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.353756][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.440496][ T5841] usb 1-1: Product: syz [ 197.450610][ T5841] usb 1-1: Manufacturer: syz [ 197.647642][ T5841] usb 1-1: SerialNumber: syz [ 197.732254][ T5892] usb 5-1: USB disconnect, device number 7 [ 197.774668][ T5841] usb 1-1: bad CDC descriptors [ 198.139510][ T5892] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.314039][ T5892] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 198.350468][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 198.395800][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.038869][ T5892] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 199.049146][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.411023][ T43] usb 5-1: USB disconnect, device number 8 [ 199.580343][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.587480][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.417219][ T5841] usb 1-1: USB disconnect, device number 9 [ 200.748454][ T6962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.890592][ T6962] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 201.514812][ T6982] bridge_slave_0: left allmulticast mode [ 201.533507][ T6982] bridge_slave_0: left promiscuous mode [ 201.544305][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.754961][ T6982] bridge_slave_1: left allmulticast mode [ 201.760919][ T6982] bridge_slave_1: left promiscuous mode [ 201.767782][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.800743][ T6982] bond0: (slave bond_slave_0): Releasing backup interface [ 201.811531][ T6982] bond_slave_0: left allmulticast mode [ 201.819696][ T6982] bond_slave_0: left promiscuous mode [ 201.837061][ T6982] bond0: (slave bond_slave_1): Releasing backup interface [ 201.852835][ T6982] bond_slave_1: left allmulticast mode [ 201.858618][ T6982] bond_slave_1: left promiscuous mode [ 201.894685][ T6982] team0: Port device team_slave_0 removed [ 201.921655][ T6982] team0: Port device team_slave_1 removed [ 201.930610][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.938535][ T6982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.952974][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.960720][ T6982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.165375][ T6982] bond0: left allmulticast mode [ 202.187522][ T6982] team0: Port device macvlan2 removed [ 202.825668][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.833323][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.547163][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.654887][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.999220][ T6993] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.011945][ T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.046554][ T6985] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.062992][ T6985] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.121463][ T6985] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.148390][ T6985] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.177923][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.191544][ T978] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.231291][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.297053][ T978] usb 5-1: config 0 descriptor?? [ 204.317644][ T978] pwc: Askey VC010 type 2 USB webcam detected. [ 204.485205][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.514360][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.556245][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.594198][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.650084][ T5906] rtc rtc0: __rtc_set_alarm: err=-22 [ 204.662488][ T6985] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.672105][ T6985] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.681066][ T6985] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.690567][ T6985] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.731654][ T7004] 8021q: VLANs not supported on ip_vti0 [ 204.973135][ T978] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.019432][ T978] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.031593][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.039505][ T978] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.050744][ T978] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.059305][ T978] pwc: recv_control_msg error -32 req 04 val 1400 [ 205.071961][ T978] pwc: recv_control_msg error -32 req 02 val 2000 [ 205.079898][ T978] pwc: recv_control_msg error -32 req 02 val 2100 [ 205.091209][ T978] pwc: recv_control_msg error -32 req 04 val 1500 [ 205.102445][ T978] pwc: recv_control_msg error -32 req 02 val 2500 [ 205.111243][ T978] pwc: recv_control_msg error -32 req 02 val 2400 [ 205.114071][ T7013] netlink: 3 bytes leftover after parsing attributes in process `syz.2.300'. [ 205.202474][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 205.210138][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.223453][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 205.235044][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.244898][ T9] usb 1-1: Product: syz [ 205.259612][ T9] usb 1-1: Manufacturer: syz [ 205.275311][ T9] usb 1-1: SerialNumber: syz [ 205.286300][ T9] usb 1-1: config 0 descriptor?? [ 205.319970][ T978] pwc: recv_control_msg error -71 req 02 val 2900 [ 205.328111][ T978] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.335552][ T978] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.343078][ T978] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.353105][ T978] pwc: Registered as video103. [ 205.361115][ T978] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 205.395856][ T978] usb 5-1: USB disconnect, device number 9 [ 205.710249][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 205.828754][ T7022] kvm: kvm [7019]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 205.843544][ T7022] kvm: kvm [7019]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 205.856538][ T7022] kvm: kvm [7019]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 205.906275][ T7022] kvm_intel: kvm [7019]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 206.644930][ T9] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 206.716226][ T9] usb 1-1: USB disconnect, device number 10 [ 206.858684][ T7030] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.061609][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.242126][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 208.257596][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.284627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.481454][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 208.498317][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.510408][ T9] usb 3-1: config 0 descriptor?? [ 208.830565][ T7064] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 208.831687][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 208.872952][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.880549][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.907409][ T7064] bridge0: left promiscuous mode [ 208.954352][ T7067] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 209.022328][ T7064] bridge0: left allmulticast mode [ 209.099148][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.106456][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.114092][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.119517][ T9] macally 0003:060B:0001.0005: unknown main item tag 0x0 [ 209.122388][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.129699][ T9] macally 0003:060B:0001.0005: unknown main item tag 0x0 [ 209.153922][ T7064] bridge0: entered promiscuous mode [ 209.159913][ T7064] bridge0: entered allmulticast mode [ 209.177044][ T7064] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.223800][ T9] macally 0003:060B:0001.0005: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 209.249015][ T7073] loop6: detected capacity change from 0 to 524287999 [ 209.329234][ T7074] buffer_io_error: 2010 callbacks suppressed [ 209.329250][ T7074] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 209.366796][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.392253][ T9] usb 3-1: USB disconnect, device number 11 [ 209.413600][ T7067] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 209.465640][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.489960][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.494930][ T7067] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 209.575821][ T7067] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 209.621681][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.649841][ T7075] fido_id[7075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 209.649980][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.785364][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.831921][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.909521][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.021639][ T7073] ldm_validate_partition_table(): Disk read failed. [ 210.055335][ T7073] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.135148][ T7073] Dev loop6: unable to read RDB block 0 [ 210.191053][ T7073] loop6: unable to read partition table [ 210.201436][ T7073] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 211.821737][ T7081] Bluetooth: hci0: command 0x0406 tx timeout [ 211.828699][ T7081] Bluetooth: hci1: command 0x0406 tx timeout [ 211.836037][ T7080] Bluetooth: hci4: command 0x0406 tx timeout [ 211.842728][ T7081] Bluetooth: hci2: command 0x0406 tx timeout [ 211.848747][ T7081] Bluetooth: hci3: command 0x0406 tx timeout [ 212.286158][ T7106] tipc: Started in network mode [ 212.291243][ T7106] tipc: Node identity f2a5cebc3561, cluster identity 4711 [ 212.340488][ T7106] tipc: Enabled bearer , priority 0 [ 212.382507][ T7109] syzkaller0: entered promiscuous mode [ 212.426603][ T7109] syzkaller0: entered allmulticast mode [ 212.482316][ T7107] syzkaller0: entered allmulticast mode [ 212.832392][ T7106] tipc: Resetting bearer [ 212.855790][ T7104] tipc: Resetting bearer [ 212.982748][ T7104] tipc: Disabling bearer [ 215.488841][ T7138] binder: 7136:7138 ioctl c0306201 800003c0 returned -14 [ 215.491776][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 216.410006][ T7138] syz.4.330 (7138): drop_caches: 2 [ 217.021563][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 217.121480][ T30] audit: type=1804 audit(1748906795.519:18): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.336" name="file0" dev="ramfs" ino=16558 res=1 errno=0 [ 217.235266][ T5841] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 217.321517][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 217.367299][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.421684][ T5841] usb 4-1: config 0 has no interfaces? [ 217.425658][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.427228][ T5841] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 217.441423][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 217.450223][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.478259][ T5841] usb 4-1: config 0 descriptor?? [ 217.624019][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.640984][ T10] usb 5-1: config 0 descriptor?? [ 218.248646][ T10] ft260 0003:0403:6030.0006: item fetching failed at offset 0/2 [ 218.270739][ T10] ft260 0003:0403:6030.0006: failed to parse HID [ 218.277526][ T10] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -22 [ 218.338172][ T10] usb 5-1: USB disconnect, device number 10 [ 218.393352][ T978] usb 4-1: USB disconnect, device number 9 [ 220.151518][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.311609][ T5841] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 220.324646][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.386654][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.410704][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.426105][ T5841] usb 2-1: Product: syz [ 220.430377][ T5841] usb 2-1: Manufacturer: syz [ 220.435625][ T5841] usb 2-1: SerialNumber: syz [ 220.450666][ T7168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.717262][ T5841] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 221.006169][ T10] usb 2-1: USB disconnect, device number 8 [ 221.206925][ T7167] usblp0: removed [ 221.531791][ T978] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 221.703536][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.724188][ T978] usb 5-1: config 0 has no interfaces? [ 221.739210][ T978] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 222.111041][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.133238][ T978] usb 5-1: config 0 descriptor?? [ 222.752957][ T7196] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 222.877065][ T7196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.926637][ T7201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.934136][ T7201] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.946784][ T7201] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 223.011577][ T978] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.038989][ T7196] veth5: entered promiscuous mode [ 223.055162][ T7196] bond1: (slave veth5): Enslaving as an active interface with a down link [ 223.106399][ T7196] erspan0: entered allmulticast mode [ 223.140075][ T7196] bond1: (slave erspan0): making interface the new active one [ 223.168529][ T7196] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 223.182900][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 223.196757][ T978] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 223.217135][ T978] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 223.233972][ T978] usb 4-1: config 1 interface 0 has no altsetting 0 [ 223.264628][ T978] usb 4-1: string descriptor 0 read error: -22 [ 223.271039][ T978] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.323957][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.354854][ T7198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 223.372269][ T7198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 223.653317][ T978] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 223.721640][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.053820][ T10] usb 1-1: config 0 has no interfaces? [ 224.136371][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.147684][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.187381][ T10] usb 1-1: Product: syz [ 224.283627][ T10] usb 1-1: Manufacturer: syz [ 224.351580][ T10] usb 1-1: SerialNumber: syz [ 224.352626][ T5841] usb 4-1: USB disconnect, device number 10 [ 224.359926][ T10] usb 1-1: config 0 descriptor?? [ 224.414126][ T5841] usblp0: removed [ 225.135977][ T5841] usb 5-1: USB disconnect, device number 11 [ 225.515375][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.744044][ T43] usb 3-1: config 0 has no interfaces? [ 225.757168][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 225.769413][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.843924][ T43] usb 3-1: Product: syz [ 225.931686][ T43] usb 3-1: Manufacturer: syz [ 225.981132][ T43] usb 3-1: SerialNumber: syz [ 226.011468][ T43] usb 3-1: config 0 descriptor?? [ 226.431593][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.544060][ T43] usb 1-1: USB disconnect, device number 11 [ 226.562900][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.600288][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 226.630922][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 226.648298][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.673302][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.688426][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.713759][ T10] usb 5-1: Product: syz [ 226.718241][ T10] usb 5-1: Manufacturer: syz [ 226.727465][ T10] usb 5-1: SerialNumber: syz [ 226.735025][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 226.743829][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 226.758102][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 226.769309][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 226.790533][ T10] usb 5-1: config 0 descriptor?? [ 226.801078][ T9] usb 4-1: Product: syz [ 226.814517][ T9] usb 4-1: Manufacturer: syz [ 226.823046][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 226.836531][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 226.857293][ T9] usb 4-1: SerialNumber: syz [ 226.876127][ T9] usb 4-1: config 0 descriptor?? [ 226.890192][ T7243] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 227.280903][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.361'. [ 227.401409][ T5906] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.425878][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 227.439771][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 227.551469][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 227.559555][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.570679][ T5906] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.606921][ T5906] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 227.676541][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.725118][ T5906] usb 1-1: config 0 descriptor?? [ 227.821448][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 227.902919][ T5906] usb 4-1: USB disconnect, device number 11 [ 228.001675][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 228.018390][ T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 228.081694][ T978] usb 3-1: USB disconnect, device number 12 [ 228.090936][ T10] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 228.098522][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.112259][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 228.128283][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 228.159402][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 228.160637][ T43] usb 2-1: config 0 descriptor?? [ 228.169982][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 228.194803][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.219809][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.236387][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.247942][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.277329][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.510839][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.551477][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560516][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560561][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560587][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560612][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560638][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560665][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560691][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560717][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560742][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560767][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560795][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560822][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560848][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560874][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560900][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560923][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560951][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.560977][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561003][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561039][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561065][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561091][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561118][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.561145][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.753425][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 228.825143][ T10] usb 5-1: USB disconnect, device number 12 [ 228.972047][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972199][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972228][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972255][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972313][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972338][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972364][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972388][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972437][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972469][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972495][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 228.972518][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 229.015658][ T5906] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.403110][ T7261] fido_id[7261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.731591][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 229.849640][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 230.592850][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 230.603193][ T43] asix 2-1:0.0: probe with driver asix failed with error -71 [ 230.619892][ T43] usb 2-1: USB disconnect, device number 9 [ 230.711487][ T5841] usb 1-1: USB disconnect, device number 12 [ 230.967679][ T7272] bond0: option mode: unable to set because the bond device is up [ 230.978519][ T7273] kvm: pic: non byte read [ 230.984210][ T5836] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 231.008951][ T7273] kvm: pic: non byte read [ 231.014845][ T7273] kvm: pic: non byte read [ 231.019803][ T7273] kvm: pic: non byte read [ 231.024921][ T7273] kvm: pic: non byte read [ 231.029761][ T7273] kvm: pic: non byte read [ 231.034994][ T7273] kvm: pic: non byte read [ 231.039847][ T7273] kvm: pic: non byte read [ 233.273757][ T7305] netlink: 'syz.4.376': attribute type 10 has an invalid length. [ 233.297006][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.334883][ T7305] team0: Device batadv0 failed to register rx_handler [ 233.605636][ T7307] pim6reg: entered allmulticast mode [ 233.612251][ T7308] pim6reg: left allmulticast mode [ 233.993917][ T7310] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 234.096147][ T7311] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 234.162968][ T7313] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 234.216384][ T7311] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 234.345240][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.524078][ T7314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.534303][ T7314] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 234.548781][ T7314] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 234.728037][ T7316] veth3: entered promiscuous mode [ 234.820251][ T7316] bond1: (slave veth3): Enslaving as an active interface with a down link [ 234.848315][ T7313] erspan0: entered allmulticast mode [ 234.926275][ T7313] bond1: (slave erspan0): making interface the new active one [ 234.961007][ T7313] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 234.971694][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.280015][ T43] usb 3-1: config 0 has no interfaces? [ 235.569944][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.579245][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.625104][ T43] usb 3-1: Product: syz [ 235.629350][ T43] usb 3-1: Manufacturer: syz [ 235.726547][ T43] usb 3-1: SerialNumber: syz [ 235.742301][ T43] usb 3-1: config 0 descriptor?? [ 236.462456][ T7344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.812630][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x60000000001 [ 236.822350][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000801 [ 236.867122][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x60000000001 [ 236.938903][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000801 [ 237.139008][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x60000000001 [ 237.206675][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000801 [ 237.284901][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x60000000001 [ 237.296288][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000801 [ 237.338703][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x60000000001 [ 237.506408][ T7348] kvm: kvm [7346]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000801 [ 237.661242][ T43] usb 3-1: USB disconnect, device number 13 [ 240.353750][ T7377] lo: left promiscuous mode [ 240.461921][ T7377] lo: left allmulticast mode [ 240.527882][ T7377] tunl0: left promiscuous mode [ 240.550590][ T7377] tunl0: left allmulticast mode [ 240.588367][ T7377] gre0: left promiscuous mode [ 241.011437][ T7377] gre0: left allmulticast mode [ 241.113923][ T7377] gretap0: left promiscuous mode [ 241.119175][ T7377] gretap0: left allmulticast mode [ 241.592578][ T7377] erspan0: left promiscuous mode [ 241.768357][ T7377] erspan0: left allmulticast mode [ 241.956699][ T7377] ip_vti0: left promiscuous mode [ 241.971611][ T7377] ip_vti0: left allmulticast mode [ 241.993202][ T7377] ip6_vti0: left promiscuous mode [ 242.020168][ T7377] ip6_vti0: left allmulticast mode [ 242.066595][ T7377] sit0: left promiscuous mode [ 242.208933][ T7377] sit0: left allmulticast mode [ 242.250133][ T7377] ip6tnl0: left promiscuous mode [ 242.329146][ T7377] ip6tnl0: left allmulticast mode [ 242.363855][ T7377] ip6gre0: left promiscuous mode [ 242.370142][ T7377] ip6gre0: left allmulticast mode [ 242.386347][ T7377] syz_tun: left promiscuous mode [ 242.394529][ T7377] syz_tun: left allmulticast mode [ 242.518035][ T7377] ip6gretap0: left promiscuous mode [ 242.523765][ T7377] ip6gretap0: left allmulticast mode [ 242.554909][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.562310][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.930227][ T7377] vcan0: left promiscuous mode [ 242.936575][ T7377] vcan0: left allmulticast mode [ 242.957583][ T7377] bond0: left promiscuous mode [ 242.963735][ T7377] bond_slave_0: left promiscuous mode [ 242.969798][ T7377] bond_slave_1: left promiscuous mode [ 243.073031][ T7377] vxlan0: left promiscuous mode [ 243.079653][ T7377] bridge0: left promiscuous mode [ 243.090376][ T7377] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 243.203854][ T7377] bond0: left allmulticast mode [ 243.220076][ T7377] bond_slave_0: left allmulticast mode [ 243.239764][ T7377] bond_slave_1: left allmulticast mode [ 243.258869][ T7377] vxlan0: left allmulticast mode [ 243.281754][ T7377] bridge0: left allmulticast mode [ 243.289334][ T7377] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 243.344296][ T7377] team0: left promiscuous mode [ 243.361470][ T7377] team_slave_0: left promiscuous mode [ 243.384703][ T7377] team_slave_1: left promiscuous mode [ 243.454481][ T7377] team0: left allmulticast mode [ 243.668512][ T7377] team_slave_0: left allmulticast mode [ 243.684856][ T7377] team_slave_1: left allmulticast mode [ 243.847974][ T7377] dummy0: left promiscuous mode [ 243.861639][ T7377] dummy0: left allmulticast mode [ 243.977092][ T7377] nlmon0: left promiscuous mode [ 244.017696][ T7377] nlmon0: left allmulticast mode [ 244.050190][ T7377] caif0: left promiscuous mode [ 244.076923][ T7377] caif0: left allmulticast mode [ 244.492168][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.531226][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.762778][ T7377] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.784504][ T7377] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.804246][ T7377] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.823462][ T7377] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.103522][ T7377] bond1: left allmulticast mode [ 245.275871][ T7377] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.285153][ T7377] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.294148][ T7377] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.303102][ T7377] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.071386][ T7416] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.236357][ T7416] usb 1-1: Using ep0 maxpacket: 32 [ 246.463347][ T7437] lo: entered promiscuous mode [ 246.468225][ T7437] lo: entered allmulticast mode [ 246.482949][ T7437] tunl0: entered promiscuous mode [ 246.488049][ T7437] tunl0: entered allmulticast mode [ 246.494274][ T7437] gre0: entered promiscuous mode [ 246.499290][ T7437] gre0: entered allmulticast mode [ 246.506407][ T7437] gretap0: entered promiscuous mode [ 246.511818][ T7437] gretap0: entered allmulticast mode [ 246.517983][ T7437] erspan0: entered promiscuous mode [ 246.523551][ T7437] erspan0: entered allmulticast mode [ 246.529913][ T7437] ip_vti0: entered promiscuous mode [ 246.535841][ T7437] ip_vti0: entered allmulticast mode [ 246.542759][ T7437] ip6_vti0: entered promiscuous mode [ 246.548201][ T7437] ip6_vti0: entered allmulticast mode [ 246.554907][ T7437] sit0: entered promiscuous mode [ 246.560188][ T7437] sit0: entered allmulticast mode [ 246.567114][ T7437] ip6tnl0: entered promiscuous mode [ 246.572547][ T7437] ip6tnl0: entered allmulticast mode [ 246.579469][ T7437] ip6gre0: entered promiscuous mode [ 246.584895][ T7437] ip6gre0: entered allmulticast mode [ 246.592292][ T7437] syz_tun: entered promiscuous mode [ 246.597705][ T7437] syz_tun: entered allmulticast mode [ 246.604770][ T7437] ip6gretap0: entered promiscuous mode [ 246.610423][ T7437] ip6gretap0: entered allmulticast mode [ 246.617117][ T7437] bridge0: entered promiscuous mode [ 246.622727][ T7437] bridge0: entered allmulticast mode [ 246.629175][ T7437] vcan0: entered promiscuous mode [ 246.634432][ T7437] vcan0: entered allmulticast mode [ 246.640143][ T7437] bond0: entered promiscuous mode [ 246.645394][ T7437] bond0: entered allmulticast mode [ 246.652258][ T7437] team0: entered promiscuous mode [ 246.657650][ T7437] team0: entered allmulticast mode [ 246.665346][ T7437] dummy0: entered promiscuous mode [ 246.672306][ T7437] dummy0: entered allmulticast mode [ 246.678720][ T7437] nlmon0: entered promiscuous mode [ 246.684019][ T7437] nlmon0: entered allmulticast mode [ 246.717373][ T7416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 246.734736][ T7416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.758325][ T7416] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 246.798153][ T7416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.844939][ T7416] usb 1-1: config 0 descriptor?? [ 246.892250][ T7437] caif0: entered promiscuous mode [ 246.897502][ T7437] caif0: entered allmulticast mode [ 246.903028][ T7437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.561849][ T7416] macally 0003:060B:0001.0008: unknown main item tag 0x0 [ 247.617358][ T7416] macally 0003:060B:0001.0008: unknown main item tag 0x0 [ 247.661264][ T7416] macally 0003:060B:0001.0008: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.0-1/input0 [ 247.847284][ T7395] usb 1-1: USB disconnect, device number 13 [ 247.929488][ T7441] fido_id[7441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 248.481007][ T7447] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 248.481030][ T7447] kvm: kvm [7442]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 248.517790][ T7447] kvm: kvm [7442]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 248.568300][ T7447] kvm: kvm [7442]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 248.651931][ T7447] kvm_intel: kvm [7442]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 249.821448][ T7395] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.951495][ T7416] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 249.984941][ T7437] syz.3.401 (7437) used greatest stack depth: 19400 bytes left [ 250.011605][ T7395] usb 2-1: Using ep0 maxpacket: 32 [ 250.030557][ T7395] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 250.071898][ T7395] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 250.101423][ T7395] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 250.113474][ T7416] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 250.123420][ T7416] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.140275][ T7395] usb 2-1: Product: syz [ 250.173125][ T7416] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.182549][ T7416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.190580][ T7416] usb 4-1: Product: syz [ 250.202143][ T7395] usb 2-1: Manufacturer: syz [ 250.214401][ T7395] usb 2-1: SerialNumber: syz [ 250.244440][ T7395] usb 2-1: config 0 descriptor?? [ 250.265745][ T7459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.273292][ T7416] usb 4-1: Manufacturer: syz [ 250.296884][ T7416] usb 4-1: SerialNumber: syz [ 250.317804][ T7461] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.564770][ T7416] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.674730][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 250.729372][ T7465] vlan0: entered promiscuous mode [ 250.738120][ T7465] ip6gretap0: entered promiscuous mode [ 250.807793][ T7472] input: syz0 as /devices/virtual/input/input9 [ 250.987606][ T7416] usb 4-1: USB disconnect, device number 12 [ 251.024245][ T7416] usblp1: removed [ 252.269384][ T7395] usb 2-1: USB disconnect, device number 10 [ 253.501937][ T7416] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 253.641841][ T7415] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 253.847627][ T7416] usb 4-1: config 0 has no interfaces? [ 253.887610][ T7415] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.910929][ T7415] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 253.944184][ T7415] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.964565][ T7416] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.997014][ T7415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.011173][ T7416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.053477][ T7416] usb 4-1: Product: syz [ 254.068618][ T7416] usb 4-1: Manufacturer: syz [ 254.085659][ T7416] usb 4-1: SerialNumber: syz [ 254.176022][ T7416] usb 4-1: config 0 descriptor?? [ 255.255675][ T7416] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 256.367339][ T7416] usb 3-1: config 0 has no interfaces? [ 256.386178][ T7416] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 256.401548][ T7416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.438873][ T7416] usb 3-1: Product: syz [ 256.447923][ T7416] usb 3-1: Manufacturer: syz [ 256.479442][ T7416] usb 3-1: SerialNumber: syz [ 256.642683][ T7416] usb 3-1: config 0 descriptor?? [ 256.812785][ T7416] usb 4-1: USB disconnect, device number 13 [ 256.889374][ T7502] pimreg: entered allmulticast mode [ 256.900640][ T7502] pimreg: left allmulticast mode [ 257.581528][ T7416] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 257.783608][ T5888] usb 5-1: USB disconnect, device number 13 [ 257.806071][ T7416] usb 4-1: config 0 has no interfaces? [ 257.891955][ T7416] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.913137][ T7416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.921189][ T7416] usb 4-1: Product: syz [ 257.937020][ T7416] usb 4-1: Manufacturer: syz [ 257.951877][ T7416] usb 4-1: SerialNumber: syz [ 257.985360][ T7416] usb 4-1: config 0 descriptor?? [ 258.258725][ T7518] pimreg: entered allmulticast mode [ 258.272630][ T7518] pimreg: left allmulticast mode [ 258.544801][ T7416] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.816315][ T7416] usb 1-1: config 0 has no interfaces? [ 258.861422][ T7416] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.249328][ T7416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.273058][ T7416] usb 1-1: Product: syz [ 259.277259][ T7416] usb 1-1: Manufacturer: syz [ 259.284379][ T7416] usb 1-1: SerialNumber: syz [ 259.291098][ T7416] usb 1-1: config 0 descriptor?? [ 259.382041][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.578880][ T5888] usb 5-1: config 0 has no interfaces? [ 259.590561][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.647120][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.750534][ T7416] usb 3-1: USB disconnect, device number 14 [ 259.766765][ T5888] usb 5-1: Product: syz [ 259.773038][ T5888] usb 5-1: Manufacturer: syz [ 259.781336][ T5888] usb 5-1: SerialNumber: syz [ 259.835355][ T5888] usb 5-1: config 0 descriptor?? [ 260.600011][ T5903] usb 4-1: USB disconnect, device number 14 [ 260.945130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.953058][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.301408][ T5888] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 261.345477][ T5903] usb 1-1: USB disconnect, device number 14 [ 261.572572][ T7395] usb 5-1: USB disconnect, device number 14 [ 261.962114][ T5888] usb 3-1: config 0 has no interfaces? [ 261.985482][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 262.055827][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.089658][ T7555] bridge_slave_1: left allmulticast mode [ 262.095738][ T7555] bridge_slave_1: left promiscuous mode [ 262.102073][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.204075][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.236757][ T7555] bridge_slave_0: left allmulticast mode [ 262.252599][ T7555] bridge_slave_0: left promiscuous mode [ 262.264110][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.456178][ T7555] bond0: (slave bridge0): Releasing backup interface [ 262.804335][ T5888] usb 3-1: Product: syz [ 262.821545][ T5888] usb 3-1: Manufacturer: syz [ 262.826215][ T5888] usb 3-1: SerialNumber: syz [ 262.850412][ T5888] usb 3-1: config 0 descriptor?? [ 263.087157][ T7541] pimreg: entered allmulticast mode [ 263.362007][ T7541] pimreg: left allmulticast mode [ 265.040359][ T7395] usb 3-1: USB disconnect, device number 15 [ 266.063570][ T7577] lo: entered promiscuous mode [ 266.071391][ T7577] lo: entered allmulticast mode [ 266.085607][ T7577] tunl0: entered promiscuous mode [ 266.090852][ T7577] tunl0: entered allmulticast mode [ 266.098968][ T7577] gre0: entered promiscuous mode [ 266.104260][ T7577] gre0: entered allmulticast mode [ 266.129416][ T7577] gretap0: entered promiscuous mode [ 266.135621][ T7577] gretap0: entered allmulticast mode [ 266.164611][ T7577] erspan0: entered promiscuous mode [ 266.170877][ T7577] ip_vti0: entered promiscuous mode [ 266.176953][ T7577] ip_vti0: entered allmulticast mode [ 266.184919][ T7577] ip6_vti0: entered promiscuous mode [ 266.190471][ T7577] ip6_vti0: entered allmulticast mode [ 266.198848][ T7577] sit0: entered promiscuous mode [ 266.204356][ T7577] sit0: entered allmulticast mode [ 266.219238][ T7577] ip6tnl0: entered promiscuous mode [ 266.226846][ T7577] ip6tnl0: entered allmulticast mode [ 266.235920][ T7577] ip6gre0: entered promiscuous mode [ 266.241480][ T7577] ip6gre0: entered allmulticast mode [ 266.251121][ T7577] syz_tun: entered promiscuous mode [ 266.257242][ T7577] syz_tun: entered allmulticast mode [ 266.265918][ T7577] ip6gretap0: entered promiscuous mode [ 266.271896][ T7577] ip6gretap0: entered allmulticast mode [ 266.282085][ T7577] bridge0: entered promiscuous mode [ 266.292190][ T7577] bridge0: entered allmulticast mode [ 266.305489][ T7577] vcan0: entered promiscuous mode [ 266.319136][ T7577] vcan0: entered allmulticast mode [ 266.326238][ T7577] bond0: entered promiscuous mode [ 266.333472][ T7577] bond_slave_0: entered promiscuous mode [ 266.340844][ T7577] bond_slave_1: entered promiscuous mode [ 266.347236][ T7577] batadv0: entered promiscuous mode [ 266.353143][ T7577] bond0: entered allmulticast mode [ 266.358422][ T7577] bond_slave_0: entered allmulticast mode [ 266.365753][ T7577] bond_slave_1: entered allmulticast mode [ 266.372132][ T7577] batadv0: entered allmulticast mode [ 266.382096][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.390191][ T7577] team0: entered promiscuous mode [ 266.395886][ T7577] team_slave_0: entered promiscuous mode [ 266.403898][ T7577] team_slave_1: entered promiscuous mode [ 266.409981][ T7577] vxlan0: entered promiscuous mode [ 266.420100][ T7577] team0: entered allmulticast mode [ 266.425801][ T7577] team_slave_0: entered allmulticast mode [ 266.433428][ T7577] team_slave_1: entered allmulticast mode [ 266.439648][ T7577] vxlan0: entered allmulticast mode [ 266.448493][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.467261][ T7577] dummy0: entered promiscuous mode [ 266.472733][ T7577] dummy0: entered allmulticast mode [ 266.483767][ T7577] nlmon0: entered promiscuous mode [ 266.489207][ T7577] nlmon0: entered allmulticast mode [ 266.555765][ T7577] caif0: entered promiscuous mode [ 266.563928][ T7577] caif0: entered allmulticast mode [ 266.604391][ T7577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.985692][ T7603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.219715][ T7603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 271.711401][ T7395] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 272.173232][ T7395] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 272.320428][ T7395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.367339][ T7395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.391229][ T7395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 272.467030][ T7395] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 272.506983][ T7395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.549143][ T7395] usb 2-1: config 0 descriptor?? [ 273.000397][ T7624] veth1_to_team: entered promiscuous mode [ 273.199862][ T7395] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x7 [ 273.268061][ T7395] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 273.319454][ T7395] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 273.352054][ T7395] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 273.359643][ T7395] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 273.465803][ T7395] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 273.496575][ T7395] usb 2-1: USB disconnect, device number 11 [ 274.303500][ T7642] lo: entered promiscuous mode [ 274.308377][ T7642] lo: entered allmulticast mode [ 274.319255][ T7642] tunl0: entered promiscuous mode [ 274.373695][ T7642] tunl0: entered allmulticast mode [ 274.424574][ T7642] gre0: entered promiscuous mode [ 274.433650][ T7642] gre0: entered allmulticast mode [ 274.597720][ T7642] gretap0: entered promiscuous mode [ 274.603246][ T7642] gretap0: entered allmulticast mode [ 274.617523][ T7642] erspan0: entered promiscuous mode [ 274.623822][ T7642] erspan0: entered allmulticast mode [ 274.645612][ T7642] ip_vti0: entered promiscuous mode [ 274.651068][ T7642] ip_vti0: entered allmulticast mode [ 274.666972][ T7642] ip6_vti0: entered promiscuous mode [ 274.672515][ T7642] ip6_vti0: entered allmulticast mode [ 274.686206][ T7642] sit0: entered promiscuous mode [ 274.691494][ T7642] sit0: entered allmulticast mode [ 274.804514][ T7642] ip6tnl0: entered promiscuous mode [ 274.809928][ T7642] ip6tnl0: entered allmulticast mode [ 274.823568][ T7642] ip6gre0: entered promiscuous mode [ 274.829501][ T7642] ip6gre0: entered allmulticast mode [ 274.841560][ T7642] syz_tun: entered promiscuous mode [ 274.847056][ T7642] syz_tun: entered allmulticast mode [ 274.854695][ T7642] ip6gretap0: entered allmulticast mode [ 274.863295][ T7642] vcan0: entered promiscuous mode [ 274.868585][ T7642] vcan0: entered allmulticast mode [ 274.876391][ T7642] bond0: entered promiscuous mode [ 274.881651][ T7642] bond_slave_0: entered promiscuous mode [ 274.888604][ T7642] bond_slave_1: entered promiscuous mode [ 274.895472][ T7642] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 274.903894][ T7642] bond0: entered allmulticast mode [ 274.909232][ T7642] bond_slave_0: entered allmulticast mode [ 274.915553][ T7642] bond_slave_1: entered allmulticast mode [ 274.936004][ T7642] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 275.099114][ T7642] dummy0: entered promiscuous mode [ 275.104470][ T7642] dummy0: entered allmulticast mode [ 275.117721][ T7642] nlmon0: entered promiscuous mode [ 275.123420][ T7642] nlmon0: entered allmulticast mode [ 275.151559][ T30] audit: type=1800 audit(1748906853.569:19): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.447" name="bus" dev="ramfs" ino=18606 res=0 errno=0 [ 275.163779][ T7644] capability: warning: `syz.2.449' uses deprecated v2 capabilities in a way that may be insecure [ 275.202099][ T7642] caif0: entered promiscuous mode [ 275.217895][ T7642] caif0: entered allmulticast mode [ 275.270223][ T7642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.141412][ T7398] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.382862][ T7398] usb 4-1: Using ep0 maxpacket: 16 [ 277.393070][ T7398] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.412879][ T7398] usb 4-1: config 0 has no interface number 0 [ 277.427918][ T7398] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 277.468538][ T7398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.494210][ T7398] usb 4-1: Product: syz [ 277.525401][ T7398] usb 4-1: Manufacturer: syz [ 277.534847][ T7398] usb 4-1: SerialNumber: syz [ 277.585717][ T7398] usb 4-1: config 0 descriptor?? [ 277.599875][ T7398] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 277.651434][ T7395] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.821539][ T7395] usb 5-1: Using ep0 maxpacket: 32 [ 277.955693][ T7395] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 278.026838][ T7395] usb 5-1: config 0 has no interface number 0 [ 278.081417][ T7395] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.118866][ T7395] usb 5-1: config 0 interface 85 has no altsetting 0 [ 278.361543][ T7395] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 278.372014][ T7395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.380449][ T7395] usb 5-1: Product: syz [ 278.385399][ T7395] usb 5-1: Manufacturer: syz [ 278.395510][ T7395] usb 5-1: SerialNumber: syz [ 278.413037][ T7395] usb 5-1: config 0 descriptor?? [ 278.643930][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.684058][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.193131][ T7395] appletouch 5-1:0.85: Failed to read mode from device. [ 279.200501][ T7395] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 279.248586][ T7395] usb 5-1: USB disconnect, device number 15 [ 279.386161][ T7687] syz_tun: entered allmulticast mode [ 279.447848][ T7687] dvmrp1: entered allmulticast mode [ 279.902290][ T7398] gspca_spca1528: reg_r err -71 [ 279.907675][ T7398] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 279.930671][ T7398] usb 4-1: USB disconnect, device number 15 [ 280.208961][ T7686] syz_tun: left allmulticast mode [ 280.370338][ T7416] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 281.012549][ T7416] usb 5-1: config 0 has no interfaces? [ 281.041883][ T7416] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 281.051015][ T7416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.069645][ T7416] usb 5-1: Product: syz [ 281.088400][ T7416] usb 5-1: Manufacturer: syz [ 281.137450][ T7416] usb 5-1: SerialNumber: syz [ 281.167083][ T7416] usb 5-1: config 0 descriptor?? [ 281.407555][ T7703] kvm: kvm [7699]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc1) = 0x8000 [ 281.437375][ T7703] kvm: kvm [7699]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 281.454223][ T7416] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 281.495682][ T7703] kvm: kvm [7699]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0x11e) = 0xbe70a111 [ 281.587468][ T7703] kvm: kvm [7699]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0x187) = 0x8000 [ 281.719691][ T7416] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.743447][ T7416] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 281.751070][ T7416] usb 4-1: can't read configurations, error -71 [ 282.971572][ T7398] usb 5-1: USB disconnect, device number 16 [ 284.028503][ T7731] lo: entered promiscuous mode [ 284.064266][ T7731] lo: entered allmulticast mode [ 284.072813][ T7731] tunl0: entered promiscuous mode [ 284.078155][ T7731] tunl0: entered allmulticast mode [ 284.090116][ T7731] gre0: entered promiscuous mode [ 284.095801][ T7731] gre0: entered allmulticast mode [ 284.105036][ T7731] gretap0: entered promiscuous mode [ 284.110471][ T7731] gretap0: entered allmulticast mode [ 284.133594][ T7731] erspan0: entered promiscuous mode [ 284.192341][ T7731] ip_vti0: entered promiscuous mode [ 284.197851][ T7731] ip_vti0: entered allmulticast mode [ 284.204634][ T7731] ip6_vti0: entered promiscuous mode [ 284.210151][ T7731] ip6_vti0: entered allmulticast mode [ 284.217121][ T7731] sit0: entered promiscuous mode [ 284.222340][ T7731] sit0: entered allmulticast mode [ 284.228409][ T7731] ip6tnl0: entered promiscuous mode [ 284.233911][ T7731] ip6tnl0: entered allmulticast mode [ 284.240579][ T7731] ip6gre0: entered promiscuous mode [ 284.246380][ T7731] ip6gre0: entered allmulticast mode [ 284.254181][ T7731] syz_tun: entered promiscuous mode [ 284.259784][ T7731] syz_tun: entered allmulticast mode [ 284.266190][ T7731] ip6gretap0: entered allmulticast mode [ 284.272752][ T7731] bridge0: entered promiscuous mode [ 284.278114][ T7731] bridge0: entered allmulticast mode [ 284.284488][ T7731] vcan0: entered promiscuous mode [ 284.289674][ T7731] vcan0: entered allmulticast mode [ 284.295474][ T7731] bond0: entered promiscuous mode [ 284.311493][ T7731] bond0: entered allmulticast mode [ 284.318447][ T7731] team0: entered promiscuous mode [ 284.323711][ T7731] team0: entered allmulticast mode [ 284.330156][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.338275][ T7731] dummy0: entered promiscuous mode [ 284.343694][ T7731] dummy0: entered allmulticast mode [ 284.352108][ T7731] nlmon0: entered promiscuous mode [ 284.357437][ T7731] nlmon0: entered allmulticast mode [ 284.367704][ T7398] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.551815][ T7731] caif0: entered promiscuous mode [ 284.557742][ T7731] caif0: entered allmulticast mode [ 284.563340][ T7731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.581980][ T7398] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.592678][ T7398] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.613990][ T7398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.685517][ T7398] usb 5-1: config 0 descriptor?? [ 284.695149][ T7398] pwc: Askey VC010 type 2 USB webcam detected. [ 284.929170][ T7398] pwc: send_video_command error -71 [ 285.042040][ T7398] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 285.060621][ T7398] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 285.119755][ T7398] usb 5-1: USB disconnect, device number 17 [ 285.492446][ T7398] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 285.668323][ T7398] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.679262][ T7398] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.699083][ T7398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.742633][ T7398] usb 5-1: config 0 descriptor?? [ 285.804905][ T7398] pwc: Askey VC010 type 2 USB webcam detected. [ 286.167573][ T7398] pwc: recv_control_msg error -32 req 02 val 2b00 [ 286.175711][ T7398] pwc: recv_control_msg error -32 req 02 val 2700 [ 286.187541][ T7398] pwc: recv_control_msg error -32 req 02 val 2c00 [ 286.198113][ T7398] pwc: recv_control_msg error -32 req 04 val 1000 [ 286.217489][ T7398] pwc: recv_control_msg error -32 req 04 val 1300 [ 286.233291][ T7398] pwc: recv_control_msg error -32 req 04 val 1400 [ 286.241262][ T7398] pwc: recv_control_msg error -32 req 02 val 2000 [ 286.252814][ T7398] pwc: recv_control_msg error -32 req 02 val 2100 [ 286.265565][ T7398] pwc: recv_control_msg error -32 req 04 val 1500 [ 286.284988][ T7398] pwc: recv_control_msg error -32 req 02 val 2500 [ 286.498497][ T7398] pwc: recv_control_msg error -71 req 02 val 2600 [ 286.517700][ T7398] pwc: recv_control_msg error -71 req 02 val 2900 [ 286.537507][ T7398] pwc: recv_control_msg error -71 req 02 val 2800 [ 286.568268][ T7398] pwc: recv_control_msg error -71 req 04 val 1100 [ 286.576424][ T7398] pwc: recv_control_msg error -71 req 04 val 1200 [ 286.625703][ T7398] pwc: Registered as video103. [ 286.656948][ T7398] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 286.693263][ T7398] usb 5-1: USB disconnect, device number 18 [ 288.161459][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 288.331206][ T7756] bond1: (slave erspan0): Releasing active interface [ 289.151544][ T7395] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.388608][ T7756] bond0: (slave batadv0): Releasing backup interface [ 289.407969][ T7756] batadv0: left promiscuous mode [ 289.452125][ T7395] usb 1-1: Using ep0 maxpacket: 16 [ 289.477626][ T7395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 289.491495][ T7395] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 289.504995][ T7395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.515877][ T7395] usb 1-1: Product: syz [ 289.520113][ T7395] usb 1-1: Manufacturer: syz [ 289.527272][ T7756] batadv0: left allmulticast mode [ 289.536823][ T7756] bridge_slave_0: left allmulticast mode [ 289.547248][ T7395] usb 1-1: SerialNumber: syz [ 289.552130][ T7756] bridge_slave_0: left promiscuous mode [ 289.575258][ T9] usb 4-1: config 0 has no interfaces? [ 289.599631][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.610696][ T7395] usb 1-1: config 0 descriptor?? [ 289.643709][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.663028][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.673421][ T9] usb 4-1: Product: syz [ 289.683523][ T9] usb 4-1: Manufacturer: syz [ 289.688272][ T9] usb 4-1: SerialNumber: syz [ 289.754472][ T7756] bridge_slave_1: left allmulticast mode [ 289.760451][ T7756] bridge_slave_1: left promiscuous mode [ 289.767241][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.780646][ T9] usb 4-1: config 0 descriptor?? [ 289.808797][ T7395] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 290.069487][ T3493] usb 1-1: Failed to submit usb control message: -71 [ 290.076980][ T3493] usb 1-1: unable to send the bmi data to the device: -71 [ 290.084448][ T9] usb 1-1: USB disconnect, device number 15 [ 290.094828][ T3493] usb 1-1: unable to get target info from device [ 290.142335][ T7756] bond0: (slave bond_slave_0): Releasing backup interface [ 290.172426][ T7756] bond_slave_0: left promiscuous mode [ 290.193122][ T7756] bond_slave_0: left allmulticast mode [ 290.202989][ T3493] usb 1-1: could not get target info (-71) [ 290.212814][ T3493] usb 1-1: could not probe fw (-71) [ 290.245191][ T7756] bond0: (slave bond_slave_1): Releasing backup interface [ 290.364194][ T7756] bond_slave_1: left promiscuous mode [ 290.374148][ T7756] bond_slave_1: left allmulticast mode [ 290.409260][ T7756] team_slave_0: left promiscuous mode [ 290.425986][ T7756] team_slave_0: left allmulticast mode [ 290.501162][ T7756] team0: Port device team_slave_0 removed [ 290.514075][ T7756] team_slave_1: left promiscuous mode [ 290.519763][ T7756] team_slave_1: left allmulticast mode [ 290.539980][ T7756] team0: Port device team_slave_1 removed [ 290.549589][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.559869][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.618632][ T7756] vxlan0: left promiscuous mode [ 290.628396][ T7756] vxlan0: left allmulticast mode [ 290.650411][ T7756] team0: Port device vxlan0 removed [ 290.672910][ T7756] bond1: (slave veth3): Releasing active interface [ 290.725382][ T7752] pimreg: entered allmulticast mode [ 290.739646][ T7757] pimreg: left allmulticast mode [ 291.884668][ T5841] usb 4-1: USB disconnect, device number 18 [ 292.721778][ T7395] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 293.576857][ T7395] usb 2-1: config 0 has no interfaces? [ 293.635774][ T7395] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.919166][ T7395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.106612][ T7395] usb 2-1: Product: syz [ 294.158605][ T7395] usb 2-1: Manufacturer: syz [ 294.322127][ T7395] usb 2-1: SerialNumber: syz [ 294.500207][ T7395] usb 2-1: config 0 descriptor?? [ 295.564861][ T7416] usb 2-1: USB disconnect, device number 12 [ 296.017640][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 296.078922][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 296.092809][ T7825] kvm: user requested TSC rate below hardware speed [ 296.361955][ T7395] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 296.661579][ T7395] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.679650][ T7395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.692519][ T7395] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 296.834096][ T7395] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.874876][ T7395] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.891401][ T7395] usb 1-1: Manufacturer: syz [ 296.910646][ T7395] usb 1-1: config 0 descriptor?? [ 297.721709][ T7395] usb 1-1: USB disconnect, device number 16 [ 298.250129][ T7846] netlink: 'syz.1.496': attribute type 16 has an invalid length. [ 298.291147][ T7846] netlink: 'syz.1.496': attribute type 17 has an invalid length. [ 298.511477][ T7416] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 298.691363][ T7416] usb 5-1: Using ep0 maxpacket: 8 [ 298.705078][ T7416] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 298.713882][ T7416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.731442][ T7416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.741578][ T7416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.751967][ T7416] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.765916][ T7416] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.795529][ T7416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.171567][ T7416] usb 5-1: usb_control_msg returned -32 [ 299.221563][ T7416] usbtmc 5-1:16.0: can't read capabilities [ 299.301745][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 299.497006][ T5841] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.527399][ T5841] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.536930][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.549338][ T5841] usb 1-1: Product: syz [ 299.555010][ T5841] usb 1-1: Manufacturer: syz [ 299.570143][ T5841] usb 1-1: SerialNumber: syz [ 299.921821][ T7872] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 300.034280][ T5841] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 300.109550][ T5903] usb 5-1: USB disconnect, device number 19 [ 300.194202][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 300.208750][ T5841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.219058][ T5841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.328178][ T5841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.572822][ T5841] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.784152][ T5841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.793440][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.039390][ T5841] usb 4-1: usb_control_msg returned -32 [ 301.050347][ T5841] usbtmc 4-1:16.0: can't read capabilities [ 301.461369][ T7878] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 301.663465][ T9] usb 4-1: USB disconnect, device number 19 [ 302.097706][ T7416] usb 1-1: USB disconnect, device number 17 [ 302.395666][ T7890] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 302.402442][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.683091][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 303.061395][ T7416] vhci_hcd: vhci_device speed not set [ 303.451715][ T7416] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 303.661430][ T7894] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 303.667751][ T7893] vhci_hcd: connection closed [ 303.667994][ T7837] vhci_hcd: stop threads [ 303.708209][ T7837] vhci_hcd: release socket [ 303.825223][ T7837] vhci_hcd: disconnect device [ 305.024307][ T7913] syzkaller1: entered promiscuous mode [ 305.029860][ T7913] syzkaller1: entered allmulticast mode [ 306.634593][ T7415] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 307.013276][ T7415] usb 1-1: config 0 has no interfaces? [ 307.051404][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 307.095254][ T7415] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.145254][ T7415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.174172][ T7415] usb 1-1: Product: syz [ 307.206127][ T7415] usb 1-1: Manufacturer: syz [ 307.224816][ T7415] usb 1-1: SerialNumber: syz [ 307.235564][ T7415] usb 1-1: config 0 descriptor?? [ 308.571418][ T7416] vhci_hcd: vhci_device speed not set [ 309.332791][ T7415] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 309.504904][ T7415] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 309.625344][ T7415] usb 4-1: config 0 has no interface number 0 [ 309.668129][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 309.730647][ T7415] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 309.829099][ T7415] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66 [ 309.861438][ T7415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.875869][ T5888] usb 1-1: USB disconnect, device number 18 [ 309.954250][ T7415] usb 4-1: config 0 descriptor?? [ 310.176809][ T7415] usb 4-1: string descriptor 0 read error: -71 [ 310.206086][ T7415] usbtest 4-1:0.138: Linux gadget zero [ 310.217419][ T7415] usbtest 4-1:0.138: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 310.832493][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.850357][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.863419][ T7415] usb 4-1: USB disconnect, device number 20 [ 310.875918][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.885530][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.895076][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.904759][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.914456][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 310.923898][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 311.235009][ T7973] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 311.590311][ T7973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.812089][ T7977] bond1: (slave gretap1): making interface the new active one [ 311.860969][ T7977] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 313.039785][ T7988] __nla_validate_parse: 43 callbacks suppressed [ 313.039805][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.533'. [ 313.078318][ T7983] cgroup: fork rejected by pids controller in /syz2 [ 313.193107][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 313.761688][ T8514] binder: 8099:8514 ioctl c0306201 800003c0 returned -14 [ 314.513210][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 316.654799][ T8756] veth1_vlan: default FDB implementation only supports local addresses [ 317.363035][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 317.893986][ T8789] input: syz1 as /devices/virtual/input/input12 [ 317.981714][ T7416] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 318.160888][ T7416] usb 5-1: config 1 interface 0 has no altsetting 0 [ 318.169953][ T7416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 318.190476][ T7416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.199015][ T7416] usb 5-1: Product: syz [ 318.203988][ T7416] usb 5-1: Manufacturer: syz [ 318.208651][ T7416] usb 5-1: SerialNumber: syz [ 318.969640][ T7416] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 320.472178][ T7416] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 320.625662][ T7416] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 320.661999][ T7416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.670210][ T7416] usb 3-1: Product: syz [ 320.700632][ T7416] usb 3-1: Manufacturer: syz [ 320.719722][ T7416] usb 3-1: SerialNumber: syz [ 320.741112][ T7416] usb 3-1: config 0 descriptor?? [ 320.759381][ T7416] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 321.100651][ T5888] usb 5-1: USB disconnect, device number 20 [ 321.129621][ T5888] usblp0: removed [ 321.257998][ T8825] syzkaller0: entered allmulticast mode [ 321.300005][ T7416] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 321.309821][ T7416] sq905c 3-1:0.0: Reading version command failed [ 321.422395][ T7416] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 321.456873][ T7416] usb 3-1: USB disconnect, device number 16 [ 321.890059][ T8832] input: syz0 as /devices/virtual/input/input15 [ 322.394220][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.401939][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.994829][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 325.040410][ T8852] ptrace attach of ""[8854] was attempted by "./syz-executor exec"[8852] [ 325.068384][ T8856] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 325.077750][ T8856] netlink: 17 bytes leftover after parsing attributes in process `syz.4.566'. [ 325.111796][ T8852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.575'. [ 325.237339][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 326.201424][ T7416] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 326.210197][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 326.445660][ T7416] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.471490][ T7416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.497887][ T7416] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.584845][ T7416] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 326.602761][ T7416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.870579][ T7416] usb 2-1: Product: syz [ 326.880823][ T7416] usb 2-1: Manufacturer: syz [ 327.405929][ T7416] usb 2-1: SerialNumber: syz [ 327.429945][ T7416] usb 2-1: config 0 descriptor?? [ 327.458372][ T7416] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 327.474483][ T7416] em28xx 2-1:0.0: Video interface 0 found: isoc [ 328.045485][ T5890] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 328.221518][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 328.229824][ T5890] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 328.239484][ T5890] usb 3-1: config 0 has no interface number 0 [ 328.250684][ T5890] usb 3-1: config 0 interface 12 has no altsetting 0 [ 328.313474][ T5890] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 328.536449][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.572031][ T5890] usb 3-1: Product: syz [ 328.579619][ T5890] usb 3-1: Manufacturer: syz [ 328.588743][ T5890] usb 3-1: SerialNumber: syz [ 328.604634][ T5890] usb 3-1: config 0 descriptor?? [ 328.635868][ T7416] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 328.876723][ T8895] input: syz0 as /devices/virtual/input/input16 [ 328.995930][ T7416] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 329.048601][ T7416] em28xx 2-1:0.0: board has no eeprom [ 329.141628][ T7416] em28xx 2-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 329.266600][ T7416] em28xx 2-1:0.0: analog set to isoc mode. [ 329.279178][ T9] em28xx 2-1:0.0: Registering V4L2 extension [ 329.604076][ T9] em28xx 2-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 329.697529][ T9] em28xx 2-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 329.755189][ T9] em28xx 2-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 329.778326][ T5903] usb 2-1: USB disconnect, device number 13 [ 329.779242][ T9] em28xx 2-1:0.0: reading from i2c device at 0x40 failed (error=-19) [ 329.808912][ T9] em28xx 2-1:0.0: Config register raw data: 0xffffffed [ 329.823201][ T5903] em28xx 2-1:0.0: Disconnecting em28xx [ 329.829521][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 329.840931][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 329.863611][ T9] usb 2-1: Decoder not found [ 329.876610][ T9] em28xx 2-1:0.0: failed to create media graph [ 329.969006][ T9] em28xx 2-1:0.0: V4L2 device video103 deregistered [ 330.016207][ T9] em28xx 2-1:0.0: Remote control support is not available for this card. [ 330.080448][ T5903] em28xx 2-1:0.0: Closing input extension [ 330.215691][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 330.267828][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.285295][ T8900] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 330.317429][ T5903] em28xx 2-1:0.0: Freeing device [ 330.409264][ T8900] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 330.477082][ T8900] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 330.540037][ T8900] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 332.319658][ T5890] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 332.451505][ T5890] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 332.491420][ T5890] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 332.520730][ T5890] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 332.666410][ T5890] usb 3-1: USB disconnect, device number 17 [ 332.972719][ T8920] ptrace attach of ""[8921] was attempted by "./syz-executor exec"[8920] [ 333.036079][ T8920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 333.971359][ T7416] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 334.051367][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 334.209870][ T7416] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 334.220115][ T7416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.239639][ T7416] usb 2-1: config 0 descriptor?? [ 334.302853][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 334.312833][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 334.326808][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.344502][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.355335][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.379418][ T5888] usb 4-1: Product: syz [ 334.388978][ T5888] usb 4-1: Manufacturer: syz [ 334.404174][ T5888] usb 4-1: SerialNumber: syz [ 334.446296][ T5888] usb 4-1: config 0 descriptor?? [ 334.508312][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.532866][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 334.749422][ T8945] lo: entered promiscuous mode [ 334.754539][ T8945] lo: entered allmulticast mode [ 334.764755][ T8945] tunl0: entered promiscuous mode [ 334.773674][ T8945] tunl0: entered allmulticast mode [ 334.781239][ T8945] gre0: entered promiscuous mode [ 334.786938][ T8945] gre0: entered allmulticast mode [ 334.799154][ T8945] gretap0: entered promiscuous mode [ 334.804584][ T8945] gretap0: entered allmulticast mode [ 334.813135][ T8945] erspan0: entered promiscuous mode [ 334.818853][ T8945] erspan0: entered allmulticast mode [ 334.828357][ T8945] ip_vti0: entered promiscuous mode [ 334.834272][ T8945] ip_vti0: entered allmulticast mode [ 334.842776][ T8945] ip6_vti0: entered promiscuous mode [ 334.848292][ T8945] ip6_vti0: entered allmulticast mode [ 334.857377][ T8945] sit0: entered promiscuous mode [ 334.863022][ T8945] sit0: entered allmulticast mode [ 334.878797][ T8945] ip6tnl0: entered promiscuous mode [ 334.884492][ T8945] ip6tnl0: entered allmulticast mode [ 334.892576][ T8945] ip6gre0: entered promiscuous mode [ 334.898195][ T8945] ip6gre0: entered allmulticast mode [ 334.906402][ T8945] syz_tun: entered promiscuous mode [ 334.912057][ T8945] syz_tun: entered allmulticast mode [ 334.920791][ T8945] ip6gretap0: entered promiscuous mode [ 334.927312][ T8945] ip6gretap0: entered allmulticast mode [ 334.936563][ T8945] vcan0: entered promiscuous mode [ 334.942039][ T8945] vcan0: entered allmulticast mode [ 334.948872][ T8945] bond0: entered promiscuous mode [ 334.954289][ T8945] bond_slave_0: entered promiscuous mode [ 334.960442][ T8945] bond_slave_1: entered promiscuous mode [ 334.966813][ T8945] vxlan0: entered promiscuous mode [ 334.972529][ T8945] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 334.980242][ T8945] bond0: entered allmulticast mode [ 334.985625][ T8945] bond_slave_0: entered allmulticast mode [ 334.991819][ T8945] bond_slave_1: entered allmulticast mode [ 334.997833][ T8945] vxlan0: entered allmulticast mode [ 335.003420][ T8945] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 335.013320][ T5903] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 335.031913][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.047674][ T8945] team0: entered promiscuous mode [ 335.053178][ T8945] team_slave_0: entered promiscuous mode [ 335.060740][ T8945] team_slave_1: entered promiscuous mode [ 335.070943][ T8945] team0: entered allmulticast mode [ 335.089384][ T8945] team_slave_0: entered allmulticast mode [ 335.099736][ T8945] team_slave_1: entered allmulticast mode [ 335.301480][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 335.341907][ T8945] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.366920][ T8945] dummy0: entered promiscuous mode [ 335.372480][ T8945] dummy0: entered allmulticast mode [ 335.386029][ T8945] nlmon0: entered promiscuous mode [ 335.392210][ T8945] nlmon0: entered allmulticast mode [ 335.431706][ T5903] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.441510][ T8945] caif0: entered promiscuous mode [ 335.471407][ T8945] caif0: entered allmulticast mode [ 335.479483][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 335.486552][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 335.494027][ T8945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.510705][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.657450][ T5903] usb 5-1: Product: syz [ 335.680815][ T5903] usb 5-1: Manufacturer: syz [ 335.694959][ T5903] usb 5-1: SerialNumber: syz [ 335.740774][ T5903] usb 5-1: config 0 descriptor?? [ 336.126844][ T5903] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.128361][ T5888] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 336.149231][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 336.159836][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 336.170306][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 336.933904][ T7416] usb 2-1: USB disconnect, device number 14 [ 337.032694][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 337.104360][ T5888] usb 4-1: USB disconnect, device number 21 [ 338.014444][ T5903] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 338.029162][ T5903] usb 5-1: USB disconnect, device number 21 [ 339.261461][ T8965] ptrace attach of ""[8966] was attempted by "./syz-executor exec"[8965] [ 339.519557][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.595'. [ 340.941728][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 341.281581][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 341.292321][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.302885][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.318575][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.328326][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.344681][ T43] usb 5-1: Product: syz [ 341.351032][ T43] usb 5-1: Manufacturer: syz [ 341.359396][ T43] usb 5-1: SerialNumber: syz [ 341.707922][ T43] usb 5-1: 0:2 : does not exist [ 341.743834][ T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 341.914691][ T43] usb 5-1: USB disconnect, device number 22 [ 343.801434][ T5888] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 344.042718][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 344.173338][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.204306][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.530963][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.544622][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.584626][ T5888] usb 1-1: Product: syz [ 344.591618][ T5888] usb 1-1: Manufacturer: syz [ 344.602399][ T5888] usb 1-1: SerialNumber: syz [ 344.937848][ T5888] usb 1-1: 0:2 : does not exist [ 344.968680][ T5888] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 345.081733][ T9003] input: syz0 as /devices/virtual/input/input17 [ 345.320760][ T5888] usb 1-1: USB disconnect, device number 19 [ 345.532016][ T7416] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 345.548214][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.761516][ T7416] usb 2-1: Using ep0 maxpacket: 8 [ 348.288627][ T7416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.299113][ T7416] usb 2-1: no configurations [ 348.312162][ T7416] usb 2-1: can't read configurations, error -22 [ 351.257091][ T9046] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 351.361166][ T9046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.486869][ T9049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.518618][ T9049] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 351.544735][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 351.557754][ T9049] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 351.641425][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 351.694464][ T9046] veth7: entered promiscuous mode [ 351.725108][ T9046] bond3: (slave veth7): Enslaving as an active interface with a down link [ 351.739690][ T9051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.834315][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 351.865615][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.947395][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.971447][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.986401][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.009828][ T43] usb 2-1: Product: syz [ 352.018781][ T43] usb 2-1: Manufacturer: syz [ 352.036043][ T43] usb 2-1: SerialNumber: syz [ 352.278792][ T43] usb 2-1: 0:2 : does not exist [ 352.294701][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 352.367620][ T43] usb 2-1: USB disconnect, device number 17 [ 352.469337][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.921418][ T7416] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 353.141939][ T7416] usb 4-1: Using ep0 maxpacket: 8 [ 353.202116][ T7416] usb 4-1: config 0 has no interfaces? [ 353.207742][ T7416] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 353.319697][ T7416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.346668][ T7416] usb 4-1: config 0 descriptor?? [ 353.626772][ T7416] usb 4-1: USB disconnect, device number 22 [ 353.720070][ T9078] vlan0: entered promiscuous mode [ 354.225766][ T9083] veth0_to_hsr: entered promiscuous mode [ 354.421574][ T9083] veth0_to_hsr: entered allmulticast mode [ 354.485759][ T9083] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 355.081333][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.264018][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.272561][ T43] usb 3-1: config 0 has no interface number 0 [ 355.289775][ T43] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 355.312620][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.332684][ T43] usb 3-1: Product: syz [ 355.346149][ T43] usb 3-1: Manufacturer: syz [ 355.359421][ T43] usb 3-1: SerialNumber: syz [ 355.379330][ T43] usb 3-1: config 0 descriptor?? [ 355.550406][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 355.667918][ T43] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 355.680267][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.711696][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 355.744662][ T43] usb 3-1: media controller created [ 355.783234][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.459414][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 356.517710][ T9111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.537095][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 356.615615][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 356.622236][ T9116] netlink: 'syz.4.636': attribute type 10 has an invalid length. [ 357.058073][ T43] usb 3-1: USB disconnect, device number 18 [ 357.129771][ T9116] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 357.151636][ T9116] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 357.213040][ T9116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 357.821572][ T5903] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 358.013234][ T5903] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 358.024045][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.037598][ T5903] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 358.047016][ T5903] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 358.055173][ T5903] usb 2-1: Manufacturer: syz [ 358.069374][ T5903] usb 2-1: config 0 descriptor?? [ 358.131543][ T5903] rc_core: IR keymap rc-hauppauge not found [ 358.137728][ T5903] Registered IR keymap rc-empty [ 358.150976][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 358.164301][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 358.294584][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 358.303961][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.314973][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.327624][ T5888] usb 2-1: USB disconnect, device number 18 [ 359.293330][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 362.739725][ T9172] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 362.928408][ T9172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.009331][ T9176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.042673][ T9176] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.088975][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 363.101388][ T9176] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 363.154294][ T9177] veth3: entered promiscuous mode [ 363.207528][ T9177] bond1: (slave veth3): Enslaving as an active interface with a down link [ 363.577845][ T9172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.892390][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 364.014195][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 364.770470][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 364.972237][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 364.984405][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.998913][ T9205] ip6erspan0: entered promiscuous mode [ 365.021152][ T9] usb 2-1: config 0 has no interface number 0 [ 365.063661][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 365.127476][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.281131][ T9] usb 2-1: Product: syz [ 365.308127][ T9] usb 2-1: Manufacturer: syz [ 365.326599][ T9] usb 2-1: SerialNumber: syz [ 365.512089][ T9] usb 2-1: config 0 descriptor?? [ 365.573482][ T9] smsc95xx v2.0.0 [ 366.042772][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 366.066310][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 368.652118][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 368.663496][ T5888] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 368.674074][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 368.689917][ T9] usb 2-1: USB disconnect, device number 19 [ 368.831524][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 369.203548][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 369.233725][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.418466][ T9231] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 369.523041][ T9231] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 369.530663][ T9231] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 369.557136][ T9231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.749880][ T9254] macsec1: entered promiscuous mode [ 372.766061][ T9254] batadv0: entered promiscuous mode [ 372.782390][ T9254] batadv0: left promiscuous mode [ 372.939578][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.984770][ T5888] usb 5-1: no configurations [ 373.004220][ T5888] usb 5-1: can't read configurations, error -22 [ 373.471448][ T7415] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 373.594131][ T5888] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 373.773501][ T7415] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 373.786415][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.823718][ T7415] usb 3-1: config 0 has no interface number 0 [ 373.848369][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.859662][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 373.870003][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.878857][ T7415] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 373.888105][ T7415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.960884][ T5888] usb 5-1: config 0 descriptor?? [ 373.970737][ T7415] usb 3-1: Product: syz [ 374.006165][ T7415] usb 3-1: Manufacturer: syz [ 374.011141][ T7415] usb 3-1: SerialNumber: syz [ 374.402687][ T7415] usb 3-1: config 0 descriptor?? [ 374.867518][ T5888] logitech 0003:046D:CA04.000A: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 374.900455][ T5888] logitech 0003:046D:CA04.000A: no inputs found [ 375.035291][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.059820][ T9273] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 375.066453][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.087700][ T9273] tipc: Enabled bearer , priority 10 [ 375.466853][ T7415] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 375.729445][ T7415] usb 3-1: Firmware version (0.0) predates our first public release. [ 375.744149][ T7415] usb 3-1: Please update to version 0.2 or newer [ 375.909115][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 376.156515][ T5888] usb 5-1: USB disconnect, device number 24 [ 376.204061][ T5903] tipc: Node number set to 3351563964 [ 376.248152][ T7415] usb 3-1: USB disconnect, device number 19 [ 377.503487][ T7415] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 377.963625][ T7415] usb 5-1: Using ep0 maxpacket: 16 [ 378.219021][ T7415] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 378.621985][ T7415] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 379.007923][ T7415] usb 5-1: string descriptor 0 read error: -22 [ 379.017028][ T7415] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 379.021460][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 379.215722][ T7415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.298342][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 379.331910][ T43] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 379.349749][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 379.563204][ T43] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 379.613700][ T43] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 379.740070][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 379.869118][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 379.889942][ T43] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 379.904486][ T43] usb 1-1: Product: syz [ 379.913914][ T43] usb 1-1: Manufacturer: syz [ 379.930591][ T43] usb 1-1: SerialNumber: syz [ 379.968190][ T43] usb 1-1: config 0 descriptor?? [ 379.990640][ T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 380.129398][ T43] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 380.281725][ T5903] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 380.303591][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.351585][ T7416] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 380.383626][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.514686][ T7416] usb 4-1: config 0 has no interfaces? [ 380.520770][ T7416] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 380.538168][ T5903] usb 2-1: config 0 has no interfaces? [ 380.549240][ T5903] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 380.569946][ T7416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.588388][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.626874][ T7416] usb 4-1: config 0 descriptor?? [ 380.633359][ T5903] usb 2-1: Product: syz [ 380.652834][ T5903] usb 2-1: Manufacturer: syz [ 380.667430][ T5903] usb 2-1: SerialNumber: syz [ 380.712880][ T7416] usb 1-1: USB disconnect, device number 20 [ 380.719000][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 380.836727][ T9314] block device autoloading is deprecated and will be removed. [ 380.845586][ T5903] usb 2-1: config 0 descriptor?? [ 380.846230][ T7416] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 381.480715][ T5903] usb 5-1: USB disconnect, device number 25 [ 382.914466][ T7416] usb 2-1: USB disconnect, device number 20 [ 383.618874][ T7416] usb 4-1: USB disconnect, device number 23 [ 383.860811][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.867544][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.270423][ T9351] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 386.455341][ T5903] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 386.680924][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 386.777046][ T5903] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 386.790366][ T5903] usb 1-1: config 0 has no interface number 0 [ 386.803533][ T5903] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 386.817029][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.833452][ T5903] usb 1-1: Product: syz [ 386.848023][ T5903] usb 1-1: Manufacturer: syz [ 386.853103][ T5903] usb 1-1: SerialNumber: syz [ 386.863533][ T5903] usb 1-1: config 0 descriptor?? [ 387.094545][ T5903] peak_usb 1-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 387.312933][ T5903] peak_usb 1-1:0.56 can0: sending command failure: -22 [ 387.440709][ T5903] peak_usb 1-1:0.56 can0: sending command failure: -22 [ 387.461367][ T5903] peak_usb 1-1:0.56 can0: sending command failure: -22 [ 388.114039][ T9392] veth1_to_bond: entered allmulticast mode [ 388.177112][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 388.299936][ T9394] veth1_to_bond: entered promiscuous mode [ 388.364337][ T5903] peak_usb 1-1:0.56: probe with driver peak_usb failed with error -22 [ 388.382789][ T5903] usb 1-1: USB disconnect, device number 21 [ 388.656967][ T9387] veth1_to_bond: left promiscuous mode [ 388.706447][ T9387] veth1_to_bond: left allmulticast mode [ 389.021336][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 389.220366][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 389.417900][ T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 389.456661][ T43] usb 5-1: config 0 has no interface number 0 [ 389.698071][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.737799][ T9408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.706'. [ 389.761444][ T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 389.845817][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 389.861503][ T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 389.948711][ T43] usb 5-1: Product: syz [ 389.956054][ T43] usb 5-1: SerialNumber: syz [ 389.975742][ T43] usb 5-1: config 0 descriptor?? [ 389.984060][ T43] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 390.006986][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input19 [ 390.306684][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 390.675721][ T9398] netlink: 76 bytes leftover after parsing attributes in process `syz.4.703'. [ 390.730918][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.740772][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.748277][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.755436][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.762583][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.769749][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.777044][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.784242][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.791477][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.798921][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.811449][ T43] usb 5-1: USB disconnect, device number 26 [ 390.817450][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 390.923826][ T43] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 391.710794][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 394.995334][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 395.229213][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 395.295351][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 395.320792][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.345759][ T43] usb 1-1: Product: syz [ 395.350012][ T43] usb 1-1: Manufacturer: syz [ 395.356049][ T43] usb 1-1: SerialNumber: syz [ 395.388752][ T43] usb 1-1: config 0 descriptor?? [ 395.921815][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.732577][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 397.753178][ T43] usb 1-1: USB disconnect, device number 22 [ 397.961795][ T7416] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 398.052234][ T5888] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 398.131657][ T7416] usb 3-1: Using ep0 maxpacket: 32 [ 398.144056][ T7416] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 398.161303][ T7416] usb 3-1: config 0 has no interface number 0 [ 398.167531][ T7416] usb 3-1: config 0 interface 12 has no altsetting 0 [ 398.323799][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 398.334288][ T7416] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 398.341654][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 398.343962][ T7416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.344223][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 398.370262][ T7416] usb 3-1: Product: syz [ 398.445701][ T7416] usb 3-1: Manufacturer: syz [ 398.450407][ T7416] usb 3-1: SerialNumber: syz [ 398.459918][ T7416] usb 3-1: config 0 descriptor?? [ 398.523636][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 398.541705][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 398.546091][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.560011][ T5888] usb 4-1: Product: syz [ 398.562124][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.565562][ T5888] usb 4-1: Manufacturer: syz [ 398.589509][ T5888] usb 4-1: SerialNumber: syz [ 398.592341][ T43] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.780988][ T5888] usb 4-1: config 0 descriptor?? [ 398.790842][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.847033][ T5888] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 399.074565][ T43] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 399.139079][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.192313][ T43] usb 5-1: config 0 descriptor?? [ 399.208387][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 399.506874][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.515813][ T9482] batadv_slave_0: entered promiscuous mode [ 399.588646][ T7415] usb 5-1: USB disconnect, device number 27 [ 399.711352][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 399.867705][ T43] usb 2-1: config 0 has no interfaces? [ 399.873882][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 399.889174][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.960292][ T43] usb 2-1: config 0 descriptor?? [ 400.214849][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.253289][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.277144][ T43] usb 2-1: USB disconnect, device number 21 [ 400.843821][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 401.026199][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.036982][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=e4.df [ 401.064526][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.120618][ T43] usb 2-1: config 0 descriptor?? [ 401.129594][ T43] pwc: Philips PCVC730K (ToUCam Fun)/PCVC830 (ToUCam II) USB webcam detected. [ 401.571705][ T7416] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 401.595346][ T7416] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 401.621111][ T7416] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 401.641504][ T7416] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 401.671506][ T7416] usb 3-1: USB disconnect, device number 20 [ 401.756253][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 401.770228][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 401.802798][ T43] pwc: recv_control_msg error -32 req 04 val 1600 [ 401.921331][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 401.929543][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 401.937780][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 401.945193][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 401.953366][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 401.961373][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 402.173144][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 402.180306][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 402.189141][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 402.203402][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 402.214847][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 402.227551][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 402.236680][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 402.246278][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 402.255479][ T5888] gspca_zc3xx: reg_w_i err -71 [ 402.281607][ T5888] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 402.281969][ T43] pwc: Registered as video103. [ 402.326797][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 402.330295][ T5888] usb 4-1: USB disconnect, device number 24 [ 402.448291][ T43] usb 2-1: USB disconnect, device number 22 [ 406.727858][ T9537] xt_hashlimit: size too large, truncated to 1048576 [ 406.738921][ T9537] xt_hashlimit: overflow, try lower: 9223336852482686975/36028797018968064 [ 407.165911][ T7398] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 407.665803][ T7398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.680387][ T7398] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 407.728646][ T7398] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 407.738356][ T7398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.748544][ T7398] usb 5-1: Product: syz [ 407.762402][ T7398] usb 5-1: Manufacturer: syz [ 407.767259][ T7398] usb 5-1: SerialNumber: syz [ 407.831812][ T7415] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 408.064966][ T7415] usb 4-1: Using ep0 maxpacket: 16 [ 408.200958][ T7398] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 408.214035][ T7415] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 408.223411][ T7415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.241334][ T7415] usb 4-1: Product: syz [ 408.241905][ T5903] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 408.245723][ T7415] usb 4-1: Manufacturer: syz [ 408.268849][ T7415] usb 4-1: SerialNumber: syz [ 408.337273][ T7415] usb 4-1: config 0 descriptor?? [ 408.382861][ T7398] usb 3-1: Using ep0 maxpacket: 16 [ 408.390942][ T7398] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.401844][ T7398] usb 3-1: config 0 has no interfaces? [ 408.416954][ T7398] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 408.472233][ T7398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.503251][ T7398] usb 3-1: Product: syz [ 408.507679][ T7398] usb 3-1: Manufacturer: syz [ 408.513019][ T5903] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.521140][ T5903] usb 1-1: config 0 has no interface number 0 [ 408.561411][ T7398] usb 3-1: SerialNumber: syz [ 408.577980][ T5903] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 408.722728][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.781501][ T7398] usb 3-1: config 0 descriptor?? [ 408.786630][ T5903] usb 1-1: Product: syz [ 408.790845][ T5903] usb 1-1: Manufacturer: syz [ 408.796917][ T5903] usb 1-1: SerialNumber: syz [ 408.881892][ T7415] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 408.889800][ T5903] usb 1-1: config 0 descriptor?? [ 408.913512][ T7415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.937799][ T7415] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 408.960409][ T7415] usb 4-1: media controller created [ 409.060714][ T7415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.086475][ T9549] dtv5100: wlen = 0, aborting. [ 409.111082][ T5903] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 409.140669][ T5903] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.170235][ T5903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 409.179313][ T5903] usb 1-1: media controller created [ 409.196633][ T7415] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 409.327074][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.335840][ T9553] ------------[ cut here ]------------ [ 409.341533][ T9553] usb 4-1: BOGUS control dir, pipe 80001980 doesn't match bRequestType c0 [ 409.352199][ T9553] WARNING: CPU: 1 PID: 9553 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 409.362716][ T9553] Modules linked in: [ 409.366844][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.0.743 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 409.378715][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.389291][ T9553] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 409.395059][ T9553] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 3f 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 34 3d 64 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 409.415434][ T9553] RSP: 0018:ffffc9000b9775f0 EFLAGS: 00010246 [ 409.421987][ T9553] RAX: c7d18563e2536000 RBX: ffff888034031f00 RCX: 0000000000080000 [ 409.430146][ T9553] RDX: ffffc9000bf52000 RSI: 0000000000003f8e RDI: 0000000000003f8f [ 409.438464][ T9553] RBP: 1ffff11028962630 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 409.446880][ T9553] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff888144b13180 [ 409.455081][ T9553] R13: dffffc0000000000 R14: 0000000080001980 R15: ffff88805ae32160 [ 409.463212][ T9553] FS: 0000000000000000(0000) GS:ffff888125d5e000(0063) knlGS:00000000f504eb40 [ 409.472400][ T9553] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 409.479000][ T9553] CR2: 000000008003c000 CR3: 000000002ca6a000 CR4: 00000000003526f0 [ 409.487192][ T9553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.495229][ T9553] DR3: 0000000000001eac DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 409.503349][ T9553] Call Trace: [ 409.506666][ T9553] [ 409.509625][ T9553] usb_start_wait_urb+0x114/0x4c0 [ 409.514862][ T9553] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 409.521114][ T9553] usb_control_msg+0x232/0x3e0 [ 409.526093][ T9553] dtv5100_i2c_msg+0x250/0x330 [ 409.530999][ T9553] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 409.536129][ T9553] __i2c_transfer+0x871/0x2170 [ 409.541103][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.546609][ T9553] ? __pfx___i2c_transfer+0x10/0x10 [ 409.551885][ T9553] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 409.557314][ T9553] ? i2c_transfer+0x120/0x3a0 [ 409.562113][ T9553] i2c_transfer+0x25b/0x3a0 [ 409.566659][ T9553] ? __pfx_i2c_transfer+0x10/0x10 [ 409.571930][ T9553] ? __might_fault+0xb0/0x130 [ 409.576758][ T9553] i2c_transfer_buffer_flags+0x105/0x190 [ 409.582604][ T9553] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 409.588804][ T9553] ? _copy_from_user+0x94/0xb0 [ 409.593651][ T9553] i2cdev_write+0x112/0x1b0 [ 409.598190][ T9553] vfs_writev+0x4b3/0x960 [ 409.602622][ T9553] ? __pfx_i2cdev_write+0x10/0x10 [ 409.607674][ T9553] ? __pfx_vfs_writev+0x10/0x10 [ 409.612724][ T9553] ? __fget_files+0x2a/0x420 [ 409.617462][ T9553] ? __fget_files+0x3a0/0x420 [ 409.622226][ T9553] ? __fget_files+0x2a/0x420 [ 409.626869][ T9553] do_writev+0x14d/0x2d0 [ 409.631285][ T9553] ? __pfx_do_writev+0x10/0x10 [ 409.636120][ T9553] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 409.642858][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.648183][ T9553] __do_fast_syscall_32+0xb6/0x2b0 [ 409.653364][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.658682][ T9553] do_fast_syscall_32+0x34/0x80 [ 409.663630][ T9553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.670188][ T9553] RIP: 0023:0xf705e539 [ 409.674453][ T9553] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 409.694328][ T9553] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 409.702979][ T9553] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000500 [ 409.710975][ T9553] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.719115][ T9553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.727184][ T9553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 409.735304][ T9553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.743513][ T9553] [ 409.746554][ T9553] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.754155][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.0.743 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 409.765802][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.775879][ T9553] Call Trace: [ 409.779181][ T9553] [ 409.782120][ T9553] dump_stack_lvl+0x99/0x250 [ 409.786730][ T9553] ? __asan_memcpy+0x40/0x70 [ 409.791341][ T9553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.796561][ T9553] ? __pfx__printk+0x10/0x10 [ 409.801179][ T9553] panic+0x2db/0x790 [ 409.805109][ T9553] ? __pfx_panic+0x10/0x10 [ 409.809648][ T9553] __warn+0x31b/0x4b0 [ 409.813741][ T9553] ? usb_submit_urb+0x115d/0x1890 [ 409.818957][ T9553] ? usb_submit_urb+0x115d/0x1890 [ 409.824016][ T9553] report_bug+0x2be/0x4f0 [ 409.828368][ T9553] ? usb_submit_urb+0x115d/0x1890 [ 409.833407][ T9553] ? usb_submit_urb+0x115d/0x1890 [ 409.838444][ T9553] ? usb_submit_urb+0x115f/0x1890 [ 409.843480][ T9553] handle_bug+0x84/0x160 [ 409.847821][ T9553] exc_invalid_op+0x1a/0x50 [ 409.852446][ T9553] asm_exc_invalid_op+0x1a/0x20 [ 409.857332][ T9553] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 409.863109][ T9553] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 3f 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 34 3d 64 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 409.882953][ T9553] RSP: 0018:ffffc9000b9775f0 EFLAGS: 00010246 [ 409.889332][ T9553] RAX: c7d18563e2536000 RBX: ffff888034031f00 RCX: 0000000000080000 [ 409.898014][ T9553] RDX: ffffc9000bf52000 RSI: 0000000000003f8e RDI: 0000000000003f8f [ 409.906114][ T9553] RBP: 1ffff11028962630 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 409.914101][ T9553] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff888144b13180 [ 409.922084][ T9553] R13: dffffc0000000000 R14: 0000000080001980 R15: ffff88805ae32160 [ 409.930090][ T9553] usb_start_wait_urb+0x114/0x4c0 [ 409.935134][ T9553] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 409.940739][ T9553] usb_control_msg+0x232/0x3e0 [ 409.945870][ T9553] dtv5100_i2c_msg+0x250/0x330 [ 409.951018][ T9553] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 409.956092][ T9553] __i2c_transfer+0x871/0x2170 [ 409.960879][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.966207][ T9553] ? __pfx___i2c_transfer+0x10/0x10 [ 409.971462][ T9553] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 409.976861][ T9553] ? i2c_transfer+0x120/0x3a0 [ 409.981605][ T9553] i2c_transfer+0x25b/0x3a0 [ 409.986156][ T9553] ? __pfx_i2c_transfer+0x10/0x10 [ 409.991341][ T9553] ? __might_fault+0xb0/0x130 [ 409.996352][ T9553] i2c_transfer_buffer_flags+0x105/0x190 [ 410.002147][ T9553] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 410.008327][ T9553] ? _copy_from_user+0x94/0xb0 [ 410.013286][ T9553] i2cdev_write+0x112/0x1b0 [ 410.017815][ T9553] vfs_writev+0x4b3/0x960 [ 410.022160][ T9553] ? __pfx_i2cdev_write+0x10/0x10 [ 410.027320][ T9553] ? __pfx_vfs_writev+0x10/0x10 [ 410.032381][ T9553] ? __fget_files+0x2a/0x420 [ 410.036992][ T9553] ? __fget_files+0x3a0/0x420 [ 410.041791][ T9553] ? __fget_files+0x2a/0x420 [ 410.046492][ T9553] do_writev+0x14d/0x2d0 [ 410.050868][ T9553] ? __pfx_do_writev+0x10/0x10 [ 410.055678][ T9553] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 410.062389][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.067714][ T9553] __do_fast_syscall_32+0xb6/0x2b0 [ 410.072853][ T9553] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.078081][ T9553] do_fast_syscall_32+0x34/0x80 [ 410.083002][ T9553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.089360][ T9553] RIP: 0023:0xf705e539 [ 410.093454][ T9553] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 410.113521][ T9553] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 410.122139][ T9553] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000500 [ 410.130132][ T9553] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.138118][ T9553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.146203][ T9553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 410.154314][ T9553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.162329][ T9553] [ 410.165764][ T9553] Kernel Offset: disabled [ 410.170342][ T9553] Rebooting in 86400 seconds..