last executing test programs: 9.734477732s ago: executing program 3 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x26, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x2, 0xb2}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f0000000380)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r13 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000002080)={0x30000008}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224000101033005090400080103016f3933faff00010122b00b090581"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) 9.411669752s ago: executing program 0 (id=1505): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = userfaultfd(0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28840, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x200180) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000180)={0x8001, &(0x7f0000000100)="1fda257fb5172867de3b328718924ff440d0e6dae52fb8dcaf366592e408d4d53e6aca6f5e128339f343fa18704f495b239eba9da7d0028f7353e19c70edc940f3afe3b899e7fa4ffefffe22202f068dd50ab7005aaf0f8156ddf614853647c89a09"}) r4 = dup(r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x101) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) getpeername$qrtr(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = syz_open_dev$I2C(&(0x7f0000000240), 0x6, 0x400) ioctl$I2C_SLAVE(r5, 0x703, 0x252) r6 = signalfd(r3, &(0x7f0000000280)={[0x101]}, 0x8) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f00000002c0)=0x2, 0x4) syz_usb_connect(0x1, 0xad5, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xd, 0xb3, 0xc5, 0xff, 0x19d2, 0x1168, 0x7af1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac3, 0x3, 0x1, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0xd7, 0x9, 0x4, 0xff, 0xff, 0xff, 0x86, [@generic={0x49, 0x3, "b00acc1f6c11f5f3e55252946fc4e6d11e4cd8c599ecd14ed53b679c5baa19a6684014a2f99cf1d8b2540c7db6ee52b049c464101f5a0fd8ef152e0f39231575ff16e580081b2d"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, "db1c", "811c"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3, 0x5, 'B'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x9, "7d50f0"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x85, 0x2, 0x7, 0x4, "98"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x749, 0x800, 0x0, "c128c2285311780d"}]}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0xf7, 0x2, 0xfd}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xc, 0x9, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x2b, 0x9}}]}}, {{0x9, 0x4, 0xe7, 0x0, 0xf, 0xff, 0x3, 0x4, 0x7f, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x0, "197c22d7"}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "615b92d526"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x7, 0x1}}], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x600, 0xf, 0xe, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x9, 0x6, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x81, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xed, 0xffa3}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x29, 0x100}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x8c, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0x83, 0x24, "b6b80bb0b7667c6afc4645a7b507ac5a332e1e38961b843e22897458481ae127b362e4d4ae23fc272f58214d1255f496f7d90db13ba30001deb035ccacfa173c55254da9fd6b4ded1f971852fa4717b7a69ca50c373cb07a88e16ee30dfa0a8e14a0ec1c58397c80e13d6bce23fdfff6806cd63b3306fa73b99e6d64983d148267"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x7, 0x7c, [@generic={0xb5, 0x22, "64e44a4296eca7d30f01a8c9fa26cda05fdb0c7ffbf49024972bc6a833a3dcf264ac40237274d5d0e459cf9bc63290ee0f79d1597e9a9b255368b2e5742c47b3cde7705dee11f8305647dcb4f092580c7697eee6eb3fbf9a289b2be922d5d893812aee22e3b2f973f596e71e1e01d5adcc0eb6c6044518e00587438d5431029b864e86e1b21e5bd3e5292c831ccfc00049ed9afdec33fdc39e2556121f8e558a68c5cfc3affc17a2461626a8d6b17af0fdf6e5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x1, 0xb, [@generic={0x38, 0xf, "4b9c56262355e2b25c9d56107802c0712dac55384f6b7f6277a4b74ef1ba55451640e81c3328b7051d7685556337148e9f298bc0a54f"}, @generic={0x8b, 0x21, "48bd70344fa3c71d84829223c18abb3f255a11155f3f59979fde00eb7815233af10bec15928b41e494428a083fe5c5481d3a1993ed0df2b9f7993f221ae7d8e1451c93271c128f0edf118cad7317e38878369453a577fca97fdf4496d044d47377d2658f57bda89cfde8a744fa226119aa34fd779af87caff11e7edb736662940d425d6b508cb8274a"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x1, 0x2, [@generic={0x3c, 0x4, "fc8db5285e20147808445644709ad21b00a91f69e45d6c74ea668f1b19bf5e2765b5999cfcf365ae6db97f63212ee4f65248baae49f583a2ae99"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3df, 0x7, 0xa6, 0x18, [@generic={0x85, 0x4, "be7bea2196d81fe9323b9ad5e73c602ca0bfa0c185fcd00a5d74e4e24d37caff566537bdb296efb8bd3b14b85959ad019e87b06b0a470e3c36f02b1b087fed2bca91ef3c32a8c8742bbb54865621b0c91f33ebce9384b9bd8ab4d61e1f4c738bfed9df40618d6cd9582af5617b6d2639853600f72949962792a256b01b33ab63f84d42"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x1, 0xf}}, {{0x9, 0x5, 0x4, 0x4, 0x620, 0x3, 0xfb, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xb0, 0x7, 0x26, [@generic={0x31, 0x22, "29f8ba404b0691ce57fc7b674d3176bb848ec0702dd7d7c5d83319d52bf423448420f28fd9e5c9d93e7752dbbd0470"}, @generic={0x1f, 0x8, "071eeb130d6e0ddd19e6d22b2a28eae7fc007aab4907fd20ca85201ad3"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xf1ed}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xf}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xa, 0x7c, 0x2}}]}}, {{0x9, 0x4, 0xbd, 0x1, 0x10, 0x5, 0xc3, 0x62, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x13}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x4, 0x86, 0x7, 0x20, 0xfb}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x5, 0x9, 0x2], 0xd}]}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x2, 0xe, 0x8}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x8, 0x2, 0x8, [@generic={0x1b, 0x7, "9f0a4605c9ac826c50622f99ac4e359f383f0bbef060f60fce"}, @generic={0x41, 0x22, "0490818445eddcd0122a54177ae9f74e3ed7fa4bc929a416ce224d996b1a283b58316dd063667ef475549b8d44228c1ad455eb64c7224b47e06499267ee93d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x81, 0xe2, [@generic={0xeb, 0x4, "d5d1a8557fdc3a9919d2a960f27583dfc7de4cfddf037eda03790adb7455a834c0e81328248befc726ba0bb685f9545f91b23898d0b7f244a50d7dad707591dcc9941702f3aa3116691d50e6a2928acc15297ef01266bde47fb68048019e357d341597f514bcd79d2f62f9c7dff3110c5f8702c789a478adc80b4c7dbc3d5c4fed8791485e9d6087ae839007a37150d65c8f6dc52fe74ea29488710c10d5b52c4bda68c8a0ed2b06aa45bd9f250d248626a65aa9f9517bcf001fb2f3dc1679b0190440bd413c90ea8864543b6694a9601996a4f74e3b00096dea5eb67e34f449b52d35cb7dc6c485a9"}, @generic={0x1b, 0x7, "0bc81f5e2dfc593cfd11e7dccd1aff5b16180415a853fa428e"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x3, 0x4, 0x5, [@generic={0x5c, 0xa, "8f107abfde1b713ab7c89f6cf7f203dad8ffffdb07b035ddaa3f54a732b3694833b5bcd0685c07f3cf35f7d44c6e7d599184835b1ba578df89b4ac1f2f5d8bd3d875cd11eb1aa2b594236cb4b9d11f10bf026a59ce21b3d399c6"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x12, 0x9, 0x0, [@generic={0xb8, 0x8, "b069645590cb653e517a75b9a7c2ea1edfcd057c60d4dc9b318e2d01bdd3e50c8fb242f32ced7440142bdbbfad8e0240b449b48b34d406c9152a578f42bbf0c04a01224209557b3a303748db1180e3e922a8af831f3de4ab2baf5f12f55487bd196f22808ccad5d43f38d6367a646475330808c36935efd787bc457c45387f15249f1bfb13516638ba9ab73d9e50e1029d6aa09c8fc9dc517b222c732df9a1a63a045c72ab6f91ed1e17dd4c06086323f9f276be8d33"}, @generic={0x5d, 0x6, "01d1d32dcad91f1334da73dcd595b856c9ea80594ca451b98314adde4aadbf4e9a11800d6a8940cd7429c1c873aacb092e2e95f523cf6914cebcd2bc288a34cbc237e33a6b7dc05b071e5bf5eca213c0fd51eab230eefa09792e4a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x7f, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x73, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xa}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0x1, 0x4, [@generic={0xb4, 0x22, "ba99a9d211249df3582d20ecbf79280faaa236cc82940ab84f3c19b56fb645e2c31ee02ab1030775bf753b766f9b2dac5adf5e8d6ff7699bd7d2053e726ef0ef22390e25f677c2edfc1d420ee593798c0a26de4eb5d595935e7a205d048cf9f8ec377ef512006a90b6f61973dda0811419e3a61b5af82d2624d3a7757fd77b88442b48a5959e5745b6dcd998ce8ee97515d93d6bb5ee0c6c8f1e04be4cf72d6aa9dacb88e8b4f03fef08403c07b1c2db64d5"}, @generic={0x84, 0x11, "7458ffcf5b1796cce9511bcf30972f5ec4842096bf6759d7d5d1f2796d8ecaf280cbfa3ce8f9c376f6cf9cd1e8dda911caf3dfc5c59d4b59fa3d81a8998caa445496b1925e31cde96f9a5d9ce36daf636258f5095a90f7d0c3016153e08eb3a22f432ec8cfa44adbda7fa79415eea271e4c9398ef3298eefce3f3da6578f32d8e45d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x98, 0xfffc}, @generic={0x63, 0x11, "0238fb8467610091491ec51d340d0b02abec92afedc3bc59168a09a472eea11d4f88b513016d45d6570f7850639db0b17e56b91635a8038a517016aac6477f3704269e8bcfc51e61ba1017982768e329d4688812db4f9af2ce13982f02e1f2c786"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0xb, 0xc}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xcb, 0x7, 0x9, [@generic={0x9e, 0xc, "8e7efeba22a51a47db60c24cf420a4be04a49a1e47eb90d44ab9fa3e1b959e6fb905e4450c3086974aceb4883b464038088a2e5909e7b475ae928c0a5e79717c08783f2f096f230c7bd731088f82fb92432a960b75b3afb153773f7719f32b920bae6fb5b88171676b1213356af261c56b7bd1fcd8634e5c388b24fd2e3cb9118927afb0b8775898ef37eb7aac442ed66ae89701a350786d7ddc5d96"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3b, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x0, 0xe, 0xc}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xf349}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x35, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x46, 0x242}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x0, 0x1, 0xc7, 0x20, 0x1}, 0x106, &(0x7f0000000e40)={0x5, 0xf, 0x106, 0x2, [@generic={0xe5, 0x10, 0xb, "4c1e556009a68f55d723eff556c9d90134d88f5899de46f50acca4a77d233519a052d11152da1195cc5edcc3a239427edbc5aa7f8e780d4335c3db11a8574295af5282fc335c79d9d74c9b42566d3bb9d59f385eaae41e7f0676eeab872c16da96dcad96a2c0f29120eae418e33f35925224d4eb1d1feb935d6187a40b57d4edbfb9d821225d09d2cbf1dd177b72fdf37ac7fe919bf6f629601fd4f6866f3ebbe233e51f86fea4787b70b4f8112f6f29b19e14efb45df63c1320b7aee187c159edefeb1f8d7d35543b85f3f4e060d7e6af8ed3efab4d3b0449eef8c983c2485188b1"}, @ssp_cap={0x1c, 0x10, 0xa, 0xd4, 0x4, 0x0, 0xf, 0x3, [0x0, 0xc030, 0x3f0f, 0xffc030]}]}, 0x8, [{0x58, &(0x7f0000000f80)=@string={0x58, 0x3, "db92c1216cdd61fe8d190deb992ea96d85528e505cc807d79ac7154b689ba7e3941b61e5f7706377ffeefc6e3ed803d31f9a5b87cd0e0cdf51b0aa7d87974de6d8b57baa69c0708b22a26428f68382990181a7c52b64"}}, {0xff, &(0x7f0000001000)=@string={0xff, 0x3, "ee897890d842d21fd41810d308d8248ec925aee52e73e268d4dd6a9c8f97e336920fbaa1050d6a8436ac4bbdde25c26ef3b27da9fb8e8069dc0f25e762b48b728eccf945d813d2d2b88d53b74dd1cec4a5dc0722bcbaa83397dec0d88cff3e21f334a94116aab53e212d7d776a5ac13c6a1b108e55e87767025d23aa5b94af714f6df468c8595620d88319634231e11d473ae167811463d936cb9b45ff38ba17afa0d50f7f5398c87ecdc98a39db7bae90436807fbc68447cc32184c0b7c6fe48946f48d7b85b5fbe7d4ebff68d11981bbc60d38bcca61174152841b3f504b0c51ce487f9329f6bd4a7d23d8e5e185883ad6217593dce3812051e6e3a5"}}, {0xdc, &(0x7f0000001100)=@string={0xdc, 0x3, "495d932fcde08389cd9d8cc85d987d6d17f09d1b7796fae6c168169d877610c5590b5e074b2f041634d7d8496d836ef0ba9fbf8514e072e23478d4b9bb9e1c8a543e9b8caf6a4ef5f3651df406b0477ae919306c7034595c99aa8c3b90879dc6fe652b8e859910ae5933d5807a051f84cfa0383f0bd41317b4edb6253df4218aa20f32ce63e71bfa6e521984464e863e21525f056c77d78764a0259c1ed00867c75f9cd64fe8cd2babfc1ce5e748ea9e4c234a849c86c148508cd28a642c5618908e139215db6b8efb472c1d6463c23b0a424d120761763e32de"}}, {0x49, &(0x7f0000001200)=@string={0x49, 0x3, "5d70ee8ee23b54c2d378891fb418cf1621db9653f9eab6783c16ca1a2c6096be60cca451269d04eefdb2e571bfb1ae8f64e3b6e2e6bd1e3c4c90a43853dda9001815fa85b97c5d"}}, {0x8, &(0x7f0000001280)=@string={0x8, 0x3, "0499f6b4e9c9"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x447}}, {0x72, &(0x7f0000001300)=@string={0x72, 0x3, "f4eb0b063ea1787500be493252c09b771de3959f0cee401d347495b23f3de7f0c7f439bf0ac15c038c454c6a30a282b0c95aad4bac2dd90df659767b4be9cbb8b70d15da26d5aea2c342815ed59213799430a79f339e9eb23840f741e1d107a5f7d41a7f83f96531d725052a3fb272f3"}}, {0xa5, &(0x7f0000001380)=@string={0xa5, 0x3, "83194509e6c68d0338fc5b07db7d94e062cdffc3beb33fc0bbe793c6cf4867a6e5768af917388e3857dbdc8fb4d0b6a4d39ba432e0e490a1740f66444c5e41c5f102f1bc72205e1878c1dacbc76fec305be9ecc2698342c64fa695dbf0da2667c86ad56e6a360749be61e0a33bf584f15e3c98e2a5f2274bf97651d599700e50d1c5e6d1beb011868989b411ebc4fc695d5621b6ad501fea09f5ae112ec22c7bd27d5c"}}]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f00000014c0)=0x4) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000003540)={'virt_wifi0\x00', 0x28}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003580)={'bridge_slave_1\x00'}) lchown(&(0x7f00000035c0)='./file0\x00', r7, r8) readv(r2, &(0x7f0000003700)=[{&(0x7f0000003600)=""/172, 0xac}, {&(0x7f00000036c0)=""/18, 0x12}], 0x2) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000003740)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "12a7e152"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0xae7, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x27}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0xff, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x42}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x6, 0xfa}}}}}}}]}}, &(0x7f0000003bc0)={0xa, &(0x7f00000037c0)={0xa, 0x6, 0x110, 0x0, 0x8, 0x9, 0x40, 0x8}, 0x24, &(0x7f0000003800)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0xc, 0x71f1}, @ssp_cap={0x18, 0x10, 0xa, 0xfc, 0x3, 0x674, 0xff00, 0x1, [0xff3f3f, 0x0, 0xff3f0f]}]}, 0x5, [{0xd4, &(0x7f0000003840)=@string={0xd4, 0x3, "2d2135a6faa3bb71f1e45e3caab9a7d238a016a00457906484a04b461fdc7aa34526c2728fb52ca0da0b98af502c055498e968318929526b7b131c1cd362e3a224dee88599143665c7d476bcd1ffd070735bf1aba15c800869f3143cfc7ca918a95c71b0b7909a10461ff7f5573ca2678598eb688178675b52027fa85ed27768801e6050887ddaf57c5f98ae4a101c3419e13879fed1ef5cc4c5d72d4689a3b9444858f89db42abe55e774a80fee4f517c91fd7f6edbd08fbed08d4c67072ce918c01489412dd479d265e1ae02a2c9507947"}}, {0x4, &(0x7f0000003940)=@lang_id={0x4, 0x3, 0x41b}}, {0xc4, &(0x7f0000003980)=@string={0xc4, 0x3, "0e73ff036a00e8033cc5ce9682467c6c7ea53e9c3f0d0c56470e0825102a655db562a8745054fdf33ef64e1146482e2a51449be0afc00a72e8a6376e7c90d3f1bc5986eccdc1d779bdcef18ce4ed805fc1b54f7a1b8eefe96fdab58934f60f890506776aaa914a84654b7d816d042520ac6bffac8b27194daa436db37afb161e9a51aaf910274ce0fe05a4becfb023b7dc031b9c5b30404a919b5d424f8aac70b2bc53417eca3adf5e3eabc0c90246e7cf1571c063446620a9f8502a733f958dfd11"}}, {0xdc, &(0x7f0000003a80)=@string={0xdc, 0x3, "1f3c737284d0666aea9dc97ce82eaf42fdd20a6f8ee3764575080ab0369b55130625f2de8b75d0232bede258231d4f1c116110c30430dd2ce365fcfa766bbd07a9445a647c5567612243a56b3910febf63af62e915c2bfb76fc7d9270b05b6837e78b1c1b674d814834915245aadc67c8ce3ccf8de0fa00d24e1445f4d7c620163ed9e045fb8b36a22b3c552db81adca630b2d53688e6b11631a28d1a5afc6892fd9e430e411c2802414f221e1c19f0a327c3842c216e4f094555c9820e23222bc091b355211b7a5d0c66c8a4b0fb12ba471638a440916cf0032"}}, {0x4, &(0x7f0000003b80)=@lang_id={0x4, 0x3, 0x42f}}]}) recvmsg$unix(r0, &(0x7f00000050c0)={&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000003cc0)=""/169, 0xa9}, {&(0x7f0000003d80)=""/58, 0x3a}, {&(0x7f0000003dc0)=""/233, 0xe9}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/37, 0x25}, {&(0x7f0000004f00)=""/17, 0x11}, {&(0x7f0000004f40)=""/109, 0x6d}], 0x7, &(0x7f0000005040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000005100)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f0000005140)=0x2, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000005180)={{0x1, 0x1, 0x18, r10, {0x101}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f00000051c0)=""/216) 8.133795919s ago: executing program 4 (id=1507): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="120100002569301082050500883f0000000109021b001200000000090402000191baf20509050b"], 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000580)="0900bf65653f47f4020000008bd458d1e7cbdaf33c000f34e7e4165f081ae36850f6d15c3e681411f730bdc0da04003c242f5befaf6bec340dee49474362b25cb800edc500", 0x0, 0x48) r4 = msgget$private(0x0, 0x4) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000600)=""/157) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfffffffe}]}}]}, 0x3c}}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfb}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa6d}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x401}, @ldst={0x0, 0x3, 0x6, 0x6, 0x0, 0x30, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0x4000000, 0x6d, &(0x7f0000000380)=""/109, 0x41100, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x6, 0xc00, 0x400}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x0, 0x2, 0x3, 0x9}, {0x3, 0x2, 0x4, 0x5}], 0x10, 0x5, @void, @value}, 0x94) close_range(r2, r3, 0x2) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 6.68778096s ago: executing program 2 (id=1509): syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9}) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000140)=[{0x4, 0x1, 0x1800}], 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 6.572288604s ago: executing program 2 (id=1510): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) unshare(0x40000000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000019080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x0, 0x80b}}}, 0x7) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4a72a47dd40c813299f69275aad940c3be71e82074fbcaae649abe"}, {&(0x7f0000000080)="b460797b0f9d4e44e5dfdce21a"}], 0x5d, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 6.299851268s ago: executing program 0 (id=1511): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0xffffffffffffffff, 0x12042) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xffff}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40c0084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000017000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'dvmrp0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r9}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 5.982659779s ago: executing program 3 (id=1512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001840)=@x25, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000001540)=""/64, 0x40}, {&(0x7f0000001580)=""/121, 0x79}, {&(0x7f0000001600)=""/223, 0xdf}, {&(0x7f0000001700)}], 0x8, &(0x7f00000017c0)=""/13, 0x4e}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) epoll_create(0x101) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) close(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x800020073, 0x222203) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000000)=0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="9e42474b74b4780b4e6bdea9eccc131d2915776fb6b3aa620c78cbfb64ee22e6c7079e8e6cc731ab", @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0]) 5.012001316s ago: executing program 3 (id=1514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000007180)=[{{&(0x7f0000001680)={0xa, 0x4e23, 0x9, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x18}}], 0x1, 0x2400c8d0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0002"], 0x12) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.860965086s ago: executing program 2 (id=1515): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x100b) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x54, r5, 0x1, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x14040884}, 0x4008000) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', '', [{0x20, 'security.apparmor\x00'}]}, 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r8 = socket(0x10, 0x3, 0x0) fremovexattr(r8, &(0x7f0000000180)=@known='security.apparmor\x00') 4.757027197s ago: executing program 4 (id=1516): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0x21, 0xc9, {0xc9, 0xf, "246f23fa8750696acc7bfb722f25cf7e759d70de4215fa1d9047f0e6e218b7c69f30e1894b5b4c178f696901e5e16f0816e79c77c4a7fb134ddd370433838155a9502fd0d8395d896d39a9406337fdbb010993d5ea0b8a8e88441e96e7919c195a25536ce5a30955eb32e53c9d32978426328c5d18e8091bb90f32b4980d764f75d46103e24e7b25480f97a8ece33197d74e87cac1ff7f93baaf58318cb72b6403b316fc6d71e88d48416373faf9f5d83bdd63a40c0fa565fba36253a123ccf13ac8d6a893bf8a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd69109d7abb54152}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x11}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x4f, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.62013834s ago: executing program 0 (id=1517): bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.524880582s ago: executing program 0 (id=1518): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x4, 0x7}}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.194449049s ago: executing program 3 (id=1519): r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000180), 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x0f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r4) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000b80)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000140)="ba57", 0x2) close(r4) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xe2942, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='projid_map\x00') sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 4.072099126s ago: executing program 2 (id=1520): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000209500000000000000b4c984f726541d4890025e8340738f53f9f0e3e0f003d7cf8139c2a38c8a17b913ec4cdf1bdd2477d6c3428b8925c0c2ec8495da69e1819a96e2bdf7e7fdd5bad0f4f5682c8384156b39d64eac8a1a5799c1c22ea9e60c798a44a10b7f5a83828945fa8fddede0fdd973c6eb169cb8e77fe66acf5694347283a9dadc9a980aa1db7a6f6ea6f521339d3fd0547b15f96ffa3053b92c608187bd1003b58cebbab9f0a3097a1b"], &(0x7f00000003c0)='GPL\x00', 0x8, 0xb5b, &(0x7f0000001840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x3, 0x11, 0x7, 0x4, "195133e6bcec35eaa3ea5521f1f14ba7711a2430ac0c8324295d28023eedd3f0"}) 3.842894212s ago: executing program 1 (id=1521): unlink(&(0x7f0000000100)='./file0\x00') (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800dd08000000000000000002000000000000050000000006001500020000000c00168008000100"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000800) 3.614138452s ago: executing program 1 (id=1522): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000040200", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.448143909s ago: executing program 1 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) 2.621244256s ago: executing program 4 (id=1524): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ae}}}, 0x30) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000880)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) 2.45075432s ago: executing program 4 (id=1525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) execve(0x0, 0x0, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00010d00000000000000945adaff95", @ANYRES32=0x0, @ANYBLOB="01a0000001500400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) (async) r4 = syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c020000100033060000000000000000ffffffff000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x20c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x1335f0a7) (async) write$binfmt_script(r10, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x8010, r9, 0xdd34d000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r7, 0x0, 0x0, r7}) io_uring_enter(r4, 0x2d42, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r12, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000017", @ANYRES16=0x0, @ANYBLOB="000125bd700011dcdf25360000000c0099000100000007000000"], 0x20}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2c00c014) 1.615947436s ago: executing program 1 (id=1526): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getgid() r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$kcm(0x10, 0x2, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = mq_open(&(0x7f0000000740)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r4, &(0x7f00000004c0)={0x800, 0x10, 0xa, 0x3000}, 0x0) splice(r2, &(0x7f0000000100)=0xd5ee, r3, 0x0, 0x8008, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r5, r6, r7, 0x405, 0x752, 0x80000002, 0x8, 0x0, 0x0, 0xb, 0x200420, 0x200}) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x5) syz_emit_ethernet(0x94, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a8320081002100080501090f1c1ecd86595f207f2f7a6b1cfc688c3ed09d0687b0b1f2ed76c0adf2c3db9dbf4f28391eebda3d4d5cca8460dd6cd52c0801ab2bf3cea2983eaf5d162ed689288d2538e85cdc808ba3f8f8196e8597ca0d4bd763bbf8cfcaf13c19edb4b2bb3cf4c1f85783be3b1a0b2954958bc0ffac3067eb6de09b94558d76856966247caa80fb83b9cfd2c1209047458410eed03095e1533c8e060923d61731db63eaf3e4be2e4697f5e26f9db4c1745a2f85abd15dd23b9190d6fa6ad9459c14aca3ef80b071292b"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setuid(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f00000000c0)={0x0, 0x6, 0xf971, 0xfffffff9}) rmdir(&(0x7f0000000180)='./file0\x00') fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, r0, 0x1000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') unlinkat(r9, &(0x7f0000000180)='./file0\x00', 0x200) read$FUSE(r9, &(0x7f0000002100)={0x2020}, 0x2020) 1.471012491s ago: executing program 1 (id=1527): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}, {0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x188}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 1.256581705s ago: executing program 0 (id=1528): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.160053832s ago: executing program 0 (id=1529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7ff0}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xc6c3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3008000}]}}]}, 0x58}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0), 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903004cd7010200010902"], 0x0) lstat(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8, @ANYBLOB="00070065ab0000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200001700000018230000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffca1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setattr(0x0, 0x0, 0x0) gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002400000"], 0xdc}}, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x6, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.111194603s ago: executing program 1 (id=1530): socket$inet6(0xa, 0xa, 0xfffffff8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="2d014c8001091212000100dc000000000000010000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x90700a43d37ba5cf, 0x27, {0x27, 0x0, "019653bd08e4c7715affd8b2d47d9a6f76bf75abd0da3ec14df6c0aae35cf6580c1122d7ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "ebbbd7952af85c87024e753598be307c737faf2054fecdcba4cdeb0686e01c51c65de94240e62a2600d2886478fcbe77d33a63c05119134d012671e5ba77b06e53679e20f18c8935d22af9feba5ce1b71abc2131d80f45106e2923c261dee689d7f69f3b9b63a72b1f2d7716f78d729ac4e0cd604814fead90a9ec181c29a5e0e4"}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x7, 0x66, "51382571f7ad1648d7886ec8fdb08f98a029389983f105dbf394de1b3814963249a644b1fc67ecc75666115a59e872dc316b8ac2814f2e9281c6e3df0b74b2bbfc3e2b36a096c973a0206a159e9a6a3f58ce73172f979aae05a54edfce2fe10998df1f26e76a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x1, 'm'}, &(0x7f0000000300)={0x20, 0x82, 0x2, "76bc"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "b3937c"}, &(0x7f0000000380)={0x20, 0x84, 0x4, "65aef679"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "e758e7"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0xfffffff9, &(0x7f0000000500)={0x0, 0xd, 0xd, "469d555c65f312d0626ed19f913c84d849eeb1f7169ab6e0f72ea84462ab5a82b01a4dd98dde772446881680cbe276"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.022432874s ago: executing program 4 (id=1531): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x40}, &(0x7f0000000380)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0445624, &(0x7f00000000c0)={0x1c0980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff, [0x0, 0xffffffff]}) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000240)={0x2, 0x1, @raw_data=[0x5, 0xde4, 0xc7, 0x6, 0x7fff, 0x9, 0x8, 0x3, 0xffff7f40, 0x8, 0x1, 0x7ff, 0xf, 0x0, 0x200, 0xa7f]}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x6101}}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) 899.906095ms ago: executing program 2 (id=1532): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000100)={0x2, 0x8, [0x0, 0x0]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap$binder(&(0x7f0000395000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xec07) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'erspan0\x00', 0x3}) socket(0x11, 0x800000003, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, r8, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000398000/0x2000)=nil, 0x2000}, 0xbb48b02a3e4bb667}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 602.919076ms ago: executing program 3 (id=1533): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000000300", "f4bd000000801900", [0x0, 0x2000000000001]}}) 471.292292ms ago: executing program 3 (id=1534): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0x21, 0xc9, {0xc9, 0xf, "246f23fa8750696acc7bfb722f25cf7e759d70de4215fa1d9047f0e6e218b7c69f30e1894b5b4c178f696901e5e16f0816e79c77c4a7fb134ddd370433838155a9502fd0d8395d896d39a9406337fdbb010993d5ea0b8a8e88441e96e7919c195a25536ce5a30955eb32e53c9d32978426328c5d18e8091bb90f32b4980d764f75d46103e24e7b25480f97a8ece33197d74e87cac1ff7f93baaf58318cb72b6403b316fc6d71e88d48416373faf9f5d83bdd63a40c0fa565fba36253a123ccf13ac8d6a893bf8a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd69109d7abb54152}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x11}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x4f, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 234.942544ms ago: executing program 2 (id=1535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000380)={0x0, 0x3bce, 0x200, 0x0, 0x315}, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000180)=[{r8, 0x10c}, {r8, 0x4208}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r8, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r8, &(0x7f0000000200)=@unlock_all, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) syz_usb_connect(0x3, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0xc, 0xbf, 0x75, 0x40, 0xb05, 0x173f, 0x7b80, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x8, 0x40, 0x0, 0x2, [{{0x9, 0x4, 0x7a, 0x1, 0x1, 0x8f, 0xcb, 0x9e, 0x81, [], [{{0x9, 0x5, 0x1, 0xc, 0x20, 0x5, 0x40, 0x7}}]}}, {{0x9, 0x4, 0x31, 0x7f, 0x0, 0xff, 0x71, 0x2c, 0x4}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0xf1, 0xc, 0x6, 0x4}, 0x3a, [0x9, 0xffff, 0x8, 0x40, 0x10001, 0xfffffffc, 0x5, 0x8, 0x2, 0x5, 0xffffffff, 0x2, 0x7, 0x401, 0x100, 0x9, 0x2, 0x5, 0x289, 0x6, 0x34f7, 0x954, 0x800, 0x8, 0x5, 0x0, 0x60f3, 0x0, 0xffffffff, 0xfffffffc, 0x1, 0xc, 0x652, 0x0, 0x4, 0x5, 0xf0, 0x5, 0x7, 0xc6f, 0x10000000, 0x0, 0x8, 0xe, 0x5, 0x80000000, 0x7, 0x9b5, 0x4, 0xfff, 0x3ff, 0x9, 0xfffffffc, 0x3ff, 0x4, 0xae2, 0x7f, 0x1ff, 0x8, 0x8, 0x90, 0x7fffffff, 0x9, 0x9], [0x100, 0x5, 0x6, 0x6, 0x7, 0xc, 0x5, 0xb, 0x21, 0x8, 0xfffffffa, 0x8, 0x4, 0x0, 0x6, 0x6a5, 0xb, 0x6, 0x8001, 0x100, 0x5, 0x0, 0xa, 0x0, 0x7, 0xfffffffe, 0x9, 0x7f, 0x5, 0x10000, 0x7, 0x7, 0xfffffffd, 0x26, 0x7, 0x0, 0x1, 0x3, 0x823b, 0x7, 0xb57, 0x68, 0x7f, 0x0, 0xe, 0x5, 0x1ff, 0x8, 0x8, 0x41db, 0xfffffffd, 0x6, 0xa, 0x3, 0x8, 0x5f37, 0x6, 0x2, 0x2, 0xd, 0x6, 0xa81e, 0x200, 0xb], [0x5, 0x800, 0x10001, 0x10000000, 0x2, 0xf22, 0x6f95bcf8, 0x10, 0x959, 0x10000, 0xa426, 0x382, 0x40001, 0x3, 0xfff, 0x84a0, 0x81, 0x9d6, 0xfffffff7, 0x7ff, 0x9, 0x7, 0x3, 0xe0, 0x4, 0x0, 0x80000000, 0x0, 0xc98, 0x6, 0x7, 0x6, 0x6, 0x8001, 0xf, 0x6, 0xb, 0x0, 0x101, 0x0, 0x200, 0x0, 0x7, 0x5, 0x3a3e, 0xf, 0x6, 0x3, 0x9, 0xffff, 0x1ff, 0x7, 0xc, 0x8000, 0x5, 0x6, 0x248, 0x3, 0x80000000, 0xfffffff8, 0x81, 0xb, 0x3], [0x7, 0x4, 0xff, 0x69, 0x9, 0xc13, 0xffffffff, 0xa44ffc6b, 0x3, 0x4, 0xc00, 0x1b560000, 0x81, 0x6, 0x4, 0x1, 0x2, 0x5, 0x4, 0x1, 0x3, 0x101, 0x7f, 0x3, 0xffffffbe, 0xb, 0xcc, 0x5, 0x2, 0x0, 0x6, 0x4, 0x80000001, 0x0, 0x8, 0x2, 0x1, 0x6c, 0x4, 0x9, 0x3, 0x8, 0x0, 0x9d, 0xdf, 0x6, 0x10000, 0x5, 0x2, 0x2, 0x6, 0x9, 0x9, 0x51ea, 0x8, 0x1000, 0xb56d, 0x80000000, 0x8, 0x4, 0x7, 0x200, 0x7, 0x7]}, 0x45c) 0s ago: executing program 4 (id=1536): r0 = socket(0x2b, 0x1, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket(0x2b, 0x1, 0x1) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): 5300][ T30] audit: type=1326 audit(1744689050.621:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 356.523486][ T30] audit: type=1326 audit(1744689050.621:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 356.766452][ T96] dvb-usb: bulk message failed: -22 (1/0) [ 356.782964][ T96] dvb-usb: error while querying for an remote control event. [ 356.791563][ T30] audit: type=1326 audit(1744689050.621:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 356.872548][ T96] usb 3-1: USB disconnect, device number 82 [ 356.900368][ T30] audit: type=1326 audit(1744689050.621:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 356.923418][ T30] audit: type=1326 audit(1744689050.621:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 357.051507][ T96] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 357.132528][ T30] audit: type=1326 audit(1744689050.621:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 357.330735][ T30] audit: type=1326 audit(1744689050.621:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 357.373255][ T30] audit: type=1326 audit(1744689050.621:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486318d169 code=0x7ffc0000 [ 358.145668][ T96] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 358.334865][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 358.340022][ T96] usb 5-1: Using ep0 maxpacket: 8 [ 358.365740][ T96] usb 5-1: config 212 contains an unexpected descriptor of type 0x2, skipping [ 358.456471][ T96] usb 5-1: config 212 has an invalid descriptor of length 1, skipping remainder of the config [ 358.532045][ T96] usb 5-1: config 212 has 0 interfaces, different from the descriptor's value: 3 [ 358.602159][ T96] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.721854][ T96] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.735913][ T5895] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 358.797990][ T9670] xt_recent: Unsupported userspace flags (000000de) [ 358.810815][ T10] usb 3-1: config 0 has no interfaces? [ 358.837493][ T96] usb 5-1: Product: syz [ 358.841886][ T96] usb 5-1: Manufacturer: syz [ 358.858835][ T96] usb 5-1: SerialNumber: syz [ 358.882692][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.961709][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.003546][ T5895] usb 2-1: config 0 has no interfaces? [ 359.095207][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.133484][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.222556][ T96] usb 5-1: USB disconnect, device number 79 [ 359.239463][ T10] usb 3-1: Product: syz [ 359.243749][ T10] usb 3-1: Manufacturer: syz [ 359.264495][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 359.295192][ T10] usb 3-1: SerialNumber: syz [ 359.319258][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.404890][ T5860] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 359.439673][ T10] usb 3-1: config 0 descriptor?? [ 359.472744][ T5895] usb 2-1: Product: syz [ 359.537260][ T5895] usb 2-1: Manufacturer: syz [ 359.546571][ T5860] usb 4-1: device descriptor read/64, error -71 [ 359.627480][ T5895] usb 2-1: SerialNumber: syz [ 359.699984][ T5895] usb 2-1: config 0 descriptor?? [ 359.838245][ T5860] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 360.025640][ T5860] usb 4-1: device descriptor read/64, error -71 [ 360.161122][ T5860] usb usb4-port1: attempt power cycle [ 360.715575][ T5860] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 360.772984][ T5860] usb 4-1: device descriptor read/8, error -71 [ 361.015753][ T5860] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 361.047738][ T5860] usb 4-1: device descriptor read/8, error -71 [ 361.155870][ T5860] usb usb4-port1: unable to enumerate USB device [ 361.208104][ T5860] usb 3-1: USB disconnect, device number 83 [ 361.658258][ T9678] syz.4.1107 (9678): drop_caches: 3 [ 361.693778][ T5895] usb 2-1: USB disconnect, device number 78 [ 361.695863][ T5860] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 361.907965][ T5860] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 361.935119][ T5860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 361.953388][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 361.966357][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.966942][ T9699] team0: left allmulticast mode [ 361.996667][ T5860] usb 3-1: Product: syz [ 362.008256][ T9699] team_slave_0: left allmulticast mode [ 362.017836][ T5860] usb 3-1: Manufacturer: syz [ 362.036283][ T9699] team_slave_1: left allmulticast mode [ 362.052375][ T9699] bridge0: port 4(team0) entered disabled state [ 362.077668][ T5860] usb 3-1: SerialNumber: syz [ 362.148019][ T9689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.286103][ T9699] syz_tun: left allmulticast mode [ 362.299964][ T9699] syz_tun: left promiscuous mode [ 362.306946][ T9699] bridge0: port 3(syz_tun) entered disabled state [ 362.349189][ T9699] bridge_slave_1: left allmulticast mode [ 362.358962][ T5892] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 362.367961][ T9699] bridge_slave_1: left promiscuous mode [ 362.374830][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.411826][ T9699] bridge_slave_0: left allmulticast mode [ 362.418024][ T9699] bridge_slave_0: left promiscuous mode [ 362.424732][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.484938][ T5860] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 362.658509][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 362.693202][ T5892] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 362.723674][ T5892] usb 5-1: config 8 has no interface number 0 [ 362.744150][ T5892] usb 5-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.784688][ T5892] usb 5-1: config 8 interface 39 has no altsetting 0 [ 362.809589][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 362.852950][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.899691][ T5892] usb 5-1: Product: syz [ 362.958848][ T5892] usb 5-1: Manufacturer: syz [ 362.977489][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 362.977509][ T30] audit: type=1326 audit(1744689057.241:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 363.065798][ T5892] usb 5-1: SerialNumber: syz [ 363.080560][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 363.321001][ T30] audit: type=1326 audit(1744689057.241:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 363.475717][ T96] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 363.589057][ T30] audit: type=1326 audit(1744689057.241:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 363.747199][ T5892] ipheth 5-1:8.39: Unable to find endpoints [ 363.852166][ T96] usb 4-1: Using ep0 maxpacket: 32 [ 363.861412][ T5892] usb 5-1: USB disconnect, device number 80 [ 363.863606][ T30] audit: type=1326 audit(1744689057.241:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 363.889546][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.907370][ T96] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 363.936758][ T96] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 363.959371][ T96] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 363.976834][ T96] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 363.991466][ T96] usb 4-1: Product: syz [ 364.001312][ T96] usb 4-1: Manufacturer: syz [ 364.022587][ T30] audit: type=1326 audit(1744689057.241:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 364.073151][ T30] audit: type=1326 audit(1744689057.241:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dbb8d169 code=0x7ffc0000 [ 364.388119][ T5936] usb 3-1: USB disconnect, device number 84 [ 364.405895][ T5936] usblp0: removed [ 364.939162][ T5892] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 365.108474][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0 [ 365.120151][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 365.130772][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.148696][ T5892] usb 5-1: Product: syz [ 365.153515][ T5892] usb 5-1: Manufacturer: syz [ 365.172410][ T5892] usb 5-1: SerialNumber: syz [ 365.438689][ T5892] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 365.504164][ T5892] usb 5-1: USB disconnect, device number 81 [ 365.700661][ T5892] usblp0: removed [ 366.801909][ T10] usb 4-1: USB disconnect, device number 63 [ 366.965667][ T5892] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 367.162734][ T5892] usb 5-1: config 0 has no interfaces? [ 367.175153][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 367.184430][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.193788][ T5892] usb 5-1: Product: syz [ 367.202068][ T5892] usb 5-1: Manufacturer: syz [ 367.213432][ T5892] usb 5-1: SerialNumber: syz [ 367.217974][ T10] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 367.229990][ T5892] usb 5-1: config 0 descriptor?? [ 367.395922][ T10] usb 4-1: device descriptor read/64, error -71 [ 367.655990][ T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 367.805588][ T10] usb 4-1: device descriptor read/64, error -71 [ 367.926320][ T10] usb usb4-port1: attempt power cycle [ 368.188161][ T9767] kvm: MONITOR instruction emulated as NOP! [ 368.286379][ T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 368.320327][ T10] usb 4-1: device descriptor read/8, error -71 [ 368.585682][ T10] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 368.618632][ T10] usb 4-1: device descriptor read/8, error -71 [ 368.740633][ T10] usb usb4-port1: unable to enumerate USB device [ 369.655846][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 369.830747][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.866596][ T10] usb 2-1: config 0 has no interfaces? [ 369.884188][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 369.898686][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.907899][ T10] usb 2-1: Product: syz [ 369.912201][ T10] usb 2-1: Manufacturer: syz [ 369.927113][ T10] usb 2-1: SerialNumber: syz [ 369.976979][ T5860] usb 5-1: USB disconnect, device number 82 [ 369.998782][ T10] usb 2-1: config 0 descriptor?? [ 370.239255][ T9789] IPVS: set_ctl: invalid protocol: 25647 47.100.109.97:24424 [ 370.505570][ T5860] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 370.665695][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 370.690806][ T5860] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 370.719333][ T5860] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 370.735765][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 370.751081][ T5860] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 370.776398][ T5860] usb 5-1: Product: syz [ 370.785248][ T5860] usb 5-1: Manufacturer: syz [ 371.919187][ T96] usb 2-1: USB disconnect, device number 79 [ 372.075745][ T5860] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 372.252049][ T5860] usb 4-1: config 0 has no interfaces? [ 372.265925][ T5860] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 372.275286][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.286799][ T5860] usb 4-1: Product: syz [ 372.314013][ T5860] usb 4-1: Manufacturer: syz [ 372.336577][ T5860] usb 4-1: SerialNumber: syz [ 372.362809][ T5860] usb 4-1: config 0 descriptor?? [ 372.557806][ T9836] erspan0: mtu less than device minimum [ 372.705647][ T5860] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 372.858844][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.872787][ T5860] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 372.887627][ T5860] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 372.898544][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.916954][ T5860] usb 2-1: config 0 descriptor?? [ 373.038681][ T9841] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 373.064466][ T9841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 373.153264][ T5860] usb 5-1: USB disconnect, device number 83 [ 373.321284][ T5936] usb 2-1: USB disconnect, device number 80 [ 373.379696][ T9845] input: syz0 as /devices/virtual/input/input30 [ 373.701465][ T9854] xt_TPROXY: Can be used only with -p tcp or -p udp [ 373.715872][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'. [ 373.909652][ T9859] fuse: Bad value for 'fd' [ 373.983923][ T9859] Option ''MO' to dns_resolver key: bad/missing value [ 374.425522][ T5895] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 374.459313][ T9874] erspan0: mtu less than device minimum [ 374.612450][ T5860] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 374.702555][ T5895] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.739605][ T5895] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.812014][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.821448][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.842154][ T9867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 374.855822][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 375.115258][ T5860] usb 5-1: config index 0 descriptor too short (expected 8457, got 36) [ 375.153070][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.226366][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.229212][ T5936] usb 4-1: USB disconnect, device number 68 [ 375.236740][ T5860] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 375.236793][ T5860] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 375.236819][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.289426][ T5860] usb 5-1: config 0 descriptor?? [ 375.598688][ T5860] usb 5-1: string descriptor 0 read error: -71 [ 375.636986][ T5860] usb 5-1: USB disconnect, device number 84 [ 376.045790][ T9899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 376.865844][ T9908] fuse: Bad value for 'fd' [ 376.885057][ T9908] Option ''MO' to dns_resolver key: bad/missing value [ 376.935675][ T96] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 377.045230][ T5860] usb 3-1: USB disconnect, device number 85 [ 377.110623][ T96] usb 4-1: Using ep0 maxpacket: 16 [ 377.126434][ T96] usb 4-1: config 0 has no interfaces? [ 377.171285][ T96] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.199585][ T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.209864][ T96] usb 4-1: Product: syz [ 377.235606][ T96] usb 4-1: Manufacturer: syz [ 377.240272][ T96] usb 4-1: SerialNumber: syz [ 377.264941][ T96] usb 4-1: config 0 descriptor?? [ 377.634657][ T5936] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 377.737548][ T5860] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 378.040933][ T5860] usb 3-1: config 0 has no interfaces? [ 378.120825][ T5860] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.130684][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.139322][ T5860] usb 3-1: Product: syz [ 378.143715][ T5860] usb 3-1: Manufacturer: syz [ 378.148965][ T5860] usb 3-1: SerialNumber: syz [ 378.156719][ T5860] usb 3-1: config 0 descriptor?? [ 378.302316][ T5936] usb 2-1: config 0 has no interfaces? [ 378.325808][ T5936] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.340706][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.427086][ T5936] usb 2-1: Product: syz [ 378.441036][ T5936] usb 2-1: Manufacturer: syz [ 378.446540][ T5936] usb 2-1: SerialNumber: syz [ 378.461710][ T5936] usb 2-1: config 0 descriptor?? [ 378.705101][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711531][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731565][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1180'. [ 378.960119][ T9934] erspan0: mtu less than device minimum [ 379.405097][ T9937] erspan0: mtu less than device minimum [ 379.869968][ T96] usb 4-1: USB disconnect, device number 69 [ 380.238077][ T96] usb 2-1: USB disconnect, device number 81 [ 380.521123][ T5936] usb 3-1: USB disconnect, device number 86 [ 380.616851][ T9955] fuse: Bad value for 'fd' [ 380.632072][ T9955] Option ''MO' to dns_resolver key: bad/missing value [ 380.705748][ T96] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 380.845510][ T96] usb 2-1: device descriptor read/64, error -71 [ 380.964122][ T9968] team0: mtu less than device minimum [ 381.095681][ T96] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 381.399072][ T96] usb 2-1: device descriptor read/64, error -71 [ 381.480968][ T5892] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 381.518569][ T96] usb usb2-port1: attempt power cycle [ 381.656682][ T5892] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 381.675544][ T5892] usb 5-1: config 0 has no interface number 0 [ 381.690429][ T5892] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 381.700287][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 381.709257][ T5892] usb 5-1: Product: syz [ 381.713535][ T5892] usb 5-1: SerialNumber: syz [ 381.724933][ T5892] usb 5-1: config 0 descriptor?? [ 381.780485][ T5892] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input32 [ 381.797428][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 381.866514][ T96] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 381.906796][ T96] usb 2-1: device descriptor read/8, error -71 [ 382.155667][ T96] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 382.258868][ T96] usb 2-1: device descriptor read/8, error -71 [ 382.417153][ T96] usb usb2-port1: unable to enumerate USB device [ 382.498870][ T5895] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 382.758011][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.765588][ T96] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 382.772898][ T5895] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 382.819933][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.852831][ T5895] usb 4-1: config 0 descriptor?? [ 382.881004][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 382.987026][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.987521][ T10] usb 5-1: USB disconnect, device number 85 [ 382.994329][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 383.054861][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 383.089063][ T96] usb 3-1: config 0 has no interfaces? [ 383.112403][ T96] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.131794][ T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.143994][ T96] usb 3-1: Product: syz [ 383.149569][ T96] usb 3-1: Manufacturer: syz [ 383.154479][ T96] usb 3-1: SerialNumber: syz [ 383.169579][ T96] usb 3-1: config 0 descriptor?? [ 383.288977][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.296409][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.309341][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 383.523497][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 383.545011][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 383.558210][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 383.602079][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 383.657999][ T5895] pwc: recv_control_msg error -32 req 02 val 2100 [ 383.685265][ T5895] pwc: recv_control_msg error -32 req 04 val 1500 [ 383.716925][ T5895] pwc: recv_control_msg error -32 req 02 val 2500 [ 383.727523][ T5895] pwc: recv_control_msg error -32 req 02 val 2400 [ 383.734818][ T5895] pwc: recv_control_msg error -32 req 02 val 2600 [ 383.747320][ T5895] pwc: recv_control_msg error -32 req 02 val 2900 [ 383.758499][ T5895] pwc: recv_control_msg error -32 req 02 val 2800 [ 383.766595][ T5895] pwc: recv_control_msg error -32 req 04 val 1100 [ 383.785540][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.795153][ T5895] pwc: Registered as video103. [ 383.802613][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 383.823194][ T5895] usb 4-1: USB disconnect, device number 70 [ 383.845638][ T96] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 384.377683][ T96] usb 5-1: Using ep0 maxpacket: 32 [ 384.684755][ T96] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 384.695669][ T96] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.714786][ T96] usb 5-1: Product: syz [ 384.724583][ T96] usb 5-1: Manufacturer: syz [ 384.731476][ T96] usb 5-1: SerialNumber: syz [ 384.982261][ T96] usb_ehset_test 5-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 385.014866][ T96] usb 5-1: USB disconnect, device number 86 [ 385.770536][ T30] audit: type=1326 audit(1744689080.021:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.1.1215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f735678d169 code=0x0 [ 385.775565][ T96] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 385.836854][ T5892] usb 3-1: USB disconnect, device number 87 [ 385.955924][ T96] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.983120][ T96] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.026323][ T96] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 386.053961][ T96] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.076284][ T96] usb 4-1: SerialNumber: syz [ 386.109339][ T96] usb 4-1: 0:2 : does not exist [ 386.352256][ T30] audit: type=1326 audit(1744689080.611:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.385790][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 386.474406][ T30] audit: type=1326 audit(1744689080.611:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.528166][ T10] usb 3-1: device descriptor read/64, error -71 [ 386.537994][ T30] audit: type=1326 audit(1744689080.611:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.638013][ T30] audit: type=1326 audit(1744689080.611:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.760555][ T30] audit: type=1326 audit(1744689080.611:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.783970][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 386.803063][ T30] audit: type=1326 audit(1744689080.611:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.918086][ T30] audit: type=1326 audit(1744689080.611:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 386.941018][ T10] usb 3-1: device descriptor read/64, error -71 [ 387.045796][ T10] usb usb3-port1: attempt power cycle [ 387.117738][ T30] audit: type=1326 audit(1744689080.641:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 387.264329][ T30] audit: type=1326 audit(1744689080.641:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6a98d169 code=0x7ffc0000 [ 387.286832][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.314821][T10066] netlink: 'syz.4.1224': attribute type 11 has an invalid length. [ 387.323102][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1224'. [ 387.397596][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 387.431420][ T10] usb 3-1: device descriptor read/8, error -71 [ 387.686148][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 387.717228][ T10] usb 3-1: device descriptor read/8, error -71 [ 387.845760][ T10] usb usb3-port1: unable to enumerate USB device [ 388.025481][ T5898] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 388.216195][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 388.226599][ T5898] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 388.235961][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.249666][ T5898] usb 5-1: config 0 descriptor?? [ 388.263453][ T5898] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 388.356889][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 388.507862][ T5895] usb 4-1: USB disconnect, device number 71 [ 388.543553][ T10] usb 2-1: config 0 has no interfaces? [ 388.571666][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 388.581628][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.590139][ T10] usb 2-1: Product: syz [ 388.594692][ T10] usb 2-1: Manufacturer: syz [ 388.602216][ T10] usb 2-1: SerialNumber: syz [ 388.640523][ T10] usb 2-1: config 0 descriptor?? [ 388.665238][ T5898] gspca_sunplus: reg_r err -71 [ 388.679587][ T5898] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 388.698805][ T5898] usb 5-1: USB disconnect, device number 87 [ 388.744859][T10083] geneve2: entered promiscuous mode [ 388.764779][T10083] geneve2: entered allmulticast mode [ 389.037160][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 389.245514][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 389.256358][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.365214][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.420844][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 389.460782][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 389.495859][ T10] usb 4-1: Product: syz [ 389.511343][ T10] usb 4-1: Manufacturer: syz [ 389.520081][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 389.554829][ T10] hub 4-1:4.0: USB hub found [ 389.565641][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 389.795375][ T10] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 389.815983][ T5936] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 390.007671][ T5936] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 390.192879][ T5936] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 390.235510][ T10] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 390.262014][ T5936] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 390.283759][ T5936] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 390.323024][ T5936] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 63987, setting to 1024 [ 390.411386][ T10] usb 5-1: device descriptor read/64, error -71 [ 390.443938][ T5936] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 390.484551][ T5936] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 390.494280][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.503030][ T5936] usb 3-1: Product: syz [ 390.510560][ T5936] usb 3-1: Manufacturer: syz [ 390.537608][ T5936] usb 3-1: SerialNumber: syz [ 390.560243][T10091] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 390.570106][ T5936] usb 3-1: ucan: probing device on interface #0 [ 390.583517][ T5936] usb 3-1: ucan: invalid out_ep MaxPacketSize [ 390.603402][ T5936] usb 3-1: ucan: probe failed; try to update the device firmware [ 390.665815][ T10] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 390.774754][T10091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1230'. [ 390.805519][ T10] usb 5-1: device descriptor read/64, error -71 [ 390.889693][ T5936] usb 3-1: USB disconnect, device number 92 [ 390.916039][ T10] usb usb5-port1: attempt power cycle [ 391.262552][ T5936] usb 2-1: USB disconnect, device number 86 [ 391.295667][ T10] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 391.320250][ T10] usb 5-1: device descriptor read/8, error -71 [ 391.695613][ T10] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 391.726607][ T10] usb 5-1: device descriptor read/8, error -71 [ 391.872083][ T10] usb usb5-port1: unable to enumerate USB device [ 391.965580][ T5892] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 392.056841][T10109] FAULT_INJECTION: forcing a failure. [ 392.056841][T10109] name failslab, interval 1, probability 0, space 0, times 0 [ 392.070215][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.3.1237 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 392.070242][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.070252][T10109] Call Trace: [ 392.070258][T10109] [ 392.070265][T10109] dump_stack_lvl+0x241/0x360 [ 392.070295][T10109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.070317][T10109] ? __pfx__printk+0x10/0x10 [ 392.070348][T10109] should_fail_ex+0x424/0x570 [ 392.070368][T10109] should_failslab+0xac/0x100 [ 392.070390][T10109] __kmalloc_cache_noprof+0x73/0x370 [ 392.070411][T10109] ? nfulnl_recv_config+0x7b4/0x1200 [ 392.070435][T10109] nfulnl_recv_config+0x7b4/0x1200 [ 392.070459][T10109] ? nfnetlink_rcv_msg+0x227/0x1190 [ 392.070476][T10109] nfnetlink_rcv_msg+0xbf7/0x1190 [ 392.070492][T10109] ? nfnetlink_rcv_msg+0x227/0x1190 [ 392.070530][T10109] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 392.070551][T10109] ? stack_trace_save+0x11a/0x1d0 [ 392.070607][T10109] ? dev_hard_start_xmit+0x2d4/0x840 [ 392.070628][T10109] ? __dev_queue_xmit+0x1b80/0x3f60 [ 392.070644][T10109] ? __netlink_deliver_tap+0x561/0x7f0 [ 392.070665][T10109] ? netlink_deliver_tap+0x19d/0x1b0 [ 392.070685][T10109] ? netlink_unicast+0x7c6/0x9a0 [ 392.070702][T10109] ? netlink_sendmsg+0x8c3/0xcd0 [ 392.070721][T10109] ? __sock_sendmsg+0x221/0x270 [ 392.070740][T10109] ? ____sys_sendmsg+0x523/0x860 [ 392.070754][T10109] ? __sys_sendmsg+0x271/0x360 [ 392.070780][T10109] netlink_rcv_skb+0x208/0x480 [ 392.070802][T10109] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 392.070819][T10109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.070853][T10109] ? apparmor_capable+0x13b/0x1b0 [ 392.070871][T10109] ? bpf_lsm_capable+0x9/0x10 [ 392.070888][T10109] ? security_capable+0x7e/0x2d0 [ 392.070913][T10109] nfnetlink_rcv+0x296/0x28f0 [ 392.070932][T10109] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.070948][T10109] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.070967][T10109] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.070983][T10109] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.071002][T10109] ? __dev_queue_xmit+0x1780/0x3f60 [ 392.071018][T10109] ? kasan_save_track+0x3f/0x80 [ 392.071033][T10109] ? __kasan_slab_alloc+0x66/0x80 [ 392.071055][T10109] ? do_syscall_64+0xf3/0x230 [ 392.071076][T10109] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 392.071091][T10109] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.071118][T10109] ? __pfx___dev_queue_xmit+0x10/0x10 [ 392.071148][T10109] ? ref_tracker_free+0x63e/0x7e0 [ 392.071165][T10109] ? __asan_memcpy+0x40/0x70 [ 392.071179][T10109] ? __pfx_ref_tracker_free+0x10/0x10 [ 392.071195][T10109] ? __skb_clone+0x5c/0x6d0 [ 392.071223][T10109] ? skb_clone+0x240/0x390 [ 392.071248][T10109] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.071271][T10109] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.071294][T10109] netlink_unicast+0x7f8/0x9a0 [ 392.071320][T10109] ? __pfx_netlink_unicast+0x10/0x10 [ 392.071340][T10109] ? skb_put+0x114/0x1f0 [ 392.071358][T10109] netlink_sendmsg+0x8c3/0xcd0 [ 392.071389][T10109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.071414][T10109] ? aa_sock_msg_perm+0x91/0x160 [ 392.071439][T10109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.071459][T10109] __sock_sendmsg+0x221/0x270 [ 392.071481][T10109] ____sys_sendmsg+0x523/0x860 [ 392.071504][T10109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.071518][T10109] ? __fget_files+0x2a/0x420 [ 392.071534][T10109] ? __fget_files+0x2a/0x420 [ 392.071553][T10109] __sys_sendmsg+0x271/0x360 [ 392.071573][T10109] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.071628][T10109] ? do_syscall_64+0xb6/0x230 [ 392.071649][T10109] do_syscall_64+0xf3/0x230 [ 392.071667][T10109] ? clear_bhb_loop+0x45/0xa0 [ 392.071685][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.071699][T10109] RIP: 0033:0x7fb74e18d169 [ 392.071713][T10109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.071725][T10109] RSP: 002b:00007fb74f04e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.071741][T10109] RAX: ffffffffffffffda RBX: 00007fb74e3a5fa0 RCX: 00007fb74e18d169 [ 392.071752][T10109] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 392.071761][T10109] RBP: 00007fb74f04e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.071770][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.071778][T10109] R13: 0000000000000000 R14: 00007fb74e3a5fa0 R15: 00007fb74e4cfa28 [ 392.071800][T10109] [ 392.151615][ T5892] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 392.154135][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.173861][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 392.177348][ T10] usb 4-1: USB disconnect, device number 72 [ 392.181061][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 392.581199][ T5892] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 392.590730][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.612731][ T5892] usb 2-1: config 0 descriptor?? [ 393.127787][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 393.188109][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.195217][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.218804][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.239562][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 393.245589][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.264527][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 393.272612][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.297659][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.330105][ T5892] a4tech 0003:09DA:001A.000E: unknown main item tag 0x0 [ 393.360823][ T5892] a4tech 0003:09DA:001A.000E: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.1-1/input0 [ 393.371125][T10129] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec2 [ 393.435706][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 393.444441][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.615613][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 393.627094][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 393.649486][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 393.682605][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 393.693426][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.707485][ T10] usb 5-1: Product: syz [ 393.711917][ T10] usb 5-1: Manufacturer: syz [ 393.720551][ T10] usb 5-1: SerialNumber: syz [ 393.744216][ T10] usb 5-1: config 0 descriptor?? [ 393.965538][ T5892] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 394.036451][ T10] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 394.093578][ T10] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 394.239359][ T5892] usb 3-1: config 0 has no interfaces? [ 394.648198][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 394.831401][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.861207][ T10] usb 2-1: USB disconnect, device number 87 [ 394.968917][ T5892] usb 3-1: Product: syz [ 394.977946][ T5892] usb 3-1: Manufacturer: syz [ 394.993577][ T5892] usb 3-1: SerialNumber: syz [ 395.041361][T10146] openvswitch: netlink: Actions may not be safe on all matching packets [ 395.096603][ T5892] usb 3-1: config 0 descriptor?? [ 395.252467][T10148] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 395.282316][T10148] erspan0: mtu less than device minimum [ 396.224381][ T10] usb 5-1: USB disconnect, device number 92 [ 396.281545][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 396.771198][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 396.817662][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 396.905640][ T96] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 397.060319][ T5860] usb 3-1: USB disconnect, device number 93 [ 397.073745][ T96] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 397.093911][ T96] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 397.108247][ T96] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 397.145795][ T96] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 397.155093][ T96] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.178479][ T96] usb 2-1: config 0 descriptor?? [ 397.192409][ T96] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 397.265559][ T5936] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 397.393847][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 397.393867][ T30] audit: type=1400 audit(1744689091.651:190): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: USB disconnect, device number 88 [ 397.456111][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 397.495742][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.523172][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.534852][ T5936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 397.544137][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.554755][ T5936] usb 4-1: config 0 descriptor?? [ 397.556734][ T5860] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 397.717304][ T5860] usb 3-1: New USB device found, idVendor=0545, idProduct=8006, bcdDevice= 3.0a [ 397.728674][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.740497][ T5860] usb 3-1: config 0 descriptor?? [ 397.774666][ T5936] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 397.991970][T10171] IPv6: NLM_F_REPLACE set, but no existing node found! [ 398.230349][ T5936] usb 4-1: USB disconnect, device number 73 [ 398.595632][ T96] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 398.725751][ T96] usb 2-1: device descriptor read/64, error -71 [ 398.777674][T10185] xt_recent: Unsupported userspace flags (000000de) [ 398.975565][ T96] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 399.595486][ T96] usb 2-1: device descriptor read/64, error -71 [ 399.750638][ T96] usb usb2-port1: attempt power cycle [ 400.115542][ T96] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 400.123373][ T5860] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 400.164216][ T96] usb 2-1: device descriptor read/8, error -71 [ 400.338579][ T5892] usb 3-1: USB disconnect, device number 94 [ 400.405745][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 400.423480][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.444582][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.590701][ T96] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 400.618247][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 400.640992][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 400.651662][ T96] usb 2-1: device descriptor read/8, error -71 [ 400.796098][ T96] usb usb2-port1: unable to enumerate USB device [ 401.609633][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 401.631445][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 401.639920][ T5860] usb 4-1: can't read configurations, error -71 [ 401.780181][T10221] xt_recent: Unsupported userspace flags (000000de) [ 401.965672][ T5936] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 402.135033][ T5936] usb 2-1: device descriptor read/64, error -71 [ 402.383722][T10223] vivid-007: ================= START STATUS ================= [ 402.392475][ T5936] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 402.440841][T10223] vivid-007: Enable Output Cropping: true [ 402.475972][T10223] vivid-007: Enable Output Composing: true [ 402.481997][T10223] vivid-007: Enable Output Scaler: true [ 402.495868][T10223] vivid-007: Tx RGB Quantization Range: Automatic [ 402.502603][T10223] vivid-007: Transmit Mode: HDMI [ 402.508232][T10223] vivid-007: Hotplug Present: 0x00000000 [ 402.514050][T10223] vivid-007: RxSense Present: 0x00000000 [ 402.520238][T10223] vivid-007: EDID Present: 0x00000000 [ 402.526221][T10223] vivid-007: ================== END STATUS ================== [ 402.601903][ T5936] usb 2-1: device descriptor read/64, error -71 [ 402.696215][ T5860] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 402.835941][ T5936] usb usb2-port1: attempt power cycle [ 402.935132][ T5860] usb 4-1: not running at top speed; connect to a high speed hub [ 402.959291][ T5860] usb 4-1: config 1 interface 0 has no altsetting 0 [ 403.016474][ T5860] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.40 [ 403.040176][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.057937][ T5860] usb 4-1: Product: syz [ 403.062329][ T5860] usb 4-1: Manufacturer: syz [ 403.069200][ T5860] usb 4-1: SerialNumber: syz [ 403.188476][ T5936] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 403.262058][T10239] vivid-004: disconnect [ 403.289721][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.306842][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.310268][ T5936] usb 2-1: device descriptor read/8, error -71 [ 403.352648][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.395818][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.419871][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.431486][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.442112][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.525138][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.545222][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 403.570705][ T5936] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 403.582046][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 403.599596][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.624904][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.646917][ T5936] usb 2-1: device descriptor read/8, error -71 [ 403.729981][ T5860] usbhid 4-1:1.0: can't add hid device: -71 [ 403.742358][ T5860] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 403.760487][ T5860] usb 4-1: USB disconnect, device number 75 [ 403.786246][ T5936] usb usb2-port1: unable to enumerate USB device [ 403.838042][ T5892] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 403.976203][ T5892] usb 3-1: device descriptor read/64, error -71 [ 404.225596][ T5892] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 404.334951][T10258] sctp: [Deprecated]: syz.0.1287 (pid 10258) Use of int in max_burst socket option deprecated. [ 404.334951][T10258] Use struct sctp_assoc_value instead [ 404.386094][ T5892] usb 3-1: device descriptor read/64, error -71 [ 404.508234][ T5892] usb usb3-port1: attempt power cycle [ 404.565861][ T5936] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 404.755512][ T5936] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.795147][ T5936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 404.804639][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.818360][ T5936] usb 4-1: Product: syz [ 404.822607][ T5936] usb 4-1: Manufacturer: syz [ 404.831599][ T5936] usb 4-1: SerialNumber: syz [ 404.855464][ T5892] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 404.874401][T10257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 404.907440][ T5892] usb 3-1: device descriptor read/8, error -71 [ 404.964596][T10266] netlink: 'syz.1.1291': attribute type 4 has an invalid length. [ 405.175847][ T5892] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 405.316756][ T5892] usb 3-1: device descriptor read/8, error -71 [ 405.534997][T10268] FAULT_INJECTION: forcing a failure. [ 405.534997][T10268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.554384][ T5892] usb usb3-port1: unable to enumerate USB device [ 405.572749][ T5860] usb 4-1: USB disconnect, device number 76 [ 405.615630][T10268] CPU: 0 UID: 0 PID: 10268 Comm: syz.1.1292 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 405.615662][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.615675][T10268] Call Trace: [ 405.615683][T10268] [ 405.615693][T10268] dump_stack_lvl+0x241/0x360 [ 405.615731][T10268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.615761][T10268] ? __pfx__printk+0x10/0x10 [ 405.615809][T10268] should_fail_ex+0x424/0x570 [ 405.615836][T10268] _copy_from_user+0x2d/0xb0 [ 405.615867][T10268] kvmemdup_bpfptr_noprof+0x71/0x100 [ 405.615895][T10268] map_delete_elem+0x1d3/0x5c0 [ 405.615917][T10268] ? bpf_lsm_bpf+0x9/0x10 [ 405.615943][T10268] __sys_bpf+0x549/0x8b0 [ 405.615967][T10268] ? __pfx___sys_bpf+0x10/0x10 [ 405.616003][T10268] ? ksys_write+0x266/0x2d0 [ 405.616040][T10268] __x64_sys_bpf+0x7c/0x90 [ 405.616073][T10268] do_syscall_64+0xf3/0x230 [ 405.616100][T10268] ? clear_bhb_loop+0x45/0xa0 [ 405.616124][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.616144][T10268] RIP: 0033:0x7f735678d169 [ 405.616161][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.616178][T10268] RSP: 002b:00007f7357539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.616200][T10268] RAX: ffffffffffffffda RBX: 00007f73569a5fa0 RCX: 00007f735678d169 [ 405.616214][T10268] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 405.616227][T10268] RBP: 00007f7357539090 R08: 0000000000000000 R09: 0000000000000000 [ 405.616239][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.616251][T10268] R13: 0000000000000000 R14: 00007f73569a5fa0 R15: 00007f7356acfa28 [ 405.616281][T10268] [ 406.055954][T10282] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1294'. [ 406.083301][T10280] veth2: entered allmulticast mode [ 406.278834][T10234] vivid-004: reconnect [ 406.525236][T10291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1298'. [ 406.775757][ T5860] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 406.925512][ T5860] usb 2-1: device descriptor read/64, error -71 [ 406.955607][T10298] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 406.963209][T10298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.990538][T10298] vhci_hcd vhci_hcd.0: Device attached [ 407.165566][ T5860] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 407.165761][ T5936] vhci_hcd: vhci_device speed not set [ 407.259524][ T5936] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 407.315556][ T5860] usb 2-1: device descriptor read/64, error -71 [ 407.665581][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 407.790084][ T5860] usb usb2-port1: attempt power cycle [ 407.826085][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 407.911824][ T10] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 407.925455][ T10] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 407.935944][ T10] usb 5-1: config 0 has no interface number 0 [ 407.942201][ T10] usb 5-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 407.953669][ T10] usb 5-1: config 0 interface 115 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.971039][ T10] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 407.980968][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.989854][ T10] usb 5-1: Product: syz [ 407.994355][ T10] usb 5-1: Manufacturer: syz [ 407.999208][ T10] usb 5-1: SerialNumber: syz [ 408.010144][ T10] usb 5-1: config 0 descriptor?? [ 408.227616][ T10] usb 5-1: USB disconnect, device number 93 [ 408.295511][ T5860] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 408.329112][ T5860] usb 2-1: device descriptor read/8, error -71 [ 408.575723][ T5860] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 408.606506][ T5860] usb 2-1: device descriptor read/8, error -71 [ 408.684182][T10322] FAULT_INJECTION: forcing a failure. [ 408.684182][T10322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.702291][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.0.1306 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 408.702315][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.702325][T10322] Call Trace: [ 408.702332][T10322] [ 408.702339][T10322] dump_stack_lvl+0x241/0x360 [ 408.702368][T10322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.702390][T10322] ? __pfx__printk+0x10/0x10 [ 408.702419][T10322] should_fail_ex+0x424/0x570 [ 408.702438][T10322] _copy_to_user+0x31/0xb0 [ 408.702462][T10322] simple_read_from_buffer+0xc4/0x170 [ 408.702487][T10322] proc_fail_nth_read+0x1ef/0x260 [ 408.702505][T10322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.702522][T10322] ? rw_verify_area+0x246/0x630 [ 408.702538][T10322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.702554][T10322] vfs_read+0x21f/0xb90 [ 408.702568][T10322] ? __fd_array_map_delete_elem+0x1e6/0x290 [ 408.702603][T10322] ? __pfx_vfs_read+0x10/0x10 [ 408.702619][T10322] ? __sys_bpf+0x549/0x8b0 [ 408.702636][T10322] ? __pfx___sys_bpf+0x10/0x10 [ 408.702660][T10322] ksys_read+0x19d/0x2d0 [ 408.702678][T10322] ? __pfx_ksys_read+0x10/0x10 [ 408.702699][T10322] ? do_syscall_64+0xb6/0x230 [ 408.702721][T10322] do_syscall_64+0xf3/0x230 [ 408.702739][T10322] ? clear_bhb_loop+0x45/0xa0 [ 408.702757][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.702772][T10322] RIP: 0033:0x7f486318bb7c [ 408.702785][T10322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.702799][T10322] RSP: 002b:00007f4864075030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.702815][T10322] RAX: ffffffffffffffda RBX: 00007f48633a5fa0 RCX: 00007f486318bb7c [ 408.702828][T10322] RDX: 000000000000000f RSI: 00007f48640750a0 RDI: 0000000000000005 [ 408.702837][T10322] RBP: 00007f4864075090 R08: 0000000000000000 R09: 0000000000000000 [ 408.702846][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.702855][T10322] R13: 0000000000000000 R14: 00007f48633a5fa0 R15: 00007f48634cfa28 [ 408.702877][T10322] [ 408.719494][ T5860] usb usb2-port1: unable to enumerate USB device [ 408.886191][T10325] FAULT_INJECTION: forcing a failure. [ 408.886191][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.945730][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.0.1307 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 408.945760][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.945774][T10325] Call Trace: [ 408.945782][T10325] [ 408.945791][T10325] dump_stack_lvl+0x241/0x360 [ 408.945833][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.945864][T10325] ? __pfx__printk+0x10/0x10 [ 408.945906][T10325] should_fail_ex+0x424/0x570 [ 408.945933][T10325] _copy_from_user+0x2d/0xb0 [ 408.945964][T10325] snd_seq_oss_write+0x5dc/0xc10 [ 408.946014][T10325] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 408.946042][T10325] ? end_current_label_crit_section+0x151/0x180 [ 408.946075][T10325] ? common_file_perm+0x1a6/0x210 [ 408.946109][T10325] ? bpf_lsm_file_permission+0x9/0x10 [ 408.946136][T10325] odev_write+0x5b/0x80 [ 408.946160][T10325] ? __pfx_odev_write+0x10/0x10 [ 408.946186][T10325] vfs_write+0x2bc/0xd10 [ 408.946222][T10325] ? __pfx_vfs_write+0x10/0x10 [ 408.946246][T10325] ? __fget_files+0x2a/0x420 [ 408.946265][T10325] ? __fget_files+0x2a/0x420 [ 408.946285][T10325] ? __fget_files+0x39d/0x420 [ 408.946302][T10325] ? __fget_files+0x2a/0x420 [ 408.946331][T10325] ksys_write+0x19d/0x2d0 [ 408.946356][T10325] ? __pfx_ksys_write+0x10/0x10 [ 408.946387][T10325] ? do_syscall_64+0xb6/0x230 [ 408.946417][T10325] do_syscall_64+0xf3/0x230 [ 408.946443][T10325] ? clear_bhb_loop+0x45/0xa0 [ 408.946468][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.946489][T10325] RIP: 0033:0x7f486318d169 [ 408.946507][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.946525][T10325] RSP: 002b:00007f4864054038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.946548][T10325] RAX: ffffffffffffffda RBX: 00007f48633a6080 RCX: 00007f486318d169 [ 408.946563][T10325] RDX: 0000000000000232 RSI: 00002000000000c0 RDI: 0000000000000003 [ 408.946577][T10325] RBP: 00007f4864054090 R08: 0000000000000000 R09: 0000000000000000 [ 408.946590][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.946602][T10325] R13: 0000000000000000 R14: 00007f48633a6080 R15: 00007f48634cfa28 [ 408.946633][T10325] [ 409.348076][T10328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.682239][T10341] xt_recent: Unsupported userspace flags (000000de) [ 409.856166][T10343] vlan3: entered allmulticast mode [ 409.861432][T10343] bond0: entered allmulticast mode [ 409.866701][T10343] bond_slave_0: entered allmulticast mode [ 409.872612][T10343] bond_slave_1: entered allmulticast mode [ 409.879013][T10343] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 409.886343][T10343] macvlan2: entered allmulticast mode [ 409.891883][T10343] team0: entered allmulticast mode [ 409.897279][T10343] team_slave_0: entered allmulticast mode [ 409.903157][T10343] team_slave_1: entered allmulticast mode [ 409.909625][T10343] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 410.202722][T10305] vhci_hcd: connection reset by peer [ 410.298307][ T13] vhci_hcd: stop threads [ 410.310175][ T13] vhci_hcd: release socket [ 410.388260][ T13] vhci_hcd: disconnect device [ 410.765738][ T5892] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 411.113046][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.128719][ T5892] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.142458][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.165690][ T96] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 411.173514][ T5860] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 411.207254][ T5892] usb 3-1: config 0 descriptor?? [ 411.221976][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 411.349341][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 411.380791][ T5860] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 411.390779][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.411058][ T96] usb 4-1: config 0 has no interfaces? [ 411.426385][ T5860] usb 2-1: config 0 descriptor?? [ 411.449807][ T96] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 411.480436][ T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.609809][ T96] usb 4-1: Product: syz [ 411.614261][ T96] usb 4-1: Manufacturer: syz [ 411.619335][ T96] usb 4-1: SerialNumber: syz [ 411.625060][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 411.632716][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 411.640238][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 411.647904][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 411.656520][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 411.664854][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 411.673845][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 411.685144][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 411.693032][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 411.703368][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 411.738298][T10367] vxcan2: entered promiscuous mode [ 411.864143][T10357] xt_hashlimit: size too large, truncated to 1048576 [ 411.898387][ T96] usb 4-1: config 0 descriptor?? [ 411.915948][T10367] vxcan2: entered allmulticast mode [ 411.922098][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 411.941937][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.046781][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 412.242528][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.285120][ T5892] pwc: recv_control_msg error -32 req 02 val 2900 [ 412.298685][ T5892] pwc: recv_control_msg error -32 req 02 val 2800 [ 412.316265][ T5892] pwc: recv_control_msg error -32 req 04 val 1100 [ 412.340280][ T5892] pwc: Registered as video103. [ 412.371875][ T5936] vhci_hcd: vhci_device speed not set [ 412.371959][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 412.546630][ T5892] usb 3-1: USB disconnect, device number 99 [ 412.723908][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.745558][ T96] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 412.820995][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.927571][ T96] usb 5-1: Using ep0 maxpacket: 8 [ 412.945078][ T96] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.956056][ T96] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.980510][ T96] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.052559][ T96] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.112452][ T96] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.173222][ T96] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.244823][T10380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.460106][ T96] usb 5-1: usb_control_msg returned -32 [ 413.471785][ T96] usbtmc 5-1:16.0: can't read capabilities [ 413.557728][ T5860] usbhid 2-1:0.0: can't add hid device: -71 [ 413.600605][ T5860] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 413.699492][ T5860] usb 2-1: USB disconnect, device number 101 [ 413.933864][T10386] xt_recent: Unsupported userspace flags (000000de) [ 414.018044][ T96] usb 5-1: USB disconnect, device number 94 [ 414.171979][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.181460][ T5898] usb 4-1: USB disconnect, device number 77 [ 414.223581][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.405919][ T5936] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 414.605994][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 414.625625][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 414.646040][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 414.672241][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 414.704303][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 414.733092][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 414.752895][ T5936] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 414.773953][T10409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 414.805868][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.836318][ T5936] usb 3-1: Product: syz [ 414.840604][ T5936] usb 3-1: Manufacturer: syz [ 414.854340][ T5936] usb 3-1: SerialNumber: syz [ 414.930878][ T5936] usb 3-1: config 0 descriptor?? [ 414.951352][T10389] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 414.975530][ T5898] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 414.988978][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 414.998505][ T5936] port100 3-1:0.0: NFC: Could not get supported command types [ 415.009045][ T5860] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 415.127634][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.145658][ T5898] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.160922][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.174596][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.202909][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.214169][ T5860] usb 4-1: config 0 has no interfaces? [ 415.221180][ T5898] usb 2-1: config 0 descriptor?? [ 415.232341][ T5936] usb 3-1: USB disconnect, device number 100 [ 415.278190][ T5860] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.291169][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.308090][ T5860] usb 4-1: Product: syz [ 415.312266][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 415.328216][ T5860] usb 4-1: Manufacturer: syz [ 415.352509][ T5860] usb 4-1: SerialNumber: syz [ 415.391237][ T5860] usb 4-1: config 0 descriptor?? [ 415.660273][T10410] netlink: 'syz.3.1329': attribute type 6 has an invalid length. [ 415.670157][T10410] netlink: 134408 bytes leftover after parsing attributes in process `syz.3.1329'. [ 415.692633][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 415.768631][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 415.782762][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 415.824639][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 415.845005][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 415.859758][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 415.892102][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 415.905817][ T10] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 415.938527][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 415.956806][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 415.976029][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 415.987288][ T5898] pwc: recv_control_msg error -32 req 02 val 2400 [ 416.053704][ T5898] pwc: recv_control_msg error -32 req 02 val 2600 [ 416.088341][ T5898] pwc: recv_control_msg error -32 req 02 val 2900 [ 416.103282][ T10] usb 5-1: config 6 has an invalid interface number: 229 but max is 2 [ 416.137111][ T5898] pwc: recv_control_msg error -32 req 02 val 2800 [ 416.154563][ T10] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 416.170402][ T5898] pwc: recv_control_msg error -32 req 04 val 1100 [ 416.183709][ T5898] pwc: Registered as video103. [ 416.194713][T10429] kvm: kvm [10428]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 416.217471][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 416.234498][ T10] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 416.273294][ T10] usb 5-1: config 6 has no interface number 0 [ 416.435817][ T10] usb 5-1: config 6 interface 229 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 416.470411][ T5898] usb 2-1: USB disconnect, device number 102 [ 416.486896][ T10] usb 5-1: config 6 interface 229 has no altsetting 0 [ 416.523633][ T10] usb 5-1: New USB device found, idVendor=19d2, idProduct=0089, bcdDevice=e7.6e [ 416.535054][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.543456][ T10] usb 5-1: Product: ⱦ [ 416.554031][ T10] usb 5-1: Manufacturer: ぉﺔ䤸ffl㇀ꕴ蕈ꕥ媇熣ᰑ뎿৯л㻵軧Ꟃથ⏺萟㸙𢡊ⶤ枃꘰뭍搃脧벎㯔콿糮磻ᇥ쐦ᤆ孎漢왃ᗙ䘡᱗敖쪊镰姡团㒖樳⒇㯗볽雑५㪾곘㧎앋삢逈夢攸׭ꐍ欢뉸돧抂ꎉᄌ옃뿏쌪顆ㆍ姺伫莫䄝ἱ䣔駯䵢ꜵⴙ妕 [ 416.583979][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.925989][ T10] option 5-1:6.229: GSM modem (1-port) converter detected [ 417.017173][ T10] usb 5-1: USB disconnect, device number 95 [ 417.080298][ T10] option 5-1:6.229: device disconnected [ 417.433489][T10455] sctp: [Deprecated]: syz.1.1345 (pid 10455) Use of int in max_burst socket option. [ 417.433489][T10455] Use struct sctp_assoc_value instead [ 417.473625][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'. [ 417.821666][ T10] usb 4-1: USB disconnect, device number 78 [ 417.885587][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 417.921281][T10463] xt_recent: Unsupported userspace flags (000000de) [ 417.934088][T10461] fuse: Bad value for 'fd' [ 417.963264][T10461] Option ''MO' to dns_resolver key: bad/missing value [ 418.055939][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 418.064476][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.083240][ T24] usb 2-1: config 0 has no interface number 0 [ 418.095898][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 418.106414][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.114462][ T24] usb 2-1: Product: syz [ 418.131854][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 418.136113][ T24] usb 2-1: Manufacturer: syz [ 418.163125][ T24] usb 2-1: SerialNumber: syz [ 418.180035][ T24] usb 2-1: config 0 descriptor?? [ 418.199040][ T24] usb 2-1: selecting invalid altsetting 2 [ 418.204859][ T24] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 418.403162][ T24] usb 2-1: USB disconnect, device number 103 [ 418.725487][ T96] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 418.915917][ T96] usb 4-1: Using ep0 maxpacket: 16 [ 418.972179][ T96] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 418.985520][ T96] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.003056][ T96] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.016983][ T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.125639][ T96] usb 4-1: Product: syz [ 419.140521][ T96] usb 4-1: Manufacturer: syz [ 419.145355][ T96] usb 4-1: SerialNumber: syz [ 419.212095][ T96] usb 4-1: config 0 descriptor?? [ 419.241939][ T96] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 419.290477][ T96] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 419.355714][ T5898] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 419.655692][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 419.733235][ T5892] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 419.752490][ T5898] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 419.856306][ T96] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 419.863239][ T96] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 419.892514][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.915288][ T5892] usb 2-1: config 0 has no interfaces? [ 419.932444][ T5892] usb 2-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 419.942977][ T5892] usb 2-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 419.969568][ T5898] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.985666][ T5892] usb 2-1: Product: syz [ 420.005333][ T5892] usb 2-1: Manufacturer: syz [ 420.012355][ T5892] usb 2-1: SerialNumber: syz [ 420.031863][ T5892] usb 2-1: config 0 descriptor?? [ 420.264245][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.301133][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.384744][ T5898] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 420.392850][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.614344][ T96] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 420.631498][ T96] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 420.644069][ T96] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 420.654519][ T5898] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.666413][ T96] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 420.708039][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.745734][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.791486][ T5898] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 420.886613][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 420.995888][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 421.015562][ T5898] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.028296][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.039837][ T5898] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.059501][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 421.066429][ T5898] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 421.077418][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.087109][ T24] usb 5-1: config 68 has an invalid interface number: 220 but max is 0 [ 421.111436][ T5898] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 421.267204][ T24] usb 5-1: config 68 has no interface number 0 [ 421.336184][ T5898] usb 3-1: USB disconnect, device number 101 [ 421.344681][ T24] usb 5-1: config 68 interface 220 has no altsetting 0 [ 421.375541][ T96] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 421.477506][ T24] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 421.495508][ T96] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 421.535594][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.582042][ T24] usb 5-1: Product: syz [ 421.584233][T10505] xt_recent: Unsupported userspace flags (000000de) [ 421.596348][ T24] usb 5-1: Manufacturer: syz [ 421.631245][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.652914][ T24] usb 5-1: SerialNumber: syz [ 421.699972][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.751903][T10507] fuse: Bad value for 'fd' [ 421.762993][T10507] Option ''MO' to dns_resolver key: bad/missing value [ 422.006979][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.022240][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.902451][ T5898] usb 4-1: USB disconnect, device number 79 [ 423.013302][ T30] audit: type=1326 audit(1744689117.271:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.3.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74e18d169 code=0x0 [ 423.391628][ T96] usb 2-1: USB disconnect, device number 104 [ 423.710768][ T24] gspca_main: spca501-2.14.0 probing 0497:c001 [ 423.734413][ T24] gspca_spca501: reg write: error -71 [ 423.761710][ T24] spca501 5-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 423.843374][ T24] spca501 5-1:68.220: probe with driver spca501 failed with error -22 [ 423.875542][ T5860] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 423.906623][ T24] usb 5-1: USB disconnect, device number 96 [ 424.075624][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 424.127900][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.191276][ T5860] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.197857][T10553] fuse: Bad value for 'fd' [ 424.216017][T10553] Option ''MO' to dns_resolver key: bad/missing value [ 424.228447][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.284066][ T5860] usb 4-1: config 0 descriptor?? [ 424.519391][ T5860] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 424.773129][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 424.815502][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 425.007551][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 425.015088][ T9] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 425.023708][ T9] usb 3-1: config 0 has no interface number 0 [ 425.033062][ T9] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=d8.06 [ 425.044154][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.052494][ T9] usb 3-1: Product: syz [ 425.057427][ T9] usb 3-1: Manufacturer: syz [ 425.062305][ T9] usb 3-1: SerialNumber: syz [ 425.077613][ T9] usb 3-1: config 0 descriptor?? [ 425.354001][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 425.364499][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 425.385841][ T5898] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 425.489462][ T9] usb 3-1: USB disconnect, device number 102 [ 425.535675][ T5898] usb 2-1: device descriptor read/64, error -71 [ 425.805550][ T5898] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 425.965497][ T5898] usb 2-1: device descriptor read/64, error -71 [ 426.078398][ T5898] usb usb2-port1: attempt power cycle [ 426.435463][ T5898] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 426.457372][ T5898] usb 2-1: device descriptor read/8, error -71 [ 426.719323][ T5898] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 426.746036][ T5898] usb 2-1: device descriptor read/8, error -71 [ 426.860502][ T24] usb 4-1: USB disconnect, device number 80 [ 426.868212][ T5898] usb usb2-port1: unable to enumerate USB device [ 427.018380][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.027626][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.039045][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.050985][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.063217][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.076431][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.088927][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.103513][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.179542][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.233779][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.315536][ T5860] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 427.505839][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 427.587485][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.638526][ T5860] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 427.649719][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.688487][ T5860] usb 3-1: config 0 descriptor?? [ 427.708114][ T5860] usb 3-1: bad CDC descriptors [ 427.886317][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 427.930136][ T24] usb 3-1: USB disconnect, device number 103 [ 428.079439][T10594] fuse: Bad value for 'fd' [ 428.102956][T10594] Option ''MO' to dns_resolver key: bad/missing value [ 428.588324][T10604] netlink: 'syz.1.1391': attribute type 6 has an invalid length. [ 428.597065][T10604] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1391'. [ 429.584348][T10639] fuse: Bad value for 'fd' [ 429.606992][T10639] Option ''MO' to dns_resolver key: bad/missing value [ 429.635671][ T5898] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 429.663636][T10622] cgroup: fork rejected by pids controller in /syz1 [ 429.797113][ T5898] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.818033][ T5898] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 429.847804][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.862780][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.883397][T10632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 429.902676][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.675535][ T5860] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 430.875689][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 430.923656][ T5860] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 431.114578][ T5860] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 431.192211][T10682] netlink: 'syz.1.1403': attribute type 6 has an invalid length. [ 431.214526][T10682] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1403'. [ 431.291584][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 431.322875][ T5860] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 431.341183][ T5860] usb 3-1: Product: syz [ 431.354241][ T5860] usb 3-1: Manufacturer: syz [ 432.459075][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1406'. [ 432.540143][ T9] usb 5-1: USB disconnect, device number 97 [ 432.935010][T10707] fuse: Bad value for 'fd' [ 432.963947][T10707] Option ''MO' to dns_resolver key: bad/missing value [ 433.230466][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 433.819794][T10723] netlink: 'syz.1.1416': attribute type 6 has an invalid length. [ 433.843800][T10723] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1416'. [ 434.099145][ T5860] usb 3-1: USB disconnect, device number 104 [ 434.401891][T10743] FAULT_INJECTION: forcing a failure. [ 434.401891][T10743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.434328][T10748] fuse: Bad value for 'fd' [ 434.448155][T10748] Option ''MO' to dns_resolver key: bad/missing value [ 434.455524][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.4.1422 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 434.455558][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.455572][T10743] Call Trace: [ 434.455580][T10743] [ 434.455589][T10743] dump_stack_lvl+0x241/0x360 [ 434.455629][T10743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.455660][T10743] ? __pfx__printk+0x10/0x10 [ 434.455705][T10743] should_fail_ex+0x424/0x570 [ 434.455736][T10743] _copy_from_user+0x2d/0xb0 [ 434.455773][T10743] snd_seq_oss_write+0x5dc/0xc10 [ 434.455829][T10743] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 434.455863][T10743] ? end_current_label_crit_section+0x151/0x180 [ 434.455898][T10743] ? common_file_perm+0x1a6/0x210 [ 434.455934][T10743] ? bpf_lsm_file_permission+0x9/0x10 [ 434.455973][T10743] odev_write+0x5b/0x80 [ 434.455998][T10743] ? __pfx_odev_write+0x10/0x10 [ 434.456026][T10743] vfs_write+0x2bc/0xd10 [ 434.456066][T10743] ? __pfx_vfs_write+0x10/0x10 [ 434.456092][T10743] ? __fget_files+0x2a/0x420 [ 434.456112][T10743] ? __fget_files+0x2a/0x420 [ 434.456134][T10743] ? __fget_files+0x39d/0x420 [ 434.456153][T10743] ? __fget_files+0x2a/0x420 [ 434.456183][T10743] ksys_write+0x19d/0x2d0 [ 434.456211][T10743] ? __pfx_ksys_write+0x10/0x10 [ 434.456244][T10743] ? do_syscall_64+0xb6/0x230 [ 434.456276][T10743] do_syscall_64+0xf3/0x230 [ 434.456305][T10743] ? clear_bhb_loop+0x45/0xa0 [ 434.456332][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.456354][T10743] RIP: 0033:0x7f7b6a98d169 [ 434.456376][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.456395][T10743] RSP: 002b:00007f7b6b752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.456420][T10743] RAX: ffffffffffffffda RBX: 00007f7b6aba6080 RCX: 00007f7b6a98d169 [ 434.456437][T10743] RDX: 0000000000000232 RSI: 00002000000000c0 RDI: 0000000000000003 [ 434.456452][T10743] RBP: 00007f7b6b752090 R08: 0000000000000000 R09: 0000000000000000 [ 434.456466][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.456479][T10743] R13: 0000000000000001 R14: 00007f7b6aba6080 R15: 00007f7b6accfa28 [ 434.456524][T10743] [ 435.251429][ T24] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 435.430452][ T24] usb 3-1: config 65 has an invalid interface number: 95 but max is 0 [ 435.449024][ T24] usb 3-1: config 65 has no interface number 0 [ 435.573777][ T24] usb 3-1: string descriptor 0 read error: -22 [ 435.585343][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 435.605771][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 435.648344][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.725794][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 435.771511][ T24] usbtest 3-1:65.95: Linux gadget zero [ 435.777273][ T24] usbtest 3-1:65.95: low-speed {control in/out} tests (+alt) [ 435.825646][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 435.844765][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.885644][ T9] usb 5-1: config 0 has no interfaces? [ 435.946078][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.007473][ T5892] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 436.017461][ T10] usb 4-1: config 0 has no interfaces? [ 436.037128][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 436.060851][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 436.105485][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.120932][ T10] usb 4-1: Product: syz [ 436.127028][ T5898] usb 3-1: USB disconnect, device number 105 [ 436.143928][ T9] usb 5-1: SerialNumber: syz [ 436.170485][ T10] usb 4-1: Manufacturer: syz [ 436.179468][ T9] usb 5-1: config 0 descriptor?? [ 436.187089][ T10] usb 4-1: SerialNumber: syz [ 436.215807][ T10] usb 4-1: config 0 descriptor?? [ 436.245940][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 436.283838][ T5892] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 436.294930][ T5892] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 436.312508][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 436.322985][ T5892] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 436.337338][ T5892] usb 2-1: Product: syz [ 436.341814][ T5892] usb 2-1: Manufacturer: syz [ 436.396522][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.415938][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.450538][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 436.471736][T10768] netlink: 'syz.3.1428': attribute type 6 has an invalid length. [ 436.481725][T10768] netlink: 134408 bytes leftover after parsing attributes in process `syz.3.1428'. [ 437.005348][ T5898] usb 5-1: USB disconnect, device number 98 [ 437.134127][T10777] overlayfs: missing 'lowerdir' [ 438.085637][ T5892] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 438.337700][T10793] delete_channel: no stack [ 438.405559][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 438.412720][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 438.424896][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 438.481267][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 438.546069][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.635616][ T9] usb 4-1: USB disconnect, device number 81 [ 438.662919][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.726885][ T5892] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 438.748901][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.882172][ T5892] usb 5-1: Product: syz [ 438.945680][ T5892] usb 5-1: Manufacturer: syz [ 438.956892][ T5892] usb 5-1: SerialNumber: syz [ 439.023519][T10804] fuse: Bad value for 'fd' [ 439.054167][ T5892] usb 5-1: config 0 descriptor?? [ 439.054640][T10804] Option ''MO' to dns_resolver key: bad/missing value [ 439.062468][ T5892] port100 5-1:0.0: NFC: Could not get supported command types [ 439.123219][ T5898] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 439.187036][T10807] FAULT_INJECTION: forcing a failure. [ 439.187036][T10807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.274824][ T5892] usb 2-1: USB disconnect, device number 109 [ 439.318393][ T96] usb 5-1: USB disconnect, device number 99 [ 439.362074][T10807] CPU: 1 UID: 0 PID: 10807 Comm: syz.0.1439 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 439.362099][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.362108][T10807] Call Trace: [ 439.362115][T10807] [ 439.362124][T10807] dump_stack_lvl+0x241/0x360 [ 439.362172][T10807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.362201][T10807] ? __pfx__printk+0x10/0x10 [ 439.362237][T10807] should_fail_ex+0x424/0x570 [ 439.362257][T10807] _copy_from_user+0x2d/0xb0 [ 439.362280][T10807] snd_seq_oss_write+0x5dc/0xc10 [ 439.362332][T10807] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 439.362359][T10807] ? end_current_label_crit_section+0x151/0x180 [ 439.362386][T10807] ? common_file_perm+0x1a6/0x210 [ 439.362412][T10807] ? bpf_lsm_file_permission+0x9/0x10 [ 439.362433][T10807] odev_write+0x5b/0x80 [ 439.362457][T10807] ? __pfx_odev_write+0x10/0x10 [ 439.362484][T10807] vfs_write+0x2bc/0xd10 [ 439.362518][T10807] ? __pfx_vfs_write+0x10/0x10 [ 439.362537][T10807] ? __fget_files+0x2a/0x420 [ 439.362550][T10807] ? __fget_files+0x2a/0x420 [ 439.362564][T10807] ? __fget_files+0x39d/0x420 [ 439.362576][T10807] ? __fget_files+0x2a/0x420 [ 439.362603][T10807] ksys_write+0x19d/0x2d0 [ 439.362630][T10807] ? __pfx_ksys_write+0x10/0x10 [ 439.362659][T10807] ? do_syscall_64+0xb6/0x230 [ 439.362684][T10807] do_syscall_64+0xf3/0x230 [ 439.362703][T10807] ? clear_bhb_loop+0x45/0xa0 [ 439.362721][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.362738][T10807] RIP: 0033:0x7f486318d169 [ 439.362757][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.362775][T10807] RSP: 002b:00007f4863fef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.362796][T10807] RAX: ffffffffffffffda RBX: 00007f48633a6080 RCX: 00007f486318d169 [ 439.362811][T10807] RDX: 0000000000000232 RSI: 00002000000000c0 RDI: 0000000000000003 [ 439.362824][T10807] RBP: 00007f4863fef090 R08: 0000000000000000 R09: 0000000000000000 [ 439.362833][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.362842][T10807] R13: 0000000000000001 R14: 00007f48633a6080 R15: 00007f48634cfa28 [ 439.362864][T10807] [ 439.363457][ T5898] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.542565][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.757714][ T5898] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.773781][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.815612][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.822367][T10814] geneve2: entered promiscuous mode [ 439.887531][T10801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 439.900817][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.129855][T10818] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 440.141493][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.148257][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.444140][T10827] ptrace attach of "./syz-executor exec"[5854] was attempted by ""[10827] [ 440.465564][ T5892] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 440.635646][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 440.646017][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 440.658383][ T5892] usb 5-1: can't read configurations, error -61 [ 440.805598][ T5892] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 440.950105][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 440.978039][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 440.990751][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 441.008260][ T5892] usb 5-1: can't read configurations, error -61 [ 441.029711][ T5892] usb usb5-port1: attempt power cycle [ 441.127811][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 441.141535][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.162652][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 441.186000][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57344, setting to 1024 [ 441.210249][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2039, setting to 1024 [ 441.233660][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 441.256060][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 441.282840][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.292266][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.300674][ T9] usb 4-1: Product: syz [ 441.304889][ T9] usb 4-1: Manufacturer: ఊ [ 441.309804][ T9] usb 4-1: SerialNumber: syz [ 441.375847][ T5892] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 441.409997][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 441.424767][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 441.443358][ T5892] usb 5-1: can't read configurations, error -61 [ 441.585610][ T5892] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 441.618573][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 441.660327][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 441.668447][ T5892] usb 5-1: can't read configurations, error -61 [ 441.681037][ T5892] usb usb5-port1: unable to enumerate USB device [ 441.724759][ T5898] usb 3-1: USB disconnect, device number 106 [ 442.250188][ T5898] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 442.405684][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 442.419491][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 442.436924][ T5898] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 442.450693][ T5898] usb 3-1: config 0 has no interface number 0 [ 442.457486][ T5898] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 442.469138][ T5898] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 442.482161][ T5898] usb 3-1: config 0 interface 88 has no altsetting 0 [ 442.490187][ T5898] usb 3-1: language id specifier not provided by device, defaulting to English [ 442.511938][ T5898] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 442.522737][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 442.535659][ T5898] usb 3-1: Product: syz [ 442.540049][ T5898] usb 3-1: SerialNumber: syz [ 442.558239][ T5898] usb 3-1: config 0 descriptor?? [ 443.017893][ T5898] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input38 [ 443.047403][ T5898] usb 3-1: USB disconnect, device number 107 [ 443.415502][ T5936] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 443.563375][T10845] fuse: Unknown parameter ']_Yu c5е-o͔F*)bo FgƳ&}1(w' [ 443.634010][ T5936] usb 2-1: config 0 has no interfaces? [ 443.674868][ T5936] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 443.688983][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.729630][ T5936] usb 2-1: Product: syz [ 443.733907][ T5936] usb 2-1: Manufacturer: syz [ 443.800636][ T9] cdc_ncm 4-1:1.0: bind() failure [ 443.827404][ T5936] usb 2-1: SerialNumber: syz [ 443.879423][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 443.913222][ T5936] usb 2-1: config 0 descriptor?? [ 443.955088][ T9] cdc_ncm 4-1:1.1: bind() failure [ 443.963397][T10853] netlink: 'syz.3.1453': attribute type 10 has an invalid length. [ 443.990206][ T9] usb 4-1: USB disconnect, device number 82 [ 444.015638][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 444.049442][T10853] dummy0: entered promiscuous mode [ 444.064843][T10853] dummy0: entered allmulticast mode [ 444.075613][T10853] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 444.125962][ T96] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 444.190822][T10840] netlink: 'syz.1.1448': attribute type 6 has an invalid length. [ 444.199706][T10840] netlink: 134408 bytes leftover after parsing attributes in process `syz.1.1448'. [ 444.275652][ T96] usb 3-1: device descriptor read/64, error -71 [ 444.465570][T10862] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10862 comm: syz.3.1457) [ 444.489844][ T30] audit: type=1800 audit(1744689138.751:192): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1457" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=32922 res=0 errno=0 [ 444.525542][ T96] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 444.659475][ T96] usb 3-1: device descriptor read/64, error -71 [ 444.777449][ T96] usb usb3-port1: attempt power cycle [ 445.185675][ T96] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 445.216237][ T96] usb 3-1: device descriptor read/8, error -71 [ 445.455707][ T96] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 445.476393][ T96] usb 3-1: device descriptor read/8, error -71 [ 445.836730][ T96] usb usb3-port1: unable to enumerate USB device [ 446.149203][ T5860] usb 2-1: USB disconnect, device number 110 [ 446.255538][ T96] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 446.415750][ T96] usb 5-1: Using ep0 maxpacket: 8 [ 446.422960][ T96] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 446.431465][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 446.443846][ T96] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.455980][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.467351][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.480499][ T96] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 446.488041][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 446.499446][ T96] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.511863][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.523141][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.543840][ T96] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 446.551357][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 446.562832][ T96] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.574940][ T5860] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 446.583093][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.594872][ T96] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.609026][ T96] usb 5-1: string descriptor 0 read error: -22 [ 446.615326][ T96] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 446.624471][ T96] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.642097][ T96] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 446.665472][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 446.745936][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 446.752848][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.764215][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.774668][ T5860] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 446.784896][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.795773][ T5860] usb 4-1: config 0 descriptor?? [ 446.805658][ T9] usb 2-1: device descriptor read/64, error -71 [ 446.845610][ T5936] usb 5-1: USB disconnect, device number 104 [ 446.988674][T10890] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1465'. [ 447.048050][T10879] adutux: No device or device unplugged -19 [ 447.056344][ T9] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 447.075132][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1466'. [ 447.093927][T10895] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3104 [ 447.195895][ T9] usb 2-1: device descriptor read/64, error -71 [ 447.221176][ T5860] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000F/input/input39 [ 447.304913][ T5860] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 447.306277][ T9] usb usb2-port1: attempt power cycle [ 447.495563][ T5892] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 447.659771][ T5892] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 447.671121][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.675538][ T9] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 447.678198][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=101b, bcdDevice= 0.00 [ 447.694922][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.706860][ T9] usb 2-1: device descriptor read/8, error -71 [ 447.710339][ T5892] usb 3-1: config 0 descriptor?? [ 447.719447][T10899] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 447.845686][ T5860] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 447.965752][ T9] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 447.977648][ T96] usb 4-1: USB disconnect, device number 83 [ 448.006945][ T9] usb 2-1: device descriptor read/8, error -71 [ 448.008900][ T5860] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.032130][ T5860] usb 5-1: config 0 has no interface number 0 [ 448.051794][ T5860] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 448.062712][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.074092][ T5860] usb 5-1: Product: syz [ 448.079509][ T5860] usb 5-1: Manufacturer: syz [ 448.084150][ T5860] usb 5-1: SerialNumber: syz [ 448.093178][ T5860] usb 5-1: config 0 descriptor?? [ 448.103526][ T5860] cx231xx 5-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 448.114158][ T5860] cx231xx 5-1:0.1: Not found matching IAD interface [ 448.135070][ T9] usb usb2-port1: unable to enumerate USB device [ 448.143763][ T5892] hid-generic 0003:046D:101B.0010: hidraw0: USB HID v0.01 Device [HID 046d:101b] on usb-dummy_hcd.2-1/input0 [ 448.336810][ T96] usb 3-1: USB disconnect, device number 112 [ 448.359043][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.370007][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.425645][ T5892] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 448.555928][ T5892] usb 2-1: device descriptor read/64, error -71 [ 448.710301][T10911] netlink: 'syz.3.1471': attribute type 3 has an invalid length. [ 448.795887][ T5892] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 448.926364][ T5892] usb 2-1: device descriptor read/64, error -71 [ 449.036218][ T5892] usb usb2-port1: attempt power cycle [ 449.285696][ T96] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 449.499974][ T96] usb 3-1: config 0 has no interfaces? [ 449.533546][ T96] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.546900][ T5892] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 449.566207][ T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.574269][ T96] usb 3-1: Product: syz [ 449.604475][ T96] usb 3-1: Manufacturer: syz [ 449.611361][ T96] usb 3-1: SerialNumber: syz [ 449.628472][ T96] usb 3-1: config 0 descriptor?? [ 449.695529][ T5892] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 449.726567][ T5892] usb 2-1: device descriptor read/8, error -71 [ 449.843825][ T5892] usb usb2-port1: unable to enumerate USB device [ 449.861439][T10923] netlink: 'syz.2.1472': attribute type 6 has an invalid length. [ 449.869780][T10923] netlink: 134408 bytes leftover after parsing attributes in process `syz.2.1472'. [ 449.959234][ T5860] usb 5-1: USB disconnect, device number 105 [ 450.166905][T10938] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1479'. [ 450.177116][T10937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1479'. [ 450.214030][T10939] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1479'. [ 450.615532][ T5860] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 450.928811][ T5860] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 450.940574][ T5860] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.981394][ T5860] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 451.203455][ T5860] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 451.211885][ T5860] usb 4-1: Product: syz [ 451.216292][ T5860] usb 4-1: Manufacturer: syz [ 451.220920][ T5860] usb 4-1: SerialNumber: syz [ 451.277511][ T5860] usb 4-1: config 0 descriptor?? [ 451.548234][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.611914][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.635854][ T9] usb 4-1: USB disconnect, device number 84 [ 452.049887][ T96] usb 3-1: USB disconnect, device number 113 [ 452.580736][T10955] JFS: charset not found [ 452.665519][ T5860] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 452.885617][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 452.905512][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 452.912453][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 452.924443][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.934968][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 452.948663][ T5860] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 452.958718][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.966965][ T5860] usb 4-1: Product: syz [ 452.972648][ T5860] usb 4-1: Manufacturer: syz [ 452.977835][ T5860] usb 4-1: SerialNumber: syz [ 453.037920][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 453.049888][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 453.061291][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.090024][ T5860] usb 4-1: config 0 descriptor?? [ 453.109573][ T24] usb 2-1: config 0 descriptor?? [ 453.118326][ T5860] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 453.325917][ T5860] usb 4-1: USB disconnect, device number 85 [ 453.785734][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 453.787088][T10996] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.821419][ T24] asix 2-1:0.0: probe with driver asix failed with error -61 [ 454.246429][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 454.393698][ T5898] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 454.487426][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.498239][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 454.507609][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.524317][ T9] usb 5-1: config 0 descriptor?? [ 454.538157][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 454.548158][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 454.562797][ T5898] usb 3-1: config 0 has no interfaces? [ 454.574069][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 454.584641][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.596021][ T5898] usb 3-1: Product: syz [ 454.607541][ T5898] usb 3-1: Manufacturer: syz [ 454.618962][ T5898] usb 3-1: SerialNumber: syz [ 454.636358][ T5898] usb 3-1: config 0 descriptor?? [ 454.692327][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 454.881783][T11014] netlink: 'syz.2.1498': attribute type 6 has an invalid length. [ 454.890221][T11014] netlink: 134408 bytes leftover after parsing attributes in process `syz.2.1498'. [ 454.935531][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 454.944953][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 454.953008][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 455.099047][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 455.133989][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 455.201574][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 455.218418][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 455.238893][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 455.251379][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 455.262681][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 455.333257][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 455.342948][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 455.363696][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 455.376368][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 455.402452][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 455.433397][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 455.455641][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 455.735619][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 455.770202][ T9] pwc: Registered as video103. [ 455.806970][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.891755][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 455.976574][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 455.994749][ T9] usb 5-1: USB disconnect, device number 106 [ 456.052748][ T24] usb 4-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 456.073659][ T24] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.134627][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 456.186547][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 456.196812][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.215294][ T24] usb 4-1: Product: syz [ 456.221200][ T24] usb 4-1: Manufacturer: syz [ 456.237887][ T24] usb 4-1: SerialNumber: syz [ 456.748087][ T9] usb 2-1: USB disconnect, device number 119 [ 456.955566][ T5860] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 457.136570][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 457.144044][ T5860] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 457.162735][ T5860] usb 5-1: config 0 has no interface number 0 [ 457.173881][ T5860] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 457.187363][ T5860] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 457.198195][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.205578][ T9] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 457.290564][ T5860] usb 5-1: config 0 descriptor?? [ 457.449705][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.464353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.476353][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 457.488299][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.509174][ T9] usb 2-1: config 0 descriptor?? [ 457.840980][ T5892] usb 3-1: USB disconnect, device number 114 [ 457.943597][ T9] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 458.133591][ T9] isku 0003:1E7D:319C.0011: couldn't init struct isku_device [ 458.149463][ T9] isku 0003:1E7D:319C.0011: couldn't install keyboard [ 458.163788][ T9] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -71 [ 458.178066][ T5153] Bluetooth: hci2: unexpected event for opcode 0x080b [ 458.197884][ T9] usb 2-1: USB disconnect, device number 120 [ 458.273416][T11051] netlink: 'syz.2.1510': attribute type 13 has an invalid length. [ 458.599330][ T24] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 458.626295][T11051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.660569][ T24] usb 4-1: USB disconnect, device number 86 [ 458.777644][T11058] fuse: Unknown parameter 'BGKtx Nkީ)wob xd"l100000000000000000000007' [ 459.395690][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 459.570468][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 459.628331][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 459.680113][ T9] usb 2-1: config 0 has no interface number 0 [ 459.708207][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 459.775791][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 459.792236][ T5860] usb 5-1: string descriptor 0 read error: -71 [ 459.808131][ T5860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.826557][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.835092][ T9] usb 2-1: Product: syz [ 459.880222][ T9] usb 2-1: Manufacturer: syz [ 459.890273][ T9] usb 2-1: SerialNumber: syz [ 459.909503][ T9] usb 2-1: config 0 descriptor?? [ 459.911416][T11068] kvm: user requested TSC rate below hardware speed [ 459.952718][ T5860] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 460.000664][ T5860] usb 5-1: USB disconnect, device number 107 [ 460.159877][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 460.185704][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 460.195098][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 460.204327][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 460.238522][ T9] usb 2-1: USB disconnect, device number 121 [ 460.427125][ T5860] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 460.598165][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.624119][ T5860] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.638803][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.690051][ T5860] usb 5-1: config 0 descriptor?? [ 460.759514][ T5860] pwc: Askey VC010 type 2 USB webcam detected. [ 460.797554][ T24] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 460.894751][T11095] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 460.945564][ T24] usb 3-1: device descriptor read/64, error -71 [ 460.952114][ T5892] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 461.138899][ T5892] usb 4-1: config 0 has no interfaces? [ 461.161203][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.199176][ T24] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 461.217216][ T5860] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.240524][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 461.260889][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.271290][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.278867][ T5892] usb 4-1: Product: syz [ 461.283767][ T5860] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.291798][ T5892] usb 4-1: Manufacturer: syz [ 461.297003][ T5860] pwc: recv_control_msg error -32 req 04 val 1300 [ 461.305336][ T5860] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.312703][ T5892] usb 4-1: SerialNumber: syz [ 461.320089][ T5860] pwc: recv_control_msg error -32 req 02 val 2000 [ 461.327482][ T5860] pwc: recv_control_msg error -32 req 02 val 2100 [ 461.334670][ T5860] pwc: recv_control_msg error -32 req 04 val 1500 [ 461.342388][ T5860] pwc: recv_control_msg error -32 req 02 val 2500 [ 461.350220][ T5860] pwc: recv_control_msg error -32 req 02 val 2400 [ 461.357645][ T5860] pwc: recv_control_msg error -32 req 02 val 2600 [ 461.364819][ T5860] pwc: recv_control_msg error -32 req 02 val 2900 [ 461.372329][ T5860] pwc: recv_control_msg error -32 req 02 val 2800 [ 461.379811][ T5860] pwc: recv_control_msg error -32 req 04 val 1100 [ 461.390047][ T5860] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.396893][ T24] usb 3-1: device descriptor read/64, error -71 [ 461.405769][ T5860] pwc: Registered as video103. [ 461.414295][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 461.428077][ T5892] usb 4-1: config 0 descriptor?? [ 461.438537][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.439108][ T5860] usb 5-1: USB disconnect, device number 108 [ 461.455069][ T5898] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 461.506529][ T24] usb usb3-port1: attempt power cycle [ 461.682766][T11091] netlink: 'syz.3.1519': attribute type 6 has an invalid length. [ 461.690747][T11091] netlink: 134408 bytes leftover after parsing attributes in process `syz.3.1519'. [ 461.794421][ T5898] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 461.803847][ T5898] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 461.851404][ T5898] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 461.885600][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.893816][ T24] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 461.949270][ T24] usb 3-1: device descriptor read/8, error -71 [ 461.976862][ T5898] usb 2-1: Product: syz [ 461.988713][ T5898] usb 2-1: Manufacturer: syz [ 462.064592][ T5898] usb 2-1: SerialNumber: syz [ 462.128022][ T5898] rndis_host 2-1:7.0: skipping garbage [ 462.218292][ T5153] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 462.227992][ T5153] Bluetooth: hci2: Injecting HCI hardware error event [ 462.239253][ T5844] Bluetooth: hci2: hardware error 0x00 [ 462.251049][ T24] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 462.290523][ T5898] usb 2-1: bad CDC descriptors [ 462.291500][ T24] usb 3-1: device descriptor read/8, error -71 [ 462.384409][ T5898] option 2-1:7.0: GSM modem (1-port) converter detected [ 462.425953][ T24] usb usb3-port1: unable to enumerate USB device [ 462.454478][ T5898] usb 2-1: USB disconnect, device number 122 [ 462.476837][ T5898] option 2-1:7.0: device disconnected [ 463.745804][ T5898] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 463.794848][T11124] erspan0: mtu less than device minimum [ 463.895575][ T5898] usb 2-1: device descriptor read/64, error -71 [ 463.937453][ T9] usb 4-1: USB disconnect, device number 87 [ 464.135514][ T5898] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 464.275716][ T5898] usb 2-1: device descriptor read/64, error -71 [ 464.293899][T11130] vivid-000: disconnect [ 464.306216][ T5844] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 464.395994][ T5898] usb usb2-port1: attempt power cycle [ 464.415523][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 464.560669][T11135] [ 464.563054][T11135] ====================================================== [ 464.570085][T11135] WARNING: possible circular locking dependency detected [ 464.577121][T11135] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 464.584249][T11135] ------------------------------------------------------ [ 464.591277][T11135] syz.4.1536/11135 is trying to acquire lock: [ 464.597449][T11135] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 464.606819][T11135] [ 464.606819][T11135] but task is already holding lock: [ 464.614204][T11135] ffff88805c7e8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 464.618183][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.624415][T11135] [ 464.624415][T11135] which lock already depends on the new lock. [ 464.624415][T11135] [ 464.624427][T11135] [ 464.624427][T11135] the existing dependency chain (in reverse order) is: [ 464.624436][T11135] [ 464.624436][T11135] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 464.624473][T11135] lock_acquire+0x116/0x2f0 [ 464.650865][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.654573][T11135] __mutex_lock+0x1a5/0x10c0 [ 464.680469][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.682307][T11135] smc_switch_to_fallback+0x35/0xda0 [ 464.696202][T11135] smc_sendmsg+0x11f/0x530 [ 464.701174][T11135] __sock_sendmsg+0x221/0x270 [ 464.706390][T11135] __sys_sendto+0x365/0x4c0 [ 464.711423][T11135] __x64_sys_sendto+0xde/0x100 [ 464.716724][T11135] do_syscall_64+0xf3/0x230 [ 464.721758][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.728178][T11135] [ 464.728178][T11135] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 464.735947][T11135] lock_acquire+0x116/0x2f0 [ 464.740973][T11135] lock_sock_nested+0x48/0x100 [ 464.746303][T11135] do_ipv6_setsockopt+0xccd/0x3680 [ 464.751970][T11135] ipv6_setsockopt+0x5d/0x170 [ 464.757289][T11135] do_sock_setsockopt+0x3b1/0x710 [ 464.762957][T11135] __x64_sys_setsockopt+0x1ee/0x280 [ 464.768718][T11135] do_syscall_64+0xf3/0x230 [ 464.773757][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.780294][T11135] [ 464.780294][T11135] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 464.787607][T11135] validate_chain+0xa69/0x24e0 [ 464.792902][T11135] __lock_acquire+0xad5/0xd80 [ 464.798110][T11135] lock_acquire+0x116/0x2f0 [ 464.803171][T11135] __mutex_lock+0x1a5/0x10c0 [ 464.808324][T11135] ip_mroute_setsockopt+0x161/0x11f0 [ 464.814163][T11135] do_ip_setsockopt+0x1114/0x39c0 [ 464.819715][T11135] ip_setsockopt+0x63/0x100 [ 464.824744][T11135] smc_setsockopt+0x25c/0xd50 [ 464.829945][T11135] do_sock_setsockopt+0x3b1/0x710 [ 464.835492][T11135] __x64_sys_setsockopt+0x1ee/0x280 [ 464.841332][T11135] do_syscall_64+0xf3/0x230 [ 464.846717][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.853150][T11135] [ 464.853150][T11135] other info that might help us debug this: [ 464.853150][T11135] [ 464.863380][T11135] Chain exists of: [ 464.863380][T11135] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 464.863380][T11135] [ 464.877129][T11135] Possible unsafe locking scenario: [ 464.877129][T11135] [ 464.884586][T11135] CPU0 CPU1 [ 464.889964][T11135] ---- ---- [ 464.895326][T11135] lock(&smc->clcsock_release_lock); [ 464.900713][T11135] lock(sk_lock-AF_INET6); [ 464.907830][T11135] lock(&smc->clcsock_release_lock); [ 464.915818][T11135] lock(rtnl_mutex); [ 464.919808][T11135] [ 464.919808][T11135] *** DEADLOCK *** [ 464.919808][T11135] [ 464.927951][T11135] 1 lock held by syz.4.1536/11135: [ 464.933063][T11135] #0: ffff88805c7e8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 464.943628][T11135] [ 464.943628][T11135] stack backtrace: [ 464.949522][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.4.1536 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 464.949543][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.949554][T11135] Call Trace: [ 464.949562][T11135] [ 464.949569][T11135] dump_stack_lvl+0x241/0x360 [ 464.949597][T11135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.949621][T11135] ? __pfx__printk+0x10/0x10 [ 464.949644][T11135] ? print_lock+0x171/0x1a0 [ 464.949666][T11135] print_circular_bug+0x2e1/0x300 [ 464.949690][T11135] check_noncircular+0x142/0x160 [ 464.949715][T11135] validate_chain+0xa69/0x24e0 [ 464.949737][T11135] ? __lock_acquire+0xad5/0xd80 [ 464.949761][T11135] __lock_acquire+0xad5/0xd80 [ 464.949780][T11135] lock_acquire+0x116/0x2f0 [ 464.949796][T11135] ? ip_mroute_setsockopt+0x161/0x11f0 [ 464.949824][T11135] __mutex_lock+0x1a5/0x10c0 [ 464.949845][T11135] ? ip_mroute_setsockopt+0x161/0x11f0 [ 464.949871][T11135] ? preempt_schedule_common+0x84/0xd0 [ 464.949891][T11135] ? ip_mroute_setsockopt+0x161/0x11f0 [ 464.949914][T11135] ? __pfx___mutex_lock+0x10/0x10 [ 464.949942][T11135] ip_mroute_setsockopt+0x161/0x11f0 [ 464.949964][T11135] ? preempt_schedule+0xe4/0xf0 [ 464.949982][T11135] ? preempt_schedule_common+0x84/0xd0 [ 464.950002][T11135] ? register_lock_class+0x54/0x330 [ 464.950019][T11135] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 464.950048][T11135] ? __pfx___mutex_trylock_common+0x10/0x10 [ 464.950072][T11135] do_ip_setsockopt+0x1114/0x39c0 [ 464.950097][T11135] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 464.950120][T11135] ? smc_setsockopt+0x1b2/0xd50 [ 464.950145][T11135] ? __pfx___mutex_lock+0x10/0x10 [ 464.950166][T11135] ? futex_wake+0x525/0x5d0 [ 464.950187][T11135] ip_setsockopt+0x63/0x100 [ 464.950207][T11135] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 464.950233][T11135] smc_setsockopt+0x25c/0xd50 [ 464.950254][T11135] ? __pfx_aa_sk_perm+0x10/0x10 [ 464.950276][T11135] ? __pfx_smc_setsockopt+0x10/0x10 [ 464.950296][T11135] ? aa_sock_opt_perm+0x79/0x120 [ 464.950321][T11135] ? __pfx_smc_setsockopt+0x10/0x10 [ 464.950340][T11135] do_sock_setsockopt+0x3b1/0x710 [ 464.950361][T11135] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 464.950378][T11135] ? __fget_files+0x2a/0x420 [ 464.950396][T11135] ? __fget_files+0x39d/0x420 [ 464.950409][T11135] ? __fget_files+0x2a/0x420 [ 464.950427][T11135] __x64_sys_setsockopt+0x1ee/0x280 [ 464.950447][T11135] do_syscall_64+0xf3/0x230 [ 464.950468][T11135] ? clear_bhb_loop+0x45/0xa0 [ 464.950487][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.950504][T11135] RIP: 0033:0x7f7b6a98d169 [ 464.950521][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.950537][T11135] RSP: 002b:00007f7b6b7d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 464.950555][T11135] RAX: ffffffffffffffda RBX: 00007f7b6aba5fa0 RCX: 00007f7b6a98d169 [ 464.950568][T11135] RDX: 00000000000000d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 464.950579][T11135] RBP: 00007f7b6aa0e990 R08: 0000000000000000 R09: 0000000000000000 [ 464.950590][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.950600][T11135] R13: 0000000000000000 R14: 00007f7b6aba5fa0 R15: 00007f7b6accfa28 [ 464.950619][T11135] [ 465.270463][ T5898] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 465.280136][ T9] usb 4-1: config 0 descriptor?? [ 465.295313][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 465.300090][T11135] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 465.302709][ T5898] usb 2-1: device descriptor read/8, error -71 [ 465.321948][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.332823][T11135] bond0: (slave team0): Enslaving as an active interface with an up link [ 465.525551][ T5936] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 465.575545][ T5898] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 465.596079][ T5898] usb 2-1: device descriptor read/8, error -71 [ 465.707304][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.717398][ T5898] usb usb2-port1: unable to enumerate USB device [ 465.726846][ T5936] usb 3-1: config 8 has an invalid interface number: 122 but max is 1 [ 465.735046][ T5936] usb 3-1: config 8 has an invalid interface number: 49 but max is 1 [ 465.743392][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 465.750733][ T5936] usb 3-1: config 8 has no interface number 0 [ 465.757027][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 465.763617][ T5936] usb 3-1: config 8 has no interface number 1 [ 465.769852][ T5936] usb 3-1: config 8 interface 122 has no altsetting 0 [ 465.776769][ T5936] usb 3-1: config 8 interface 49 has no altsetting 0 [ 465.783614][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 465.791234][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 465.798845][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 465.806332][ T5936] usb 3-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=7b.80 [ 465.815571][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.824243][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 465.831107][ T5936] usb 3-1: Product: syz [ 465.835333][ T5936] usb 3-1: Manufacturer: syz [ 465.840283][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 465.846790][ T5936] usb 3-1: SerialNumber: syz [ 465.852452][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 465.861115][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 465.868353][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 465.875288][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 465.882507][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 465.889734][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 465.897504][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 465.904555][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 465.912132][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 465.921798][ T9] pwc: Registered as video103. [ 465.928833][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 465.941777][ T9] usb 4-1: USB disconnect, device number 88 [ 467.488360][ T5936] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 467.548366][ T5936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 467.556646][ T5936] dib0700: firmware download failed at 7 with -8 [ 467.567022][ T5936] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 467.578930][ T5936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 467.587044][ T5936] dib0700: firmware download failed at 7 with -8 [ 467.595771][ T5936] usb 3-1: USB disconnect, device number 119