last executing test programs: 10.129497236s ago: executing program 2 (id=1861): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x3, @tick=0x8, 0x7, {0x80, 0x1}, 0x0, 0x2, 0xf9}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x8, r4}, 0x18) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000906050000000000000000000100000430000880100007800c00018008000140ac1414aa0c0007800800094000008001100007800c00018008000140e0000001540008800c00078005000700000000000c000780060004404e210000100007800c0019407fffffffffffffff0c0007800800094000000009100007800c00168008000140ac1414aa0c00078006001d40338f00000900020073797a300000000005000100070000000900020073797a3200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40004}, 0x24000) (async) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe36a, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0x10, 0x0, 0x60}}) (async) r8 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 8.193537834s ago: executing program 2 (id=1866): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3962d7357970ca08, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000000)=0xc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000005100)=ANY=[@ANYBLOB="1201100381d7df08da0594008a380102030109022d"], 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x8800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040), &(0x7f0000000080)) 5.423582517s ago: executing program 4 (id=1875): add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a01010044140503000000000000000064010100000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="410b541c578ac8a6"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0xa, 0x0, 0x1, 0xde, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r2}, &(0x7f0000000040)=0x8) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r3, 0x4008c001, &(0x7f0000000800)) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4004804) socket$inet6(0xa, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) 5.420502607s ago: executing program 3 (id=1876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x2, 0x14e, [0x0, 0x200000000000, 0x200000000030, 0x200000000264], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x48, 0x2c91, 'veth1_to_bridge\x00', '\x00', 'wg1\x00', 'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0x0, 0xff, 0x0, 0x0, 0xcd1829c3f0a614ce], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x6, "223899f828f82c91dfeca3e0f63028cc8f7d232442c1798b790c2c21b727"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x1c6) (fail_nth: 2) 4.63845901s ago: executing program 2 (id=1877): getdents(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x25, 0xf8, 0x5e, 0x40, 0xbfd, 0x17, 0x2fa3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x70, 0x31, 0x66, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x8c, 0x2}}]}}]}}]}}, 0x0) 4.363914131s ago: executing program 1 (id=1879): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 4.195467483s ago: executing program 1 (id=1880): socket$inet6_sctp(0xa, 0x1, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) syz_io_uring_setup(0x422, &(0x7f0000000240)={0x0, 0x6b90, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x0, 0x2, 0xc, 0x7}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.767588294s ago: executing program 3 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x5bb4, &(0x7f0000000100)={0x0, 0x400004, 0x2, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf7}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r9, 0x8906, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r11, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x464040, 0x0) r12 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r12) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2.958005679s ago: executing program 4 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x9}, {0x3}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x4}}], 0x38) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r9, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$packet(0x11, 0x3, 0x300) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) (async) semop(0x0, &(0x7f00000002c0), 0x7) (async) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) (async) sendto$packet(r12, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.739408827s ago: executing program 3 (id=1885): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x101040, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x3c) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xf2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f0000000180)='nfs\x00', 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r1], 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x1, 0xc, 0xda04}, 0x9, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000}, 0x2) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) write$cgroup_pid(r9, &(0x7f00000003c0), 0xffffffa0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000000)=0x3, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1a, 0x5, 0x7, 0xfff, 0x2, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, r0, 0x5, 0x4}, 0x50) 2.735128964s ago: executing program 4 (id=1886): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900010000000000000000000a024000", @ANYRES32=0x0, @ANYBLOB="5c0fd3282d0080000000000000d58caba5bb21ff7d7899ccc11e555e6b0e3fef13da33421a1728d7cb70c99fc8d5111c26d2519f389088b62119ea59bb280b3051ae4ed50ee104c9fffe00"/85], 0x24}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r5, &(0x7f00000002c0), 0x15) splice(r4, 0x0, r6, 0x0, 0x19401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x28, 0x0, 0x0) r10 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0xb96d, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.732688826s ago: executing program 1 (id=1887): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x1e, 0x80805, 0x80000000) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010002000000000098"], 0x30}], 0x1, 0x0) r3 = syz_clone3(&(0x7f0000000540)={0x10280000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x3}, &(0x7f0000000440)=""/209, 0xd1, &(0x7f0000000240)=""/97, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gropxid=\x00', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0xffffffff90809082, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) sendmmsg$unix(r1, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="9d9e41970d", 0x5}], 0x1, &(0x7f0000004640)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r9}}}], 0x60, 0x20000041}}], 0x1, 0xc004) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000002280)="9a01000000f800b8d58800000f23d00fc7af00000100351000000d660fd35a0064640f79ea66baf80cb8c85f54806566bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x5e}], 0x1, 0x4a, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000080)={0xc0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0x102, 0x3, 0x4, 0x5, 0x8]}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r4}, &(0x7f0000000300)=0x0) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x7ffd, 0x20000000003ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2.600543556s ago: executing program 3 (id=1888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x103, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) (async) lseek(0xffffffffffffffff, 0x0, 0x1) (async) r9 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180)) (async) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 2.352321189s ago: executing program 1 (id=1890): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[], 0x250}}, 0x0) (async) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000dc0)=[{0x7, 0x0, 0x83}], 0x1, 0x2, 0x0, 0x0, 0x0, 0x5c}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r12 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000080)=r11, 0x12) (async) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f00000000c0)=[0x2a, 0x4]) 2.156963185s ago: executing program 4 (id=1891): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x1, 0xaa, "c335c77ee14b66c9f626e79e7a811875f592e797ec2b8c67ef86b27c46e80b6ce09ebf3563ac89edb5ed90bbf9912f4236b4e4ceb7713c83ba8b3dfb50c254da2a0a1c21cabcae45a601469b0963622ab7fdee54952b04165634ed6cca6462337fb105e8eb349ccd1ac9a3a760c7868443df2bf2bdcbcc47515135f9bf8d9c353b8cdf8bc06e81312d9e79e630607d522dbed775dedbd9f121ecca50e3f9fcd08e51043514e620692d19"}}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724", @ANYRES8=r1], 0x0) 2.085695535s ago: executing program 0 (id=1892): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838079f96bd206d4776368ed2a92432e5af71", 0x33}], 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x18, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x29, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = syz_open_procfs$userns(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000340)={0x100088, 0x2, 0x20000, {r4}}, 0x20) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0xa, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x920, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYRES8, @ANYRES32=0x0, @ANYBLOB="505508d4a3a2368b46c6476008e61ec3462e35af2e9083ad443e6afed53ce72f2dc89e3378f1e8eb4f34c103ddf1ce776ca96b956460914596663b65b40f49ea4200fafb6d47ff8c461fb35bd67faa50bc198072741a733811f48e930d7451707d631107975a0517c2ce3f44ca2cb924270c3d01d7df067801aedff5fba46d"], 0x0) (rerun: 64) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) 1.776350546s ago: executing program 0 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7422}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4091) 1.673189475s ago: executing program 0 (id=1894): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',='], 0x0, 0x0, 0x0) (async, rerun: 64) memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x2) (async, rerun: 64) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x30000002, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/108) (async) unshare(0x2c020400) (async) r10 = socket(0x10, 0x3, 0x0) sendfile(r0, r2, &(0x7f0000000200), 0x9) (async, rerun: 32) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (rerun: 32) write(r10, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x2020) 1.528893222s ago: executing program 2 (id=1895): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000440)={0xc, {0x91, "044573c19cf8eb22c66a82ca77d4d6de6e5b45ab211e6c133817bd8c913556c1b251585715af029d997c3353866fcd1659b2dc6fd88e51a096d95ece381ab6a79231fa83d952e44d3b47daab592ab189f1939e972a92e0128b369d03140300df4129035995f9cb9745db10b1ebe006fe5c610e695883dff36f325a4e40418a6c34eb2ed630dd66acf9562b"}}, 0x9b) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'lo\x00', @broadcast}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendto$inet6(r4, 0x0, 0xffffffffffffff4c, 0x4040088, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x3, @pix={0x401, 0x8001, 0x32315659, 0x7, 0x8, 0x5, 0x2, 0x5, 0x1, 0x8, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) 1.42433378s ago: executing program 0 (id=1896): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x80000018) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced50ac2b5546216e3ce964359fa4ea01a34f038f38509172feed11b0fd62fd47a9d236813b4ebda3ebdd33aec5ea71251a0651345627e476fa4b9c478f296d2457c7d362ae632c70c3e21690c445f0be021cfeb01fb01d1067fd8649a829d29876de4ff1a0b79a857865968344af10f218279d2ccacfdb652a0c7b", 0xbe}], 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="20020080f70aac6a49cf118d633dd97b4b6340a154be8a264d2aec88ef4aed9335f811aafa863c3d1a730c061b3bcce153", @ANYRES16=r2, @ANYBLOB="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"], 0x220}}, 0x8000) r3 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c40) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x3, 0x1, 0x0, "d569de61dd2f1aeb7ee8589325f457a0c04b14100000007e0800006b1e8ac19e", 0x34363248}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffff, 0xffffffff, &(0x7f00000005c0)) 1.263082329s ago: executing program 3 (id=1897): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x918, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040001) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000540001000400000000000008070000000ea5609e3611486ff72b409e8f76c455105dcf9233d4c683f648656c6e03ed17f9882b814bf1512a591b55b0ca618efd274d46b6136535fdc20a3ea5ff31c74fb0eaf5214458ad76f0f8f92060f9a6ed909b54578e7a2841414f9a6c0e40f05c707a617b55393421666ed3d4cf159acd4f765e40373662ffbe12f9abaabb24e02a9ba1bf5a9add6596fb1c0fbd026236105bcd57007d04d1d41a45f855d8cdc8177ef67d79a17591452fa0ed61948bd9d7809649a1ae1fb2680bbc084e33a3bf5018049597d4c7188b9e924feffc4a442f35f899e633266a476c84e4978cb353c588c5c2f2bd9e78adb6cbb17a010e", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES16=r0, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000005c0)={0x0, 0x0, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e0400003400168030"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x304000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000480)=0x7fffffff, 0x4) socket$netlink(0x10, 0x3, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r8}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000000300)={0x8, r10, r8}) 1.255337964s ago: executing program 0 (id=1898): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async, rerun: 32) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x9ef5}) (rerun: 64) 1.031386524s ago: executing program 1 (id=1899): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r1, 0x29, 0xb, 0xfa, 0xfffff703, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @ipv4={'\x00', '\xff\xff', @remote}, 0x781, 0x80, 0x1, 0x3}}) prctl$PR_SVE_GET_VL(0x33, 0x1e173) 890.909622ms ago: executing program 1 (id=1900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) lgetxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000640)=@known='user.incfs.id\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0x1000}}, './file0\x00'}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRES8=r2], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4) 639.292753ms ago: executing program 4 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='/', 0x1}], 0x1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x28, r9, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x4, 0x72bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x32818, 0x4a3}, [@IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x24048004) 395.413935ms ago: executing program 2 (id=1902): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003d) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x48001059, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f00000002c0), &(0x7f00000000c0)=r4}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x23, &(0x7f0000000140)="104f955f89ee062fab4c43c253046a62cddaa629aeb5c4b6760b09aa986640ae5b08a6", 0x81, 0x0, &(0x7f0000000180)="a4dca73d897602a601cc740cfc7490ba110a9aaf06c0f14573547996f13cfbff00f2791bdd5bc2e8094f10a0aa9ffe1ae1333686eefe93212a3d3d505b84d9a5c5050bedf2ec9c6005412dc847c7990150f49afb0e66ce8fed8d781e879384a074973f446818f144eefe8f97401c0f6792cceed5d6765a49d410a08d64751fdb48"}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) 228.662851ms ago: executing program 4 (id=1903): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) 205.643657ms ago: executing program 3 (id=1904): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x2, 0x14e, [0x0, 0x200000000000, 0x200000000030, 0x200000000264], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0100000003000000480000002c9176657468315f746f5f62726964676500000000000000000000000000000000007767310000000000000000000000000076657468305f746f5f68737200000000aaaaaaaaaa3b00fff9cd1966ff08ace2f90000ce00aaaaaaaaaabb00ffff00ffff6e0000006e000000be0000006c6f670100000000000000000000000000000000000000000000000000000000280000000000000006223899f828f82c91dfeca3e0f63028cc8f7d232442c1798b790c2c21b727000000000000000000000000000000000000000000000000000000000000020000"]}, 0x1b7) r1 = socket(0x2000000000000021, 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/34, &(0x7f0000000180)=0x22) dup(r0) 51.604634ms ago: executing program 2 (id=1905): migrate_pages(0x0, 0x0, &(0x7f0000000040)=0x6000000000000000, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac053702000000000001090224000100006000090400800203000200092107040001220500090581032007"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200108"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1906): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000280)="341c81a0e87cbac6350e155e3d80ab5ea283fd8c533747b12e84698a36b7ebb5d997dad022d82e9593594e6f56000000000000ec0627d22859bb37b0731b46e4d8ca08b00b12ba3b5d5c164fdf743e2c8f91444901062463a6c79c0900450c832af0def05733f6dd34889a81fdadf37932d839b7f3b1", 0x60) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): x7f4af7d8f749 code=0x7ffc0000 [ 533.239823][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.252020][ T30] audit: type=1326 audit(1766127402.115:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 533.277951][ T5954] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 533.507911][ T30] audit: type=1326 audit(1766127402.115:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 533.674964][ T30] audit: type=1326 audit(1766127402.275:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 533.706700][ T5954] usb 4-1: USB disconnect, device number 110 [ 533.846654][ T30] audit: type=1326 audit(1766127402.275:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 533.958178][ T30] audit: type=1326 audit(1766127402.275:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12111 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4af7dc2005 code=0x7ffc0000 [ 534.007031][ T30] audit: type=1326 audit(1766127402.325:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 534.337767][ T30] audit: type=1326 audit(1766127402.325:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 534.486555][ T30] audit: type=1326 audit(1766127402.325:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7d8f749 code=0x7ffc0000 [ 535.458548][T12143] hub 9-0:1.0: USB hub found [ 535.476726][T12143] hub 9-0:1.0: 1 port detected [ 535.904098][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 535.917675][T12159] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1533'. [ 536.058470][ T5954] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 536.265551][ T5954] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 536.275792][ T5954] usb 2-1: config 0 has no interface number 0 [ 536.282762][ T5954] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 536.313320][ T5954] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 536.323765][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.338499][ T5954] usb 2-1: Product: syz [ 536.342913][ T5954] usb 2-1: Manufacturer: syz [ 536.349515][ T5954] usb 2-1: SerialNumber: syz [ 536.502826][ T5954] usb 2-1: config 0 descriptor?? [ 536.509339][T12162] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.532034][ T5954] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 32:be:8e:72:d8:73 [ 536.546542][ T5893] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 536.558240][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 536.588065][T12176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.617263][ T5968] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 536.637769][T12176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.659422][T12176] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1539'. [ 536.710868][ T5893] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 536.728706][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.740079][ T5893] usb 5-1: Product: syz [ 536.746869][ T5893] usb 5-1: Manufacturer: syz [ 536.752335][ T5893] usb 5-1: SerialNumber: syz [ 536.766556][ T5893] usb 5-1: config 0 descriptor?? [ 536.777299][ T5968] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 536.782614][ T5893] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 536.795380][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 536.816508][ T5828] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 536.833788][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 536.875237][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 536.887966][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 536.898314][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 536.927526][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 536.938374][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 536.956558][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 536.979946][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 536.986781][ T5828] usb 3-1: device descriptor read/64, error -71 [ 537.005714][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.018984][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.041984][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.054637][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.065742][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.091009][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.106011][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.116838][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.136770][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.156526][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.165622][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.189732][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.190900][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.204581][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.228316][ T5968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.243348][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.259193][ T5828] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 537.282942][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.290668][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.298799][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 537.309662][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1540'. [ 537.316908][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.329311][ T5968] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 537.339960][ T5968] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 537.352074][ T5968] usb 4-1: Product: syz [ 537.357385][T12185] geneve2: entered promiscuous mode [ 537.363338][ T5968] usb 4-1: Manufacturer: syz [ 537.370300][T12185] geneve2: entered allmulticast mode [ 537.375989][ T5968] usb 4-1: SerialNumber: syz [ 537.389952][ T6390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.399582][ T5828] usb 3-1: device descriptor read/64, error -71 [ 537.408948][ T5968] usb 4-1: config 0 descriptor?? [ 537.418298][ T6390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.442317][ T5968] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 537.454229][ T6390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.491156][ T5893] gspca_sunplus: reg_w_riv err -110 [ 537.499452][ T6390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.507470][ T5828] usb usb3-port1: attempt power cycle [ 537.517940][ T5893] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 537.744284][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 537.745636][ T5893] usb 4-1: USB disconnect, device number 111 [ 537.777726][ T5893] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 537.856865][ T5828] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 537.897257][ T5828] usb 3-1: device descriptor read/8, error -71 [ 538.146854][ T5828] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 538.167547][ T5828] usb 3-1: device descriptor read/8, error -71 [ 538.214019][ T5968] usb 2-1: USB disconnect, device number 116 [ 538.221645][ T5968] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 538.277616][ T5828] usb usb3-port1: unable to enumerate USB device [ 538.789201][T12214] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 538.834627][T12214] fuse: Bad value for 'fd' [ 538.873860][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 538.873875][ T30] audit: type=1800 audit(1766127407.995:829): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1543" name="file1" dev="tmpfs" ino=1680 res=0 errno=0 [ 539.636987][ T5968] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 539.754320][ T5828] usb 5-1: USB disconnect, device number 111 [ 539.830456][ T5968] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 539.857826][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.897746][ T5968] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 539.932556][ T5968] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 539.959412][ T5968] usb 2-1: Manufacturer: syz [ 539.992602][ T5893] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 539.997552][ T5968] usb 2-1: config 0 descriptor?? [ 540.169536][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 540.182064][ T5893] usb 4-1: config 0 has an invalid interface number: 38 but max is 0 [ 540.226445][ T5968] rc_core: IR keymap rc-hauppauge not found [ 540.226487][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.233017][ T5968] Registered IR keymap rc-empty [ 540.286653][ T5968] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 540.307055][ T5893] usb 4-1: config 0 has no interface number 0 [ 540.313235][ T5893] usb 4-1: config 0 interface 38 altsetting 157 endpoint 0x6 has invalid wMaxPacketSize 0 [ 540.406385][ T5893] usb 4-1: config 0 interface 38 altsetting 157 bulk endpoint 0x6 has invalid maxpacket 0 [ 540.416844][ T5828] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 540.447629][ T5893] usb 4-1: config 0 interface 38 altsetting 157 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.500240][ T5893] usb 4-1: config 0 interface 38 has no altsetting 0 [ 540.521591][ T5893] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 540.529003][ T5968] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46 [ 540.581770][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.634797][T12282] use of bytesused == 0 is deprecated and will be removed in the future, [ 540.643910][T12282] use the actual size instead. [ 540.751686][ T5893] usb 4-1: Product: syz [ 540.752592][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.773288][ T5893] usb 4-1: Manufacturer: syz [ 540.776412][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.820020][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 540.823311][ T5893] usb 4-1: SerialNumber: syz [ 540.856605][ T5828] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 540.881293][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.019607][ T5828] usb 5-1: config 0 descriptor?? [ 541.150552][ T5893] usb 4-1: config 0 descriptor?? [ 541.236870][ T5893] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 541.509562][ T24] usb 2-1: USB disconnect, device number 117 [ 541.703149][ T5828] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 541.721129][ T5828] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 541.895171][ T5828] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 541.919698][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.949400][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.191573][ T5893] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 542.385881][ T5828] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 542.423796][ T5828] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71 [ 542.566065][T12305] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 542.593647][ T5828] usb 5-1: USB disconnect, device number 112 [ 542.963748][ T5828] usb 4-1: USB disconnect, device number 112 [ 543.542371][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'. [ 543.605886][T12319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.721843][ T30] audit: type=1326 audit(1766127412.845:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.2.1561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4af7d8f749 code=0x0 [ 544.078843][ T5828] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 544.236658][ T5828] usb 4-1: device descriptor read/64, error -71 [ 544.506547][ T5828] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 544.676974][ T5828] usb 4-1: device descriptor read/64, error -71 [ 544.808162][ T5828] usb usb4-port1: attempt power cycle [ 544.957014][ T5968] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 545.096982][ T5968] usb 3-1: device descriptor read/64, error -71 [ 545.166519][ T5828] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 545.210811][ T5828] usb 4-1: device descriptor read/8, error -71 [ 545.336466][ T5968] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 545.499690][ T5968] usb 3-1: device descriptor read/64, error -71 [ 545.509603][ T5828] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 545.549254][ T5828] usb 4-1: device descriptor read/8, error -71 [ 545.642059][ T5968] usb usb3-port1: attempt power cycle [ 545.698915][T12375] tipc: Started in network mode [ 545.703958][T12375] tipc: Node identity caaaa4332f77, cluster identity 4711 [ 545.722805][T12375] tipc: Enabled bearer , priority 0 [ 545.730011][ T5828] usb usb4-port1: unable to enumerate USB device [ 545.749197][T12375] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 546.006768][ T5968] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 546.037270][ T5968] usb 3-1: device descriptor read/8, error -71 [ 546.146846][ T24] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 546.175945][ T5893] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 546.276900][ T5968] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 546.297658][ T5968] usb 3-1: device descriptor read/8, error -71 [ 546.312220][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.321377][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 546.352155][ T24] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 546.366471][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 546.374668][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.374834][ T24] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 546.413032][ T5968] usb usb3-port1: unable to enumerate USB device [ 546.426406][ T5893] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 546.437022][ T24] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 546.447378][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 546.477376][ T24] usb 5-1: config 129 has no interface number 0 [ 546.483943][ T24] usb 5-1: config 129 has no interface number 1 [ 546.502276][ T5893] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 546.521874][ T5893] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 546.521890][ T24] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 546.560603][ T5893] usb 1-1: Product: syz [ 546.564940][ T24] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 546.585415][ T5893] usb 1-1: Manufacturer: syz [ 546.590364][ T24] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 546.616753][ T5893] usb 1-1: SerialNumber: syz [ 546.624225][ T24] usb 5-1: config 129 interface 135 has no altsetting 0 [ 546.637105][ T5893] usb 1-1: config 0 descriptor?? [ 546.657090][ T24] usb 5-1: config 129 interface 5 has no altsetting 0 [ 546.671825][ T24] usb 5-1: language id specifier not provided by device, defaulting to English [ 546.707163][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 546.720509][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.736725][ T24] usb 5-1: Manufacturer:  [ 546.741469][ T24] usb 5-1: SerialNumber: Ჸ [ 546.836515][ T5968] tipc: Node number set to 3856507955 [ 547.016521][T12370] netlink: 'syz.4.1569': attribute type 2 has an invalid length. [ 547.057601][ T5893] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 547.075815][ T5893] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 547.772975][T12379] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1570'. [ 548.875011][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.944511][ T5968] usb 1-1: USB disconnect, device number 100 [ 548.970550][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 549.121276][ T24] usb 5-1: USB disconnect, device number 113 [ 549.265773][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.736445][ T24] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 549.963399][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.974648][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.015444][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.027101][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 550.039748][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.067338][ T24] usb 5-1: config 0 descriptor?? [ 550.122952][T12427] bond1: option lp_interval: invalid value (0) [ 550.139047][T12427] bond1: option lp_interval: allowed values 1 - 2147483647 [ 550.165661][T12427] bond1 (unregistering): Released all slaves [ 550.734433][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 550.744403][ T5828] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 550.752372][ T5968] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 550.775163][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 550.798107][ T24] usb 5-1: USB disconnect, device number 114 [ 550.920709][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 550.951318][ T5828] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 550.964676][ T5968] usb 1-1: config 1 interface 1 has no altsetting 0 [ 550.974960][ T5828] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 550.997867][ T5968] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.015105][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.024337][ T5828] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 551.036014][ T5968] usb 1-1: Product: syz [ 551.040655][ T5968] usb 1-1: Manufacturer: syz [ 551.045390][ T5828] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 551.059214][ T5968] usb 1-1: SerialNumber: syz [ 551.076809][ T5828] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.087326][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.226579][ T5893] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 551.280862][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.293092][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.327586][ T5828] ath6kl: Failed to submit usb control message: -71 [ 551.335111][ T5828] ath6kl: unable to send the bmi data to the device: -71 [ 551.343064][ T5968] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 551.349667][ T5828] ath6kl: Unable to send get target info: -71 [ 551.362549][ T5828] ath6kl: Failed to init ath6kl core: -71 [ 551.378731][ T5828] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 551.390815][ T5893] usb 2-1: config 0 has no interfaces? [ 551.392468][ T5968] usb 1-1: USB disconnect, device number 101 [ 551.421097][ T5893] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 551.423729][ T5828] usb 3-1: USB disconnect, device number 104 [ 551.463523][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.473907][ T5893] usb 2-1: Product: syz [ 551.478705][ T5893] usb 2-1: Manufacturer: syz [ 551.483669][ T5893] usb 2-1: SerialNumber: syz [ 551.507681][ T5893] usb 2-1: config 0 descriptor?? [ 551.759066][ T5968] usb 2-1: USB disconnect, device number 118 [ 552.476579][ T5893] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 552.496679][ T5954] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 552.876477][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 552.886753][ T5893] usb 3-1: config 0 has no interfaces? [ 552.895018][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 552.904362][ T5893] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 552.916802][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.930047][ T5954] usb 1-1: config 1 has no interface number 0 [ 552.948047][ T5893] usb 3-1: Manufacturer: syz [ 552.970977][ T5954] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 552.999196][ T5893] usb 3-1: config 0 descriptor?? [ 553.022725][ T5954] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 553.076537][ T5954] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 553.132988][ T5954] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 553.176705][ T5954] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 553.240175][ T5954] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.262230][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.281700][ T5954] usb 1-1: Product: syz [ 553.285908][ T5954] usb 1-1: Manufacturer: syz [ 553.308524][ T5954] usb 1-1: SerialNumber: syz [ 553.537590][T12462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 553.576289][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.805438][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.836988][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.896586][ T5893] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 553.917141][ T5937] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 553.995105][T12464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.062335][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.165725][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.193801][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 554.201027][ T5937] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.222175][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.246180][ T5937] usb 5-1: config 1 interface 1 has no altsetting 0 [ 554.256614][ T5893] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 554.273094][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.281693][ T5937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.298453][ T5937] usb 5-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 554.311241][ T5893] usb 4-1: config 0 descriptor?? [ 554.329082][ T5937] usb 5-1: Product: syz [ 554.346055][ T5937] usb 5-1: Manufacturer: syz [ 554.358430][ T5937] usb 5-1: SerialNumber: syz [ 554.473271][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.481353][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.511703][ T5954] cdc_ncm 1-1:1.1: bind() failure [ 554.744264][ T30] audit: type=1326 audit(1766127423.865:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 554.791840][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 554.816735][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.896488][ T30] audit: type=1326 audit(1766127423.895:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.006865][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.200064][ T5954] usb 3-1: USB disconnect, device number 105 [ 555.224721][ T5968] usb 1-1: USB disconnect, device number 102 [ 555.285246][ T5893] aquacomputer_d5next 0003:0C70:F010.0017: unknown main item tag 0x0 [ 555.332939][ T5893] aquacomputer_d5next 0003:0C70:F010.0017: unknown main item tag 0x0 [ 555.356629][ T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 555.423318][ T5893] aquacomputer_d5next 0003:0C70:F010.0017: hidraw0: USB HID v0.05 Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0 [ 555.467034][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.481108][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.513493][ T30] audit: type=1326 audit(1766127423.895:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.596471][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 555.605781][ T10] usb 2-1: config index 0 descriptor too short (expected 53308, got 828) [ 555.615161][ T10] usb 2-1: config 203 has too many interfaces: 40, using maximum allowed: 32 [ 555.624484][ T10] usb 2-1: config 203 has an invalid descriptor of length 216, skipping remainder of the config [ 555.635484][ T10] usb 2-1: config 203 has 0 interfaces, different from the descriptor's value: 40 [ 555.659940][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=f4.de [ 555.669681][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.679107][ T10] usb 2-1: Product: syz [ 555.683532][ T10] usb 2-1: Manufacturer: з [ 555.691861][ T10] usb 2-1: SerialNumber: syz [ 555.738296][ T30] audit: type=1326 audit(1766127423.895:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.838803][ T30] audit: type=1326 audit(1766127423.895:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.882937][ T30] audit: type=1326 audit(1766127423.905:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.916990][ T30] audit: type=1326 audit(1766127423.905:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 555.966766][ T5968] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 556.069534][ T10] usb 2-1: USB disconnect, device number 119 [ 556.100221][ T30] audit: type=1326 audit(1766127423.905:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 556.124244][ T30] audit: type=1326 audit(1766127423.915:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 556.171672][ T5937] usb 5-1: USB disconnect, device number 115 [ 556.202440][ T30] audit: type=1326 audit(1766127423.915:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.1.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b618f749 code=0x7ffc0000 [ 556.206513][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 556.347114][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.418823][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.448438][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.484189][ T5968] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 556.518561][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.570901][ T5968] usb 3-1: config 0 descriptor?? [ 556.988084][ T24] usb 4-1: USB disconnect, device number 117 [ 557.009689][ T5968] saitek 0003:06A3:0621.0018: item fetching failed at offset 4/5 [ 557.028199][ T5968] saitek 0003:06A3:0621.0018: parse failed [ 557.056454][ T5968] saitek 0003:06A3:0621.0018: probe with driver saitek failed with error -22 [ 557.329867][ T10] usb 3-1: USB disconnect, device number 106 [ 557.551525][ T5937] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 557.868425][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.891115][T12539] fuse: Bad value for 'fd' [ 557.979894][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.996629][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.017490][ T5937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.044279][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.096614][ T5937] usb 4-1: config 0 descriptor?? [ 558.884149][ T5937] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 558.908788][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 558.918728][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 559.136778][ T5937] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 559.146461][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'. [ 559.294518][T12522] input: syz0 as /devices/virtual/input/input48 [ 559.907383][ T5968] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 560.096527][ T24] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 560.146580][ T5937] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 560.256542][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 560.269353][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 560.284609][ T24] usb 1-1: config 0 has no interface number 0 [ 560.301352][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.347354][ T5937] usb 2-1: device descriptor read/64, error -71 [ 560.348164][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 560.373642][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.375367][T12575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1623'. [ 560.387597][ T24] usb 1-1: Product: syz [ 560.407776][ T10] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 560.508529][ T24] usb 1-1: Manufacturer: syz [ 560.540276][ T24] usb 1-1: SerialNumber: syz [ 560.560255][ T24] usb 1-1: config 0 descriptor?? [ 560.597392][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 560.606696][ T5937] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 560.608418][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 560.766486][ T5937] usb 2-1: device descriptor read/64, error -71 [ 560.877139][ T5937] usb usb2-port1: attempt power cycle [ 560.962105][T12592] sctp: [Deprecated]: syz.2.1629 (pid 12592) Use of int in maxseg socket option. [ 560.962105][T12592] Use struct sctp_assoc_value instead [ 561.010919][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 561.087446][T12594] fuse: Bad value for 'user_id' [ 561.092755][T12594] fuse: Bad value for 'user_id' [ 561.107068][ T5968] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 561.216470][ T5937] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 561.237186][ T5937] usb 2-1: device descriptor read/8, error -71 [ 561.268641][ T5968] usb 5-1: config 0 interface 0 has no altsetting 0 [ 561.275427][ T5968] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 561.284734][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.295608][ T5968] usb 5-1: config 0 descriptor?? [ 561.298139][ T5893] usb 4-1: USB disconnect, device number 118 [ 561.431496][ T24] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 561.445313][ T24] em28xx 1-1:0.132: board has no eeprom [ 561.486609][ T5937] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 561.507312][ T5937] usb 2-1: device descriptor read/8, error -71 [ 561.526738][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 561.534670][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 561.541624][ T5913] em28xx 1-1:0.132: Registering V4L2 extension [ 561.617040][ T5937] usb usb2-port1: unable to enumerate USB device [ 561.887459][ T5968] elo 0003:04E7:0009.001A: unknown main item tag 0x0 [ 561.901695][ T5968] elo 0003:04E7:0009.001A: unknown main item tag 0x0 [ 561.913088][ T5968] elo 0003:04E7:0009.001A: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 562.136471][ T5937] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 562.296455][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 562.303312][ T5937] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 562.312638][ T5937] usb 3-1: config 0 has no interface number 0 [ 562.321700][ T5937] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 562.331115][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.339398][ T5937] usb 3-1: Product: syz [ 562.343686][ T5937] usb 3-1: Manufacturer: syz [ 562.348820][ T5937] usb 3-1: SerialNumber: syz [ 562.356767][ T5937] usb 3-1: config 0 descriptor?? [ 562.366982][ T5937] usb 3-1: bad CDC descriptors [ 562.378133][ T5968] usb 1-1: USB disconnect, device number 103 [ 562.384456][ T5913] em28xx 1-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 562.411866][ T5968] em28xx 1-1:0.132: Disconnecting em28xx [ 562.512208][T12606] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1631'. [ 562.525897][ T5913] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 562.533701][ T5913] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 562.541820][ T5913] em28xx 1-1:0.132: No AC97 audio processor [ 562.562778][ T5913] usb 1-1: Decoder not found [ 562.570801][ T5937] usb 3-1: USB disconnect, device number 107 [ 562.576461][ T5913] em28xx 1-1:0.132: failed to create media graph [ 562.583316][ T5913] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 562.651634][ T5913] em28xx 1-1:0.132: Remote control support is not available for this card. [ 562.669463][ T5968] em28xx 1-1:0.132: Closing input extension [ 562.702754][ T5968] em28xx 1-1:0.132: Freeing device [ 563.016487][ T5968] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 563.169218][ T5968] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 563.181199][ T5968] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 563.192082][ T5968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 563.202324][ T5968] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.212558][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 563.221355][ T5968] usb 1-1: Product: syz [ 563.225634][ T5968] usb 1-1: Manufacturer: syz [ 563.229752][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.236883][ T5968] usb 1-1: SerialNumber: syz [ 563.237191][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.253889][ T5968] usb 1-1: config 0 descriptor?? [ 563.269381][T12615] batadv0: entered promiscuous mode [ 563.275753][T12615] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 563.276086][T12609] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 563.295267][T12615] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1633'. [ 563.311771][ T5968] usb 1-1: selecting invalid altsetting 0 [ 563.316438][ T5937] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 563.476613][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 563.488706][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.516496][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.539893][ T5968] usb 1-1: USB disconnect, device number 104 [ 563.610680][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.630186][ T5937] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.640106][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.679229][ T5937] usb 2-1: config 0 descriptor?? [ 563.734818][ T5913] usb 5-1: USB disconnect, device number 117 [ 564.100367][ T5937] usbhid 2-1:0.0: can't add hid device: -71 [ 564.126965][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 564.169280][ T5937] usb 2-1: USB disconnect, device number 124 [ 564.304275][T12625] pim6reg: entered allmulticast mode [ 564.352525][T12625] pim6reg: left allmulticast mode [ 565.123409][T12657] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1644'. [ 565.243635][T12634] netlink: 'syz.3.1638': attribute type 29 has an invalid length. [ 565.286241][T12634] netlink: 'syz.3.1638': attribute type 29 has an invalid length. [ 565.329024][T12634] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1638'. [ 565.480267][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'. [ 565.806639][ T5913] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 566.022043][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.036814][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.086470][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 566.093959][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 566.104636][ T5913] usb 3-1: config 1 interface 0 has no altsetting 0 [ 566.175347][ T5913] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 566.183770][ T5937] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 566.230469][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.248736][ T5913] usb 3-1: Product: syz [ 566.257958][ T5913] usb 3-1: Manufacturer: syz [ 566.289700][ T5913] usb 3-1: SerialNumber: syz [ 566.360012][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.406490][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 566.443329][ T5937] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 566.489287][ T5937] usb 2-1: config 1 has no interface number 0 [ 566.505722][ T5937] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 566.526519][ T5937] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 566.544023][ T5937] usb 2-1: config 1 interface 214 has no altsetting 0 [ 566.596255][ T5937] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 566.610672][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.650261][ T5937] usb 2-1: Product: syz [ 566.659236][ T5937] usb 2-1: Manufacturer: syz [ 566.670554][ T5937] usb 2-1: SerialNumber: syz [ 566.676141][ T5913] usbhid 3-1:1.0: can't add hid device: -71 [ 566.692465][ T5913] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 566.709338][T12670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 566.716927][T12670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 566.734622][ T5937] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 566.776823][ T5913] usb 3-1: USB disconnect, device number 108 [ 566.802380][ T5937] scsi host1: usb-storage 2-1:1.214 [ 566.929858][ T24] usb 2-1: USB disconnect, device number 125 [ 566.976238][T12680] bond1: option resend_igmp: invalid value (3703) [ 567.002188][T12680] bond1: option resend_igmp: allowed values 0 - 255 [ 567.018714][T12680] bond1 (unregistering): Released all slaves [ 567.698523][ T24] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 567.956464][ T5968] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 568.046493][ T24] usb 4-1: device descriptor read/64, error -71 [ 568.057746][T12696] kAFS: unable to lookup cell '/,' [ 568.136625][ T5968] usb 2-1: device descriptor read/64, error -71 [ 568.386520][ T5968] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 568.394931][ T24] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 568.396439][ T5937] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 568.526445][ T24] usb 4-1: device descriptor read/64, error -71 [ 568.536450][ T5968] usb 2-1: device descriptor read/64, error -71 [ 568.536639][ T5937] usb 5-1: device descriptor read/64, error -71 [ 568.636753][ T24] usb usb4-port1: attempt power cycle [ 568.666770][ T5968] usb usb2-port1: attempt power cycle [ 568.786787][ T5937] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 568.798480][T12707] batadv_slave_1: entered promiscuous mode [ 568.840411][T12706] batadv_slave_1: left promiscuous mode [ 568.917941][ T5937] usb 5-1: device descriptor read/64, error -71 [ 568.986514][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 569.008590][ T5968] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 569.018188][ T24] usb 4-1: device descriptor read/8, error -71 [ 569.047523][ T5968] usb 2-1: device descriptor read/8, error -71 [ 569.052760][ T5937] usb usb5-port1: attempt power cycle [ 569.115297][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.181044][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.268055][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 569.288504][ T24] usb 4-1: device descriptor read/8, error -71 [ 569.296522][ T5968] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 569.353957][ T5893] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 569.354643][ T5968] usb 2-1: device descriptor read/8, error -71 [ 569.397653][ T24] usb usb4-port1: unable to enumerate USB device [ 569.406584][ T5937] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 569.421873][T12719] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 569.431048][ T5937] usb 5-1: device descriptor read/8, error -71 [ 569.457000][ T5968] usb usb2-port1: unable to enumerate USB device [ 569.506784][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 569.516955][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.559221][ T5893] usb 1-1: config 0 has no interfaces? [ 569.566206][ T5893] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 569.581469][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.598263][ T5893] usb 1-1: config 0 descriptor?? [ 569.687496][ T5937] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 569.708175][ T5937] usb 5-1: device descriptor read/8, error -71 [ 569.817033][ T5937] usb usb5-port1: unable to enumerate USB device [ 570.435602][ T5968] usb 1-1: USB disconnect, device number 105 [ 570.826446][ T5968] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 570.939659][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1664'. [ 570.997259][ T5968] usb 4-1: no configurations [ 571.002438][ T5968] usb 4-1: can't read configurations, error -22 [ 571.146643][ T5968] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 571.199482][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 571.216521][ T5937] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 571.406947][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 571.419132][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.434042][ T5937] usb 1-1: config 1 interface 0 has no altsetting 0 [ 571.446287][ T5937] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 571.463746][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.496539][ T5937] usb 1-1: Product: syz [ 571.502182][ T5937] usb 1-1: Manufacturer: syz [ 571.511119][ T5937] usb 1-1: SerialNumber: syz [ 571.517846][ T5968] usb 4-1: no configurations [ 571.522519][ T5968] usb 4-1: can't read configurations, error -22 [ 571.530853][ T5968] usb usb4-port1: attempt power cycle [ 571.716504][ T5893] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 571.859499][ T5937] usbhid 1-1:1.0: can't add hid device: -71 [ 571.866199][ T5937] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 571.885024][ T5937] usb 1-1: USB disconnect, device number 106 [ 571.918732][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 571.943676][ T5968] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 571.982846][ T5968] usb 4-1: no configurations [ 571.987200][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.998740][ T5968] usb 4-1: can't read configurations, error -22 [ 571.998919][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.016201][ T5893] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= d.00 [ 572.045453][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.073607][ T5893] usb 5-1: config 0 descriptor?? [ 572.156538][ T5968] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 572.178694][ T5968] usb 4-1: no configurations [ 572.183370][ T5968] usb 4-1: can't read configurations, error -22 [ 572.196943][ T5968] usb usb4-port1: unable to enumerate USB device [ 573.269648][ T5937] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 573.436701][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 573.447072][ T5937] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 573.457892][ T5937] usb 2-1: config 0 has no interface number 0 [ 573.464075][ T5937] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.492555][ T5937] usb 2-1: config 0 interface 85 has no altsetting 0 [ 573.519520][ T5937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 573.536659][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.549140][ T5937] usb 2-1: Product: syz [ 573.561995][ T5937] usb 2-1: Manufacturer: syz [ 573.570036][ T5937] usb 2-1: SerialNumber: syz [ 573.595612][ T5937] usb 2-1: config 0 descriptor?? [ 574.611025][ T5937] appletouch 2-1:0.85: Failed to request geyser raw mode [ 574.623623][ T5937] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 574.696816][ T5937] usb 2-1: USB disconnect, device number 4 [ 575.482226][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 575.488351][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 575.518670][ T5893] usb 5-1: USB disconnect, device number 122 [ 576.042320][T12802] dlm: no locking on control device [ 576.066481][ T5893] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 576.282459][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 576.294036][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.323060][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.355716][T12806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.446074][ T5893] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 576.500485][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.520762][ T5893] usb 5-1: config 0 descriptor?? [ 576.722784][ T5968] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 576.888881][ T5968] usb 1-1: config 2 has an invalid interface number: 121 but max is 0 [ 576.897590][ T5968] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 576.925656][ T5968] usb 1-1: config 2 has no interface number 0 [ 576.945136][ T5968] usb 1-1: too many endpoints for config 2 interface 121 altsetting 122: 95, using maximum allowed: 30 [ 576.976623][ T5893] zeroplus 0003:0C12:0030.001B: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 576.996503][ T5968] usb 1-1: config 2 interface 121 altsetting 122 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 577.026442][ T5893] zeroplus 0003:0C12:0030.001B: no inputs found [ 577.071158][ T5968] usb 1-1: config 2 interface 121 has no altsetting 0 [ 577.099598][ T5968] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 577.131782][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.155021][ T5893] usb 5-1: USB disconnect, device number 123 [ 577.172532][ T5968] usb 1-1: Product: syz [ 577.182894][ T5968] usb 1-1: Manufacturer: syz [ 577.211099][ T5968] usb 1-1: SerialNumber: syz [ 577.317305][T12815] fido_id[12815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 577.324069][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 577.798595][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.828070][ T5968] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 577.844243][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.998387][ T5968] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 578.017323][ T5968] usb 3-1: config 0 has no interface number 0 [ 578.023827][ T5968] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 578.035956][ T5968] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 578.047688][ T5968] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 578.102540][ T5968] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 578.112073][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.121347][ T5968] usb 3-1: Product: syz [ 578.126188][ T5968] usb 3-1: Manufacturer: syz [ 578.134550][ T5968] usb 3-1: SerialNumber: syz [ 578.225456][ T5968] usb 3-1: config 0 descriptor?? [ 578.236170][T12826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.244202][T12826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.388200][ T5893] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 578.457293][T12826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.465179][T12826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.478973][ T5968] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 578.557688][ T5893] usb 2-1: too many configurations: 137, using maximum allowed: 8 [ 578.578476][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 578.586112][ T5893] usb 2-1: can't read configurations, error -61 [ 578.707098][ T5968] usb 3-1: USB disconnect, device number 109 [ 578.758908][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 578.779492][ T5893] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 578.815440][T12852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.941618][ T5893] usb 2-1: too many configurations: 137, using maximum allowed: 8 [ 578.952936][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 578.960904][ T5893] usb 2-1: can't read configurations, error -61 [ 579.000215][ T5893] usb usb2-port1: attempt power cycle [ 579.376549][ T5893] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 579.397977][ T5893] usb 2-1: too many configurations: 137, using maximum allowed: 8 [ 579.408668][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 579.798092][ T5893] usb 2-1: can't read configurations, error -61 [ 580.011565][ T5893] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 580.067155][ T5893] usb 2-1: too many configurations: 137, using maximum allowed: 8 [ 580.140257][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 580.158141][ T5893] usb 2-1: can't read configurations, error -61 [ 580.176688][ T5893] usb usb2-port1: unable to enumerate USB device [ 580.325989][ T5893] usb 1-1: USB disconnect, device number 107 [ 580.840068][T12878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1704'. [ 582.586465][ T24] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 582.727177][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 582.727667][ T30] audit: type=1326 audit(1766127451.855:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 582.800792][ T30] audit: type=1326 audit(1766127451.855:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 582.801625][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 582.876900][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 582.881345][ T30] audit: type=1326 audit(1766127451.855:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 582.896386][ T24] usb 1-1: config 179 has no interface number 0 [ 582.954506][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 582.977719][ T30] audit: type=1326 audit(1766127451.855:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.017540][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.019121][T12920] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1715'. [ 583.053506][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.065143][ T30] audit: type=1326 audit(1766127451.855:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.065198][ T30] audit: type=1326 audit(1766127451.895:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.065245][ T30] audit: type=1326 audit(1766127451.895:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.065291][ T30] audit: type=1326 audit(1766127451.895:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.175628][ T30] audit: type=1326 audit(1766127451.895:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.206676][ T30] audit: type=1326 audit(1766127451.895:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 583.305877][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 583.341079][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.657062][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.688162][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.752718][T12893] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.989739][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 585.438278][ T10] usb 1-1: USB disconnect, device number 108 [ 585.438327][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.452723][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.688401][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 586.006410][ T10] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 586.190333][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 586.198858][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 586.212980][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.231196][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 586.256278][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 586.286238][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.299059][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.314596][ T10] usb 1-1: Product: syz [ 586.321231][ T10] usb 1-1: Manufacturer: syz [ 586.329433][ T10] usb 1-1: SerialNumber: syz [ 586.555637][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 586.569649][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 586.595174][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 586.706787][ T10] usb 1-1: USB disconnect, device number 109 [ 586.797645][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.110981][T12984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.450932][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.487659][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.530375][T12995] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1733'. [ 587.686870][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 587.687783][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 587.861700][ T5893] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 587.871327][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.871407][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 587.916109][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 587.916398][ T5893] usb 2-1: Product: syz [ 587.935099][ T24] usb 1-1: config 0 has no interface number 0 [ 587.940995][ T5893] usb 2-1: Manufacturer: syz [ 587.947372][ T5893] usb 2-1: SerialNumber: syz [ 587.961859][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 587.986503][ T5893] usb 2-1: config 0 descriptor?? [ 588.007057][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 588.031023][ T5893] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 588.048280][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.071275][ T24] usb 1-1: Product: syz [ 588.091580][ T24] usb 1-1: Manufacturer: syz [ 588.108969][ T24] usb 1-1: SerialNumber: syz [ 588.139030][ T24] usb 1-1: config 0 descriptor?? [ 588.164431][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 588.186617][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 588.426851][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 588.506847][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 588.543173][ T24] em28xx 1-1:0.132: board has no eeprom [ 588.616510][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 588.648062][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 588.662878][ T5968] em28xx 1-1:0.132: Registering V4L2 extension [ 588.700788][ T24] usb 1-1: USB disconnect, device number 110 [ 588.788276][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 589.034216][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 589.090013][T13018] input: syz0 as /devices/virtual/input/input52 [ 589.109477][T13018] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 589.193584][T13018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.264557][ T5968] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 589.315381][ T5968] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 589.346523][ T5968] em28xx 1-1:0.132: No AC97 audio processor [ 589.375276][ T5968] usb 1-1: Decoder not found [ 589.394365][ T5968] em28xx 1-1:0.132: failed to create media graph [ 589.438463][ T5968] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 589.477815][ T5968] em28xx 1-1:0.132: Remote control support is not available for this card. [ 589.532095][ T24] em28xx 1-1:0.132: Closing input extension [ 589.628156][ T24] em28xx 1-1:0.132: Freeing device [ 589.778367][ T5937] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 589.976443][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 590.005326][ T5937] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.039053][ T24] usb 2-1: USB disconnect, device number 9 [ 590.070707][ T5937] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.119312][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 590.132157][ T5937] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 590.146590][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.177661][ T5937] usb 3-1: config 0 descriptor?? [ 590.634227][ T5937] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 590.666503][ T5937] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 590.704840][ T5937] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 590.716387][ T5937] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 590.766889][ T5937] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 590.787829][ T5937] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 590.936708][ T5937] usb 3-1: USB disconnect, device number 110 [ 590.960114][T13043] fido_id[13043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 591.014797][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 591.160962][T13050] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 591.172403][T13050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.180483][ T24] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 591.192970][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.207241][T13050] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 591.216521][ T24] usb 2-1: can't read configurations, error -61 [ 591.341273][T13058] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 591.348188][T13058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 591.356558][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 591.357618][T13053] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 591.366133][T13058] vhci_hcd vhci_hcd.0: Device attached [ 591.396406][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1748'. [ 591.405771][T13053] batadv0: entered promiscuous mode [ 591.414961][T13053] batadv0: entered allmulticast mode [ 591.423831][T13053] bond0: (slave batadv0): Releasing backup interface [ 591.436806][T13053] bridge0: port 3(batadv0) entered blocking state [ 591.445791][T13053] bridge0: port 3(batadv0) entered disabled state [ 591.485573][T13060] vhci_hcd: cannot find the pending unlink 1 [ 591.512609][ T24] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 591.537196][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.555048][ T24] usb 2-1: can't read configurations, error -61 [ 591.565495][ T24] usb usb2-port1: attempt power cycle [ 591.571268][ T6058] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 591.580720][ T6058] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 591.666574][ T5937] usb 42-1: SetAddress Request (2) to port 0 [ 591.666892][ T5968] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 591.682131][ T5937] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 591.766169][T13060] vhci_hcd: connection reset by peer [ 591.794896][ T1014] vhci_hcd vhci_hcd.4: stop threads [ 591.810750][ T1014] vhci_hcd vhci_hcd.4: release socket [ 591.816529][ T1014] vhci_hcd vhci_hcd.4: disconnect device [ 591.846929][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 591.859304][ T5968] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 591.874533][ T5968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.885832][ T5968] usb 4-1: config 0 has no interface number 0 [ 591.892994][ T5968] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 591.905717][ T5968] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 591.917975][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 591.926723][ T5968] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 591.939202][ T5968] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.952298][ T5968] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 591.963233][ T5968] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 591.977159][ T24] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 591.985267][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1754'. [ 591.990423][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.994661][ T5893] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 592.002264][ T5828] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 592.003725][ T5968] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 592.031067][ T24] usb 2-1: can't read configurations, error -61 [ 592.042140][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.067641][ T5968] usb 4-1: Product: syz [ 592.071881][ T5968] usb 4-1: Manufacturer: syz [ 592.092258][ T5968] usb 4-1: SerialNumber: syz [ 592.124410][ T5968] usb 4-1: config 0 descriptor?? [ 592.137561][T13059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.146131][T13059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.153919][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 592.165897][ T5828] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 592.176565][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 592.185298][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.194742][ T5828] usb 3-1: Product: syz [ 592.199702][ T5828] usb 3-1: Manufacturer: syz [ 592.204852][ T5828] usb 3-1: SerialNumber: syz [ 592.209992][ T24] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 592.226656][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 592.234828][ T5893] usb 1-1: device descriptor read/64, error -71 [ 592.267000][ T24] usb 2-1: can't read configurations, error -61 [ 592.297054][ T24] usb usb2-port1: unable to enumerate USB device [ 592.304104][ T5828] usb 3-1: config 0 descriptor?? [ 592.401076][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.410276][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.421691][ T5968] usb 4-1: NFC: intf ffff88804f3f3000 id ffffffff8e93ede0 [ 592.545107][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.564979][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.593817][ T5913] usb 3-1: USB disconnect, device number 111 [ 592.649822][ T5968] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 592.666855][ T5893] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 592.693747][ T5968] usb 4-1: USB disconnect, device number 127 [ 592.702646][ T5968] usb 4-1: NFC: intf ffff88804f3f3000 [ 592.813439][ T5893] usb 1-1: device descriptor read/64, error -71 [ 592.964864][ T5893] usb usb1-port1: attempt power cycle [ 593.436555][ T5893] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 593.467293][ T5893] usb 1-1: device descriptor read/8, error -71 [ 593.516859][ T5968] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 593.668327][ T5968] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.678597][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.685725][ T5968] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 593.716744][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.746777][ T5893] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 593.777092][ T5968] usb 4-1: config 0 descriptor?? [ 593.778338][ T5893] usb 1-1: device descriptor read/8, error -71 [ 593.910047][ T5893] usb usb1-port1: unable to enumerate USB device [ 594.000790][ T5968] uclogic 0003:5543:0781.001D: item fetching failed at offset 2/5 [ 594.025977][ T5968] uclogic 0003:5543:0781.001D: parse failed [ 594.056048][ T5968] uclogic 0003:5543:0781.001D: probe with driver uclogic failed with error -22 [ 594.218255][T13113] tipc: Started in network mode [ 594.223367][T13113] tipc: Node identity 7aef5a06f0cf, cluster identity 4711 [ 594.231106][T13113] tipc: Enabled bearer , priority 0 [ 594.239403][T13113] syzkaller0: entered promiscuous mode [ 594.247072][T13113] syzkaller0: entered allmulticast mode [ 594.295210][T13113] tipc: Resetting bearer [ 594.313868][T13112] tipc: Resetting bearer [ 594.380215][T13112] tipc: Disabling bearer [ 594.600345][T13139] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 594.681670][T13139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.691493][T13148] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 594.725304][T13140] bond1: (slave geneve2): making interface the new active one [ 594.747752][T13140] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 594.851954][T13139] veth1_to_batadv: entered promiscuous mode [ 595.266550][ T5893] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 595.336794][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1770'. [ 595.426553][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 595.434201][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.594552][ T5893] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 595.674681][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.710960][ T5893] usb 1-1: config 0 descriptor?? [ 596.070576][ T10] usb 4-1: USB disconnect, device number 2 [ 596.153242][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 596.209486][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 596.231450][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 596.270253][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 596.320682][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 596.369336][ T5893] corsair-psu 0003:1B1C:1C0D.001E: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 596.461256][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 596.630200][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 596.668402][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.710772][ T10] usb 4-1: Product: syz [ 596.715134][ T10] usb 4-1: Manufacturer: syz [ 596.719944][ T10] usb 4-1: SerialNumber: syz [ 596.727033][ T5893] corsair-psu 0003:1B1C:1C0D.001E: unable to initialize device (-110) [ 596.765835][ T5893] corsair-psu 0003:1B1C:1C0D.001E: probe with driver corsair-psu failed with error -110 [ 596.778934][ T10] usb 4-1: config 0 descriptor?? [ 596.788550][ T10] asix 4-1:0.0: probe with driver asix failed with error -22 [ 596.808003][ T5937] usb 42-1: device descriptor read/8, error -110 [ 596.838004][ T5893] usb 1-1: USB disconnect, device number 115 [ 596.908534][T13174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 596.915268][T13174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 596.921023][T13179] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 596.929433][T13179] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 596.936984][ T5954] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 596.937213][T13179] vhci_hcd vhci_hcd.0: Device attached [ 596.954334][T13174] vhci_hcd vhci_hcd.0: Device attached [ 596.965910][T13172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1773'. [ 596.989302][T13177] vhci_hcd: connection closed [ 596.989535][ T6058] vhci_hcd vhci_hcd.1: stop threads [ 597.003876][ T6058] vhci_hcd vhci_hcd.1: release socket [ 597.014666][ T6058] vhci_hcd vhci_hcd.1: disconnect device [ 597.135583][ T5954] usb 3-1: config 1 interface 0 altsetting 79 endpoint 0x2 has invalid maxpacket 584, setting to 8 [ 597.156620][ T5954] usb 3-1: config 1 interface 0 has no altsetting 0 [ 597.240381][ T5937] usb usb42-port1: attempt power cycle [ 597.306509][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 597.366602][ T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 597.426732][ T5913] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 597.580891][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.600120][ T5913] usb 2-1: config 1 has no interface number 0 [ 597.614193][ T5913] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.638251][ T5913] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 597.659565][ T5913] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 597.686726][ T5913] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 597.698056][ T5913] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 597.715499][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.725301][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.736537][ T5913] usb 2-1: Product: syz [ 597.741021][ T5913] usb 2-1: Manufacturer: syz [ 597.746549][ T5913] usb 2-1: SerialNumber: syz [ 597.779499][T13187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 597.960502][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 598.013476][T13187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 598.065321][T13195] 8021q: adding VLAN 0 to HW filter on device team1 [ 598.218556][T13180] vhci_hcd: connection reset by peer [ 598.246855][ T1014] vhci_hcd vhci_hcd.4: stop threads [ 598.255527][T13187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 598.264881][ T1014] vhci_hcd vhci_hcd.4: release socket [ 598.273826][ T1014] vhci_hcd vhci_hcd.4: disconnect device [ 598.596530][ T5968] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 598.694775][T13187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 598.718054][ T5913] cdc_ncm 2-1:1.1: bind() failure [ 598.741690][T13200] vivid-003: disconnect [ 598.748004][T13198] vivid-003: reconnect [ 598.760020][ T5968] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 598.772528][ T5968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 598.783570][ T5968] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.792861][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.801586][ T5968] usb 1-1: Product: syz [ 598.805804][ T5968] usb 1-1: Manufacturer: syz [ 598.810622][ T5968] usb 1-1: SerialNumber: syz [ 598.824844][ T5968] usb 1-1: config 0 descriptor?? [ 598.870460][ T5968] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 598.914880][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.941412][ T5893] usb 2-1: USB disconnect, device number 14 [ 599.371900][ T5893] usb 4-1: USB disconnect, device number 3 [ 599.728625][ T5954] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 599.775382][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.815593][ T5954] usb 3-1: can't set config #1, error -71 [ 599.828419][T13218] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1782'. [ 599.840129][ T5954] usb 3-1: USB disconnect, device number 112 [ 599.880548][T13218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.277497][T13229] ip6gre1: entered promiscuous mode [ 600.282946][T13229] ip6gre1: entered allmulticast mode [ 600.291032][T13229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.849603][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.921039][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.949535][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.096579][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.330265][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.534230][ T5968] usb 1-1: USB disconnect, device number 116 [ 601.963374][ T5839] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 602.100817][T13253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1792'. [ 602.168320][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 602.486714][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 602.727099][ T5954] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 602.876408][ T5954] usb 4-1: device descriptor read/64, error -71 [ 603.116468][ T5968] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 603.155346][ T5954] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 603.276592][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 603.292372][ T5968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 603.308629][ T5968] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 603.326425][ T5954] usb 4-1: device descriptor read/64, error -71 [ 603.329053][ T5968] usb 3-1: config 0 has no interface number 0 [ 603.353234][ T5968] usb 3-1: config 0 interface 63 has no altsetting 0 [ 603.387642][ T5968] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 603.434360][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.450278][ T5968] usb 3-1: Product: syz [ 603.458345][ T5954] usb usb4-port1: attempt power cycle [ 603.491409][ T5968] usb 3-1: Manufacturer: syz [ 603.508322][ T5968] usb 3-1: SerialNumber: syz [ 603.525373][ T5968] usb 3-1: config 0 descriptor?? [ 603.804882][ T5937] usb usb42-port1: unable to enumerate USB device [ 603.815995][ T5954] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 603.897324][ T5954] usb 4-1: device descriptor read/8, error -71 [ 604.156428][ T5954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 604.181933][ T5954] usb 4-1: device descriptor read/8, error -71 [ 604.298261][ T5954] usb usb4-port1: unable to enumerate USB device [ 604.690293][T13295] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 604.736963][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.958534][ T5968] kvaser_usb 3-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 605.985726][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 605.985747][ T30] audit: type=1326 audit(1766127475.105:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.059514][ T5968] usb 3-1: USB disconnect, device number 113 [ 606.207643][ T30] audit: type=1326 audit(1766127475.185:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.305277][ T30] audit: type=1326 audit(1766127475.185:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.447733][ T30] audit: type=1326 audit(1766127475.185:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.526592][ T30] audit: type=1326 audit(1766127475.195:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.604659][ T30] audit: type=1326 audit(1766127475.195:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 606.765442][T13319] netlink: 'syz.3.1811': attribute type 5 has an invalid length. [ 607.016445][ T30] audit: type=1326 audit(1766127475.195:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 607.137489][ T30] audit: type=1326 audit(1766127475.195:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 607.197653][ T30] audit: type=1326 audit(1766127475.365:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 607.220704][ T30] audit: type=1326 audit(1766127475.365:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1258f749 code=0x7ffc0000 [ 608.170714][ T5954] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 608.361602][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.374712][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 608.388530][ T5954] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 608.416928][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.499309][ T5954] usb 1-1: config 0 descriptor?? [ 608.536425][ T5937] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 608.861416][ T5937] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.879722][ T5937] usb 3-1: config 0 has no interface number 0 [ 609.018310][ T5954] ortek 0003:1223:3F07.001F: unknown main item tag 0x3 [ 609.025344][ T5954] ortek 0003:1223:3F07.001F: item fetching failed at offset 1/5 [ 609.040172][ T5937] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 609.068431][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.083766][ T5954] ortek 0003:1223:3F07.001F: probe with driver ortek failed with error -22 [ 609.110857][ T5937] usb 3-1: config 0 descriptor?? [ 609.131288][ T5937] usb 3-1: selecting invalid altsetting 1 [ 609.137405][ T5937] dvb_ttusb_budget: ttusb_init_controller: error [ 609.149468][ T5937] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 609.402689][ T5937] DVB: Unable to find symbol cx22700_attach() [ 609.544345][ T5937] DVB: Unable to find symbol tda10046_attach() [ 609.555653][ T5937] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 609.610143][ T5937] usb 3-1: USB disconnect, device number 114 [ 610.163252][T13362] fuse: Unknown parameter 'fd½5§@M^‚pœÝ<½ÖvYö?Ï~‡BßöXtùpwKm>𣻘‘Ø' [ 610.866487][ T5968] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 611.034975][ T5968] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 611.056065][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.068923][ T5913] usb 1-1: USB disconnect, device number 117 [ 611.145337][ T5968] usb 3-1: config 0 descriptor?? [ 611.248541][T13377] netlink: 'syz.3.1826': attribute type 10 has an invalid length. [ 611.281771][T13377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 611.383127][ T5968] ath6kl: Failed to submit usb control message: -71 [ 611.397820][ T5968] ath6kl: unable to send the bmi data to the device: -71 [ 611.405337][ T5968] ath6kl: Unable to send get target info: -71 [ 611.413478][ T5968] ath6kl: Failed to init ath6kl core: -71 [ 611.421513][ T5968] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 611.451122][ T5968] usb 3-1: USB disconnect, device number 115 [ 611.496775][ T5913] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 611.658560][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 611.666754][ T5913] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 611.675745][ T5913] usb 1-1: config 5 has no interface number 0 [ 611.682536][ T5913] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 611.695122][ T5913] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 611.706405][ T5937] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 611.706923][ T5913] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 611.725419][ T5913] usb 1-1: config 5 interface 168 has no altsetting 0 [ 611.736069][ T5913] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 611.746025][ T5913] usb 1-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 611.754671][ T5913] usb 1-1: Product: syz [ 611.759822][ T5913] usb 1-1: Manufacturer: syz [ 611.764462][ T5913] usb 1-1: SerialNumber: syz [ 611.775473][T13373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.787159][T13373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.816439][ T5954] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 611.866738][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 611.873943][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.894904][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.905677][ T5937] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 611.916918][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.929130][ T5937] usb 5-1: config 0 descriptor?? [ 611.991932][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 612.003051][ T5954] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 612.023396][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.041707][ T5954] usb 4-1: config 0 has no interface number 0 [ 612.051352][ T5954] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 612.061255][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.069789][ T5954] usb 4-1: Product: syz [ 612.075113][ T5954] usb 4-1: Manufacturer: syz [ 612.081074][ T5954] usb 4-1: SerialNumber: syz [ 612.110006][ T5954] usb 4-1: config 0 descriptor?? [ 612.125774][ T5954] dm9601 4-1:0.41: probe with driver dm9601 failed with error -22 [ 612.139166][ T5954] sr9700 4-1:0.41: probe with driver sr9700 failed with error -22 [ 612.151865][T13373] xt_TCPMSS: Only works on TCP SYN packets [ 612.331556][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.340661][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.486533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.488879][T13395] bond_slave_0: Caught tx_queue_len zero misconfig [ 612.740432][ C1] usb 1-1: NFC: Urb failure (status -71) [ 612.749147][ C1] usb 1-1: NFC: Urb failure (status -71) [ 612.758202][ T5913] usb 1-1: NFC: Unable to get FW version [ 612.764501][ T5913] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -71 [ 612.799190][ T5913] usb 1-1: USB disconnect, device number 118 [ 612.949504][ T5954] usb 4-1: USB disconnect, device number 8 [ 613.485160][T13405] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 613.504252][T13405] team0: Port device batadv1 added [ 613.826493][ T5954] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 613.906533][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 613.966736][ T5954] usb 1-1: device descriptor read/64, error -71 [ 614.066452][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 614.074669][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.089244][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 614.104541][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 614.123754][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.190346][ T10] usb 4-1: config 0 descriptor?? [ 614.216557][ T5954] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 614.395370][ T5954] usb 1-1: device descriptor read/64, error -71 [ 614.420951][ T5937] usbhid 5-1:0.0: can't add hid device: -71 [ 614.446748][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 614.488265][ T5937] usb 5-1: USB disconnect, device number 125 [ 614.530329][ T5954] usb usb1-port1: attempt power cycle [ 614.655211][ T10] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 614.724624][T13415] netlink: 'syz.4.1836': attribute type 4 has an invalid length. [ 614.838055][ T5913] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 614.907686][ T5954] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 614.940208][ T5954] usb 1-1: device descriptor read/8, error -71 [ 615.060559][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 615.075672][ T5913] usb 3-1: config 1 interface 0 altsetting 204 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.106426][ T5913] usb 3-1: config 1 interface 0 has no altsetting 0 [ 615.124266][ T5968] usb 4-1: USB disconnect, device number 9 [ 615.145862][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 615.154057][ T5913] usb 3-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.40 [ 615.167099][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.175602][ T5913] usb 3-1: Product: syz [ 615.180587][ T5913] usb 3-1: Manufacturer: syz [ 615.190310][ T5913] usb 3-1: SerialNumber: syz [ 615.196421][ T5954] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 615.228664][ T5954] usb 1-1: device descriptor read/8, error -71 [ 615.326405][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 615.336516][ T10] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.348391][ T5954] usb usb1-port1: unable to enumerate USB device [ 615.361186][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 615.388302][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.40 [ 615.399711][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.427594][ T10] usb 2-1: Product: syz [ 615.436762][ T10] usb 2-1: Manufacturer: syz [ 615.446804][ T10] usb 2-1: SerialNumber: syz [ 615.892949][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 615.911660][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 615.940073][ T10] usb 2-1: USB disconnect, device number 15 [ 616.278136][ T5913] usbhid 3-1:1.0: can't add hid device: -71 [ 616.298753][ T5913] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 616.328539][ T5913] usb 3-1: USB disconnect, device number 116 [ 616.625562][T13430] veth6: entered promiscuous mode [ 616.785105][T13430] veth6: entered allmulticast mode [ 616.856459][ T5913] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 617.096781][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 617.105175][ T5913] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 617.113969][ T5913] usb 3-1: config 4 has no interface number 0 [ 617.120919][ T5913] usb 3-1: config 4 interface 51 has no altsetting 0 [ 617.142361][ T5913] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 617.152993][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.169981][ T5913] usb 3-1: Product: syz [ 617.184183][ T5913] usb 3-1: Manufacturer: syz [ 617.208731][ T5913] usb 3-1: SerialNumber: syz [ 617.273373][ T5913] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 617.460417][ T5913] usb 3-1: USB disconnect, device number 117 [ 618.306510][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 618.390762][T13464] input: syz1 as /devices/virtual/input/input53 [ 618.486402][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 618.509170][ T10] usb 5-1: config 7 has an invalid descriptor of length 132, skipping remainder of the config [ 618.543402][ T10] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 12 [ 618.572765][T13464] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 618.950717][ T10] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 618.976714][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.986045][ T10] usb 5-1: Product: syz [ 618.997847][ T10] usb 5-1: Manufacturer: syz [ 619.016219][ T10] usb 5-1: SerialNumber: syz [ 619.212387][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 619.236463][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 619.279505][T13470] netlink: 'syz.0.1850': attribute type 13 has an invalid length. [ 619.303610][T13470] netlink: 'syz.0.1850': attribute type 14 has an invalid length. [ 619.412864][T13466] gretap0: entered allmulticast mode [ 619.427745][T13466] bond2: (slave gretap0): making interface the new active one [ 619.437422][T13466] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 619.553711][ T5913] usb 5-1: USB disconnect, device number 126 [ 619.688891][T13475] input: syz1 as /devices/virtual/input/input54 [ 619.709699][T13475] binder: 13472:13475 ioctl c0306201 0 returned -14 [ 620.536424][ T10] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 620.830720][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 620.847127][ T10] usb 1-1: can't read configurations, error -61 [ 620.905709][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1854'. [ 621.046441][ T10] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 621.247730][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 621.255384][ T10] usb 1-1: can't read configurations, error -61 [ 621.294304][ T10] usb usb1-port1: attempt power cycle [ 621.646471][ T10] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 621.699942][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 621.708275][ T10] usb 1-1: can't read configurations, error -61 [ 621.715881][T13475] syz.1.1851 (13475): drop_caches: 2 [ 621.886534][ T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 621.915253][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 621.935500][ T10] usb 1-1: can't read configurations, error -61 [ 621.979309][ T10] usb usb1-port1: unable to enumerate USB device [ 623.548895][ T10] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 623.728122][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 623.906733][ T10] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 624.096386][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 624.273045][ T10] usb usb1-port1: attempt power cycle [ 624.404116][ T5968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 624.547447][ T5968] usb 4-1: device descriptor read/64, error -71 [ 624.747139][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.756865][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.783758][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 624.818722][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 624.959225][ T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 625.006442][ T5937] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 625.016399][ T5968] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 625.018481][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 625.089013][ T10] usb usb1-port1: unable to enumerate USB device [ 625.156561][ T5968] usb 4-1: device descriptor read/64, error -71 [ 625.236430][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 625.288619][ T5968] usb usb4-port1: attempt power cycle [ 625.319453][T13542] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20003 [ 625.387561][ T5913] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 625.526653][ T5913] usb 2-1: device descriptor read/64, error -71 [ 625.627288][ T5968] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 625.656402][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 625.665913][ T5968] usb 4-1: device descriptor read/8, error -71 [ 625.776615][ T5913] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 625.815245][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 625.831645][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.846454][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.857185][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 625.867609][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.879034][ T10] usb 5-1: config 0 descriptor?? [ 625.906534][ T5913] usb 2-1: device descriptor read/64, error -71 [ 625.916986][ T5968] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 625.947175][ T5968] usb 4-1: device descriptor read/8, error -71 [ 626.017017][ T5913] usb usb2-port1: attempt power cycle [ 626.057024][ T5968] usb usb4-port1: unable to enumerate USB device [ 626.298575][ T10] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 626.317485][ T10] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 626.325586][ T10] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 626.335069][ T10] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 626.343566][ T10] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 626.357959][ T5913] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 626.387110][ T5913] usb 2-1: device descriptor read/8, error -71 [ 626.403857][T13546] fuse: Bad value for 'group_id' [ 626.413625][T13546] fuse: Bad value for 'group_id' [ 626.427944][ T10] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf3 found [ 626.444262][ T10] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf4 found [ 626.514703][ T5968] usb 5-1: USB disconnect, device number 127 [ 626.636657][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 626.668196][ T5913] usb 2-1: device descriptor read/8, error -71 [ 626.740738][T13552] loop6: detected capacity change from 0 to 524288000 [ 626.781029][ T5913] usb usb2-port1: unable to enumerate USB device [ 626.807833][T13552] bond2: option ad_user_port_key: invalid value (21131) [ 626.817855][T13554] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1873'. [ 626.828115][T13552] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 626.841358][T13552] bond2 (unregistering): Released all slaves [ 627.139823][T13560] FAULT_INJECTION: forcing a failure. [ 627.139823][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 627.156795][T13560] CPU: 1 UID: 0 PID: 13560 Comm: syz.3.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.156830][T13560] Tainted: [L]=SOFTLOCKUP [ 627.156838][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.156850][T13560] Call Trace: [ 627.156858][T13560] [ 627.156867][T13560] dump_stack_lvl+0x189/0x250 [ 627.156899][T13560] ? __pfx____ratelimit+0x10/0x10 [ 627.156920][T13560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.156945][T13560] ? __pfx__printk+0x10/0x10 [ 627.156980][T13560] ? __pfx___might_resched+0x10/0x10 [ 627.157002][T13560] ? fs_reclaim_acquire+0x7d/0x100 [ 627.157030][T13560] should_fail_ex+0x414/0x560 [ 627.157066][T13560] should_failslab+0xa8/0x100 [ 627.157092][T13560] __kmalloc_cache_node_noprof+0x88/0x700 [ 627.157115][T13560] ? __get_vm_area_node+0x13f/0x300 [ 627.157149][T13560] __get_vm_area_node+0x13f/0x300 [ 627.157189][T13560] __vmalloc_node_range_noprof+0x371/0x16a0 [ 627.157210][T13560] ? do_replace+0x210/0x430 [ 627.157245][T13560] ? __lock_acquire+0x6b6/0x2cf0 [ 627.157291][T13560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 627.157307][T13560] ? __might_fault+0xb0/0x130 [ 627.157359][T13560] ? do_replace+0x210/0x430 [ 627.157383][T13560] __vmalloc_noprof+0xd2/0x120 [ 627.157402][T13560] ? do_replace+0x210/0x430 [ 627.157432][T13560] do_replace+0x210/0x430 [ 627.157460][T13560] ? __lock_acquire+0x6b6/0x2cf0 [ 627.157481][T13560] ? __pfx_do_replace+0x10/0x10 [ 627.157521][T13560] ? bpf_lsm_capable+0x9/0x20 [ 627.157544][T13560] ? security_capable+0x7e/0x2e0 [ 627.157573][T13560] do_ebt_set_ctl+0x1e3/0xb90 [ 627.157602][T13560] ? __pfx___mutex_trylock_common+0x10/0x10 [ 627.157625][T13560] ? __local_bh_enable_ip+0x12d/0x1c0 [ 627.157645][T13560] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 627.157673][T13560] ? rcu_is_watching+0x15/0xb0 [ 627.157698][T13560] ? trace_contention_end+0x39/0x100 [ 627.157732][T13560] ? nf_setsockopt+0x221/0x290 [ 627.157756][T13560] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 627.157785][T13560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.157817][T13560] ? __pfx_aa_sk_perm+0x10/0x10 [ 627.157845][T13560] nf_setsockopt+0x26f/0x290 [ 627.157866][T13560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 627.157897][T13560] do_sock_setsockopt+0x17c/0x1b0 [ 627.157925][T13560] __x64_sys_setsockopt+0x13f/0x1b0 [ 627.157952][T13560] do_syscall_64+0xfa/0xf80 [ 627.157974][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.157993][T13560] ? clear_bhb_loop+0x60/0xb0 [ 627.158015][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.158033][T13560] RIP: 0033:0x7f7cc698f749 [ 627.158052][T13560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.158068][T13560] RSP: 002b:00007f7cc779b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.158090][T13560] RAX: ffffffffffffffda RBX: 00007f7cc6be5fa0 RCX: 00007f7cc698f749 [ 627.158106][T13560] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.158116][T13560] RBP: 00007f7cc779b090 R08: 00000000000001c6 R09: 0000000000000000 [ 627.158128][T13560] R10: 0000200000003100 R11: 0000000000000246 R12: 0000000000000001 [ 627.158141][T13560] R13: 00007f7cc6be6038 R14: 00007f7cc6be5fa0 R15: 00007f7cc6d0fa28 [ 627.158174][T13560] [ 627.160651][T13560] syz.3.1876: vmalloc error: size 256, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 627.416397][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 627.446521][T13560] ,cpuset=syz3,mems_allowed=0-1 [ 627.446836][T13560] CPU: 1 UID: 0 PID: 13560 Comm: syz.3.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.446867][T13560] Tainted: [L]=SOFTLOCKUP [ 627.446873][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.446885][T13560] Call Trace: [ 627.446893][T13560] [ 627.446901][T13560] dump_stack_lvl+0x189/0x250 [ 627.446931][T13560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.446952][T13560] ? __pfx__printk+0x10/0x10 [ 627.446977][T13560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 627.446997][T13560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 627.447018][T13560] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 627.447039][T13560] warn_alloc+0x214/0x310 [ 627.447065][T13560] ? __pfx_warn_alloc+0x10/0x10 [ 627.447085][T13560] ? __get_vm_area_node+0x13f/0x300 [ 627.447115][T13560] ? __get_vm_area_node+0x2b5/0x300 [ 627.447146][T13560] __vmalloc_node_range_noprof+0x396/0x16a0 [ 627.447170][T13560] ? __lock_acquire+0x6b6/0x2cf0 [ 627.447210][T13560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 627.447226][T13560] ? __might_fault+0xb0/0x130 [ 627.447263][T13560] ? do_replace+0x210/0x430 [ 627.447285][T13560] __vmalloc_noprof+0xd2/0x120 [ 627.447302][T13560] ? do_replace+0x210/0x430 [ 627.447327][T13560] do_replace+0x210/0x430 [ 627.447360][T13560] ? __lock_acquire+0x6b6/0x2cf0 [ 627.447378][T13560] ? __pfx_do_replace+0x10/0x10 [ 627.447413][T13560] ? bpf_lsm_capable+0x9/0x20 [ 627.447433][T13560] ? security_capable+0x7e/0x2e0 [ 627.447460][T13560] do_ebt_set_ctl+0x1e3/0xb90 [ 627.447487][T13560] ? __pfx___mutex_trylock_common+0x10/0x10 [ 627.447508][T13560] ? __local_bh_enable_ip+0x12d/0x1c0 [ 627.447527][T13560] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 627.447552][T13560] ? rcu_is_watching+0x15/0xb0 [ 627.447573][T13560] ? trace_contention_end+0x39/0x100 [ 627.447604][T13560] ? nf_setsockopt+0x221/0x290 [ 627.447626][T13560] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 627.447652][T13560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.447681][T13560] ? __pfx_aa_sk_perm+0x10/0x10 [ 627.447707][T13560] nf_setsockopt+0x26f/0x290 [ 627.447726][T13560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 627.447755][T13560] do_sock_setsockopt+0x17c/0x1b0 [ 627.447779][T13560] __x64_sys_setsockopt+0x13f/0x1b0 [ 627.447804][T13560] do_syscall_64+0xfa/0xf80 [ 627.447824][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.447841][T13560] ? clear_bhb_loop+0x60/0xb0 [ 627.447863][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.447879][T13560] RIP: 0033:0x7f7cc698f749 [ 627.447897][T13560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.447911][T13560] RSP: 002b:00007f7cc779b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.447930][T13560] RAX: ffffffffffffffda RBX: 00007f7cc6be5fa0 RCX: 00007f7cc698f749 [ 627.447943][T13560] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.447955][T13560] RBP: 00007f7cc779b090 R08: 00000000000001c6 R09: 0000000000000000 [ 627.447966][T13560] R10: 0000200000003100 R11: 0000000000000246 R12: 0000000000000001 [ 627.447977][T13560] R13: 00007f7cc6be6038 R14: 00007f7cc6be5fa0 R15: 00007f7cc6d0fa28 [ 627.448008][T13560] [ 627.917126][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 627.931276][ T5937] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 627.939846][ T5937] usb 3-1: can't read configurations, error -71 [ 627.978283][T13560] Mem-Info: [ 628.007376][T13560] active_anon:8018 inactive_anon:0 isolated_anon:0 [ 628.007376][T13560] active_file:20221 inactive_file:40147 isolated_file:0 [ 628.007376][T13560] unevictable:768 dirty:233 writeback:0 [ 628.007376][T13560] slab_reclaimable:10853 slab_unreclaimable:96321 [ 628.007376][T13560] mapped:30958 shmem:2382 pagetables:1527 [ 628.007376][T13560] sec_pagetables:0 bounce:0 [ 628.007376][T13560] kernel_misc_reclaimable:0 [ 628.007376][T13560] free:1305061 free_pcp:14797 free_cma:0 [ 628.083213][T13560] Node 0 active_anon:31972kB inactive_anon:0kB active_file:80844kB inactive_file:160388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123792kB dirty:932kB writeback:0kB shmem:7992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12380kB pagetables:5972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.125086][T13560] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.161507][T13560] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.195304][T13560] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 628.197988][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 628.201726][T13560] Node 0 DMA32 free:1310648kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31912kB inactive_anon:0kB active_file:80844kB inactive_file:160348kB unevictable:1536kB writepending:944kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:44200kB local_pcp:21396kB free_cma:0kB [ 628.211626][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.241331][T13560] lowmem_reserve[]: [ 628.255996][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 628.269758][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.292548][ T10] usb 5-1: config 0 descriptor?? [ 628.336647][ T5937] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 628.344528][T13560] 0 0 1 1 1 [ 628.344580][T13560] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.415391][T13560] lowmem_reserve[]: 0 0 0 0 0 [ 628.424398][T13560] Node 1 Normal free:3894184kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:2912kB free_cma:0kB [ 628.457674][T13560] lowmem_reserve[]: 0 0 0 0 0 [ 628.476512][T13560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 628.487060][ T5937] usb 3-1: device descriptor read/64, error -71 [ 628.489818][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.512497][T13560] Node 0 DMA32: 4581*4kB (UM) 3628*8kB (UME) 2263*16kB (UME) 937*32kB (UME) 295*64kB (UME) 163*128kB (UME) 155*256kB (UME) 53*512kB (UME) 34*1024kB (UM) 9*2048kB (UME) 253*4096kB (UM) = 1309636kB [ 628.536570][T13560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 628.539151][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 628.549006][T13560] Node 1 Normal: 166*4kB (U) 44*8kB (UE) 35*16kB (UME) 168*32kB (UE) 52*64kB (UME) 7*128kB (UM) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3894184kB [ 628.606606][T13560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.606939][ T5937] usb usb3-port1: attempt power cycle [ 628.617244][T13560] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 628.638272][T13560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.656578][T13560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.676276][T13560] 62738 total pagecache pages [ 628.681200][T13560] 0 pages in swap cache [ 628.685375][T13560] Free swap = 124996kB [ 628.691317][T13560] Total swap = 124996kB [ 628.695506][T13560] 2097051 pages RAM [ 628.699539][T13560] 0 pages HighMem/MovableOnly [ 628.714994][T13560] 425122 pages reserved [ 628.719494][T13560] 0 pages cma reserved [ 628.746575][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 628.906383][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 628.914916][ T10] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 628.924393][ T10] usb 2-1: config 4 has no interface number 0 [ 628.934039][ T10] usb 2-1: config 4 interface 51 has no altsetting 0 [ 628.948404][ T10] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 628.957744][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.971574][ T10] usb 2-1: Product: syz [ 628.975885][ T10] usb 2-1: Manufacturer: syz [ 628.980652][ T5937] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 628.995250][ T10] usb 2-1: SerialNumber: syz [ 629.021055][ T10] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 629.030171][ T5937] usb 3-1: device descriptor read/8, error -71 [ 629.043436][T13559] hub 9-0:1.0: USB hub found [ 629.048704][T13559] hub 9-0:1.0: 1 port detected [ 629.063203][ T5913] usb 5-1: USB disconnect, device number 2 [ 629.222070][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 629.231046][T13571] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 629.246664][ T5968] usb 2-1: USB disconnect, device number 20 [ 629.276821][ T5937] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 629.299544][ T5937] usb 3-1: device descriptor read/8, error -71 [ 629.406981][ T5937] usb usb3-port1: unable to enumerate USB device [ 629.442953][T13579] Cannot find set identified by id 0 to match [ 629.453443][T13579] Cannot find set identified by id 0 to match [ 629.460454][T13579] Cannot find set identified by id 0 to match [ 629.467430][T13579] Cannot find set identified by id 0 to match [ 629.474039][T13579] Cannot find set identified by id 0 to match [ 629.482545][T13579] Cannot find set identified by id 0 to match [ 629.489250][T13579] Cannot find set identified by id 0 to match [ 629.496178][T13579] Cannot find set identified by id 0 to match [ 629.503511][T13579] Cannot find set identified by id 0 to match [ 629.510842][T13579] Cannot find set identified by id 0 to match [ 629.898660][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 630.174391][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 630.506874][ T5968] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 630.711557][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 630.727471][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 630.731181][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.777996][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.807361][ T5968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.836524][ T5968] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.857098][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.893277][ T5968] usb 2-1: config 0 descriptor?? [ 630.926408][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 630.943278][ T5937] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 630.986839][ T5937] usb 5-1: config 0 has no interface number 0 [ 631.004412][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 631.028093][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.036148][ T5937] usb 5-1: Product: syz [ 631.056257][ T5937] usb 5-1: Manufacturer: syz [ 631.061865][ T5937] usb 5-1: SerialNumber: syz [ 631.079536][ T5937] usb 5-1: config 0 descriptor?? [ 631.199903][T13630] program syz.0.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.290547][ T5937] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 631.312527][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.325040][ T5937] usb 5-1: USB disconnect, device number 3 [ 631.350783][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.448234][ T5968] usbhid 2-1:0.0: can't add hid device: -71 [ 631.454446][ T5968] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 631.477595][T13637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1897'. [ 631.494117][ T5968] usb 2-1: USB disconnect, device number 21 [ 631.512576][T13638] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 631.529717][T13638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 631.803553][T13628] lo: entered promiscuous mode [ 631.809130][T13628] lo: entered allmulticast mode [ 631.823246][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 631.832414][T13628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1895'. [ 631.986409][ T5937] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 632.065664][T13648] syzkaller0: entered promiscuous mode [ 632.086107][T13648] syzkaller0: entered allmulticast mode [ 632.176442][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 632.188648][ T5937] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 632.214318][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.234162][ T5937] usb 2-1: Product: syz [ 632.240656][ T5937] usb 2-1: Manufacturer: syz [ 632.251017][ T5937] usb 2-1: SerialNumber: syz [ 632.275315][ T5937] usb 2-1: config 0 descriptor?? [ 632.636557][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 632.636557][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 632.721994][ T5937] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 632.733593][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.736422][ T5968] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 632.743943][ T5937] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 632.758971][ T5937] usb 2-1: media controller created [ 632.773183][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.786451][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 632.794219][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 632.805152][ T5913] usb 4-1: config 4 interface 0 has no altsetting 0 [ 632.815661][ T5913] usb 4-1: string descriptor 0 read error: -22 [ 632.824044][ T5913] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 632.829075][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 632.833459][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.841757][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.856618][ T5913] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 632.878486][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 632.886115][ T10] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 632.896402][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 632.905302][ T5913] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 632.910052][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.915980][ T5968] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.921099][ T10] usb 5-1: Product: syz [ 632.938215][ T5913] usb 4-1: media controller created [ 632.940909][ T5937] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 632.952728][ T5937] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 632.956888][ T5968] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 632.962001][ T10] usb 5-1: Manufacturer: syz [ 632.978626][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.986922][ T10] usb 5-1: SerialNumber: syz [ 632.997158][ T5968] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.046081][ T5968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 633.055891][ T5968] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 633.065227][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.076780][T13655] ------------[ cut here ]------------ [ 633.082793][T13655] usb 2-1: BOGUS control dir, pipe 80001680 doesn't match bRequestType c0 [ 633.088041][ T5968] usb 3-1: config 0 descriptor?? [ 633.091931][T13655] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.3.1904/13655 [ 633.098491][T13658] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 633.108045][T13655] Modules linked in: [ 633.120061][T13655] CPU: 0 UID: 0 PID: 13655 Comm: syz.3.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.132254][T13655] Tainted: [L]=SOFTLOCKUP [ 633.136587][ T5968] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55 [ 633.137401][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.157053][T13655] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 633.162741][T13655] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 633.163382][T13645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.184141][T13655] RSP: 0018:ffffc9000bae7800 EFLAGS: 00010246 [ 633.193944][T13645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.198568][T13655] RAX: 0000000000000000 RBX: ffff888052c82e00 RCX: 0000000080001680 [ 633.214644][T13655] RDX: ffff88814dc3b980 RSI: ffffffff8c1409c0 RDI: ffffffff8f8ee220 [ 633.223822][T13655] RBP: 1ffff110062cee58 R08: 00000000000000c0 R09: 0000000000000000 [ 633.233005][T13655] R10: ffffc9000bae7900 R11: fffff5200175cf2c R12: ffff888024f84100 [ 633.241805][T13655] R13: ffff8880316772c0 R14: 0000000080001680 R15: ffff88814dc3b980 [ 633.250008][T13655] FS: 00007f7cc779b6c0(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 633.259156][T13655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.266020][T13655] CR2: 00007f1dc83356c8 CR3: 000000004193a000 CR4: 00000000003526f0 [ 633.274232][T13655] Call Trace: [ 633.277634][T13655] [ 633.280644][T13655] ? __init_swait_queue_head+0xa9/0x150 [ 633.286940][T13655] usb_start_wait_urb+0x115/0x4f0 [ 633.292153][T13655] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 633.297852][T13655] usb_control_msg+0x232/0x3e0 [ 633.302777][T13655] dtv5100_i2c_msg+0x231/0x2f0 [ 633.307711][T13655] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 633.312895][T13655] __i2c_transfer+0x871/0x2110 [ 633.318213][T13655] ? lockdep_hardirqs_on+0x98/0x140 [ 633.323508][T13655] ? __pfx___i2c_transfer+0x10/0x10 [ 633.328922][T13655] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 633.334459][T13655] ? i2c_transfer+0x120/0x3a0 [ 633.339631][T13655] i2c_transfer+0x25b/0x3a0 [ 633.344476][T13655] ? __pfx_i2c_transfer+0x10/0x10 [ 633.349638][T13655] ? _copy_from_user+0x94/0xb0 [ 633.354580][T13655] i2cdev_ioctl_rdwr+0x460/0x740 [ 633.359890][T13655] i2cdev_ioctl+0x64b/0x820 [ 633.364617][T13655] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.369815][T13655] ? __fget_files+0x3a0/0x420 [ 633.374744][T13655] ? __fget_files+0x2a/0x420 [ 633.379476][T13655] ? bpf_lsm_file_ioctl+0x9/0x20 [ 633.384487][T13655] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.389782][T13655] __se_sys_ioctl+0xfc/0x170 [ 633.394546][T13655] do_syscall_64+0xfa/0xf80 [ 633.399229][T13655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.405339][T13655] ? clear_bhb_loop+0x60/0xb0 [ 633.410105][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.416466][T13655] RIP: 0033:0x7f7cc698f749 [ 633.421032][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.442065][T13655] RSP: 002b:00007f7cc779b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.451078][T13655] RAX: ffffffffffffffda RBX: 00007f7cc6be5fa0 RCX: 00007f7cc698f749 [ 633.459372][T13655] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006 [ 633.467823][T13655] RBP: 00007f7cc6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.476412][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.484505][T13655] R13: 00007f7cc6be6038 R14: 00007f7cc6be5fa0 R15: 00007f7cc6d0fa28 [ 633.492667][T13655] [ 633.495817][T13655] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.503216][T13655] CPU: 0 UID: 0 PID: 13655 Comm: syz.3.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.514450][T13655] Tainted: [L]=SOFTLOCKUP [ 633.518790][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.529044][T13655] Call Trace: [ 633.532461][T13655] [ 633.535403][T13655] dump_stack_lvl+0x99/0x250 [ 633.540184][T13655] ? __asan_memcpy+0x40/0x70 [ 633.544972][T13655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.550267][T13655] ? __pfx__printk+0x10/0x10 [ 633.554897][T13655] vpanic+0x237/0x6d0 [ 633.559010][T13655] ? __pfx_vpanic+0x10/0x10 [ 633.563550][T13655] ? is_bpf_text_address+0x292/0x2b0 [ 633.568865][T13655] ? is_bpf_text_address+0x26/0x2b0 [ 633.574101][T13655] panic+0xb9/0xc0 [ 633.577850][T13655] ? __pfx_panic+0x10/0x10 [ 633.582360][T13655] __warn+0x317/0x4b0 [ 633.586465][T13655] ? usb_submit_urb+0x105c/0x18d0 [ 633.591680][T13655] ? usb_submit_urb+0x105c/0x18d0 [ 633.596715][T13655] __report_bug+0x288/0x500 [ 633.601225][T13655] ? usb_submit_urb+0x105c/0x18d0 [ 633.606256][T13655] ? __pfx___report_bug+0x10/0x10 [ 633.611304][T13655] ? usb_submit_urb+0x1121/0x18d0 [ 633.616518][T13655] report_bug_entry+0x19a/0x290 [ 633.621387][T13655] ? usb_submit_urb+0x111c/0x18d0 [ 633.626426][T13655] ? usb_submit_urb+0x1121/0x18d0 [ 633.631458][T13655] handle_bug+0xca/0x200 [ 633.635800][T13655] exc_invalid_op+0x1a/0x50 [ 633.640317][T13655] asm_exc_invalid_op+0x1a/0x20 [ 633.645305][T13655] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 633.651038][T13655] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 633.670921][T13655] RSP: 0018:ffffc9000bae7800 EFLAGS: 00010246 [ 633.677033][T13655] RAX: 0000000000000000 RBX: ffff888052c82e00 RCX: 0000000080001680 [ 633.685202][T13655] RDX: ffff88814dc3b980 RSI: ffffffff8c1409c0 RDI: ffffffff8f8ee220 [ 633.693286][T13655] RBP: 1ffff110062cee58 R08: 00000000000000c0 R09: 0000000000000000 [ 633.701370][T13655] R10: ffffc9000bae7900 R11: fffff5200175cf2c R12: ffff888024f84100 [ 633.709363][T13655] R13: ffff8880316772c0 R14: 0000000080001680 R15: ffff88814dc3b980 [ 633.717397][T13655] ? __init_swait_queue_head+0xa9/0x150 [ 633.723066][T13655] usb_start_wait_urb+0x115/0x4f0 [ 633.728219][T13655] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 633.733802][T13655] usb_control_msg+0x232/0x3e0 [ 633.738678][T13655] dtv5100_i2c_msg+0x231/0x2f0 [ 633.743558][T13655] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 633.748439][T13655] __i2c_transfer+0x871/0x2110 [ 633.753484][T13655] ? lockdep_hardirqs_on+0x98/0x140 [ 633.758700][T13655] ? __pfx___i2c_transfer+0x10/0x10 [ 633.764002][T13655] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 633.769477][T13655] ? i2c_transfer+0x120/0x3a0 [ 633.774179][T13655] i2c_transfer+0x25b/0x3a0 [ 633.778706][T13655] ? __pfx_i2c_transfer+0x10/0x10 [ 633.783747][T13655] ? _copy_from_user+0x94/0xb0 [ 633.788709][T13655] i2cdev_ioctl_rdwr+0x460/0x740 [ 633.793671][T13655] i2cdev_ioctl+0x64b/0x820 [ 633.798272][T13655] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.803492][T13655] ? __fget_files+0x3a0/0x420 [ 633.808271][T13655] ? __fget_files+0x2a/0x420 [ 633.812879][T13655] ? bpf_lsm_file_ioctl+0x9/0x20 [ 633.817832][T13655] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.823052][T13655] __se_sys_ioctl+0xfc/0x170 [ 633.827654][T13655] do_syscall_64+0xfa/0xf80 [ 633.832175][T13655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.838350][T13655] ? clear_bhb_loop+0x60/0xb0 [ 633.843100][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.849088][T13655] RIP: 0033:0x7f7cc698f749 [ 633.853538][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.873243][T13655] RSP: 002b:00007f7cc779b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.881762][T13655] RAX: ffffffffffffffda RBX: 00007f7cc6be5fa0 RCX: 00007f7cc698f749 [ 633.889844][T13655] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006 [ 633.897939][T13655] RBP: 00007f7cc6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.905946][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.913948][T13655] R13: 00007f7cc6be6038 R14: 00007f7cc6be5fa0 R15: 00007f7cc6d0fa28 [ 633.921969][T13655] [ 633.925689][T13655] Kernel Offset: disabled [ 633.930089][T13655] Rebooting in 86400 seconds..