last executing test programs: 45.910685185s ago: executing program 1 (id=513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) fadvise64(r2, 0x9, 0xffffffffffffff42, 0x5) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000080)={0x3, 0x8}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7f, 0x400202) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000140)={0x0, 0x0, 0x3ff}) 45.78282269s ago: executing program 1 (id=514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) (rerun: 64) 42.642585661s ago: executing program 1 (id=530): r0 = syz_open_dev$video(&(0x7f0000000000), 0x55, 0x2000) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x6, 0x2}) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (rerun: 64) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'pimreg1\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="430fc7729bf041862db5680000640f001d0f00000066baf80cb8ec1d6e8eef66bafc0ced66440f38806d040f300f011df500000026660fc7b30000000065470f9bac602ee2ad13650f01c9", 0x4b}], 0x1, 0x8, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1}], 0x1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb69447f3}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x184}}, 0x20004000) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000600)={0x4, 0x102, 0x3, {0xb40, 0xd, 0x7, 0x3530}}) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)={0x450, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x873}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf6}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3b5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2200}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "288e91f1e3a43ad7d7a76d7c1ae0198bc2df0c3afb1291284a83fb0266463f03cc7cd433e4d7bcd38097ac69c0f8eab3e4761aeca51cb87d45930293d2029c880829c5161f3402c58547c86164735ce0e0ed97b20ba938e82e81b333bd254f659f3e9fd962579cfcda8422b649a092045d811010f8fdf1d69e35b923ad7bd2316d39e33bfad28c6ab45a72549d1e174cf471c56b8194076498452ce03363ccef25cb00de62f88509a8ffef7d0f9c72b8116734da6aa8f974021957a29f3c63be4cddcae28b6b6ab2d23cbc5fdffec37fd70f5a81e5bcefb4ef7897825b98ed7d27a4a842266f1edade625021107d880159695be2f5dde87a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3ff0000, @empty, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff53}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) (async) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xfffffffffffffff5) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000bc0)) (async) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000c00)={@empty, @empty, @loopback}, 0xc) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000c40)={0xd, {0x5, 0x81, 0x5, 0x7fffffff}}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000c80)={0x6, 0x0, [{0xacb, 0x0, 0x20940000000000}, {0x352, 0x0, 0x3}, {0x9d1, 0x0, 0x82e6}, {0x8a8}, {0x2a0, 0x0, 0xc8c0}, {0x339, 0x0, 0x5}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d00), 0x80, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000d40)={0x1, 0x0, 0x3, 0x2, {0x8, 0x7fff, 0x2, 0x9}}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001340)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000000e00)={0x4cc, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x28}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1b0, 0x84, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="8dec7dcc334e53e80b84db4c1a41c39aab2402e71911c9ccf1ae"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6f}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5203bc82}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe0000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1b7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, @random="99291b8670"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x10}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10001}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x298, 0x84, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x21}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x10000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x94}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="f0b2004bd4c0f6d7"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5d}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2345}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffb}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2c0}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3cbb5193}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="1fe3fbe5a872cad73da2517f54d80b07"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x568c}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xda56}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x200}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xbb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10001}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x89}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x7fff}]}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2511}]}, 0x4cc}}, 0x4000000) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001380), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r5, {0xfffffff7}}, './file0\x00'}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001400)={0xfff, 0x4000, 0x1, r8, 0xa}) io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x7, 0x3, r8, &(0x7f0000001440)="9e078ab38966cbd89cd275baa81683db6f86058ac1dc5e72ea4920e4f07806afbd9b4a182b22e6bcd11905947987b35269d089beb572767b4b406213583caf627dd42f59f50d664ade9a7e55317fd2b445200d5b58655401338e98da802300f7ffbdc389d165ae3f4ee030c5e958a38735e7c8d9fd0c4759396ad6019dd1d6", 0x7f, 0x4}]) (async) getsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000001540)=""/173, &(0x7f0000001600)=0xad) (async, rerun: 64) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001640), 0x628000, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) 42.330627777s ago: executing program 1 (id=532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x9}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x20, 0x7}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = getuid() r5 = getegid() chown(&(0x7f0000000340)='./file0/../file0\x00', r4, r5) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @remote, 0xce}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r6, 0x1a093d86e007e0fb, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 42.281087857s ago: executing program 1 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x5, "e82d1267"}]}}, 0x0}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0x1ad72f7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x7ffffffe, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) accept4(r4, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0xbd) mkdir(&(0x7f0000000180)='./file0\x00', 0xe95b787bbbb12e9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x85) unlinkat(r8, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$HIDIOCGNAME(r8, 0x80404806, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f0000000080)=[{0x20, 0x7f}, {0x6}]}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x4000, &(0x7f0000000140)='grpquota') 41.984391608s ago: executing program 1 (id=534): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() close(0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) 41.707606236s ago: executing program 32 (id=534): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() close(0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) 13.270631919s ago: executing program 4 (id=642): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x682, 0xe6d1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x6}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 13.174952142s ago: executing program 4 (id=643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x4, 0x9f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0x9, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0xd, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x5f, 0x1, [{0xff, 0x3}], 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x1, 0x4, [{0x8, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x9}], 0x8}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x6a, 0x1, [{0x6, 0x2}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0xc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0xe0, 0x1}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0xfa, 0x3, [{0x3}, {0x10, 0x80}, {0x80, 0xff}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0xfffe, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x45, 0x5, [{0x8, 0x2}, {0x0, 0x5}, {0x8, 0x5}, {0x4, 0xd}, {0x2, 0x1}], 0x80}], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x2, 0x1, 0x0, {0x9, 0x25, 0x1, 0x5, "582a7dcd52"}}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0xe, 0x3, 0x4, {0x7, 0x25, 0x1, 0x3, "b31255"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5, 0x9, 0x65, 0x10, 0x9}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4b, &(0x7f0000000180)=@string={0x4b, 0x3, "7c6e43c110b40454cd46ea4666b12604b0686148a3536a18836f1ce9f104980bbb396e03d5914a2512a27c8dd326995c652434144d4e7fbdf4ccad38849799531c84a4b09d91cf0f5a"}}]}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x0, 0x9, 0xb7, {0xb7, 0x5, "0533e0b1b9f056672de952ebd0d16492207c8e765cadeca4a8f8207397b52825ff1f3e39e1b6f9d296f0b47b4e1a0241284b501bc0b6e857bfcc7959780a427a6b061eea55415018053be4009043f42f085d6384324da72ddb4b33709369b4fbe294c8d6a981613dffc5c7da8d48adbe8a4e766d35039e8c77193019091bf6af261e011d1447d446afb23b96a04089972776a556db578750b32409e8047dd23b0f67e167e0c1ce2a647fc1769226810886d69b7a45"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x0, 0xf, 0x9c, "7041fe9ca9075bb9bb6814cb32055cad251304b8fef004ef005ec8182cb5d01f2c75dfb510a80e73a6954c9e02cd27bd152ecb75eb5d644da7010e44ab35fa5e31b8f0323acb910b9532de602c6288aa185a322e58b3487d7cf57ee6a0d97b3fb1d2fa04de3a597689223a55d29fb8237aa532c1fd87ba88614c01d9649e6751baa4c90e2df9bff070b970d0d01df4636ef903594981c03d893f8894"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0xc0, 0x5, 0x1, "04"}, &(0x7f0000000680)={0x40, 0x5, 0x3, "667df4"}}) syz_usb_connect(0x3, 0x10d, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x4d, 0x67, 0xa2, 0xff, 0x2c4e, 0x103, 0x44ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x2, 0x4, 0x4, 0xc0, 0xd, "", [{{0x9, 0x4, 0xeb, 0xff, 0x0, 0x9a, 0x6a, 0x35, 0x1, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0fa20da94b"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffb, 0x3, 0x7f}, {0x6, 0x24, 0x1a, 0x1, 0x29}}]}}, {{0x9, 0x4, 0xfd, 0x7, 0x0, 0xef, 0x8f, 0x5f, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x4, 0x1, 0x81}]}, @generic={0xab, 0x23, "1d37b2d19302f82928f802ba84c424506b2ac02785224cc1e5d42bad14e1ba18b5e541be4d395551f058ff196de67bb6eca870e2a98bf566e05d2d69bf1d8b90871aeed2fa062c1585968f29ca714233c29a471e96af58ce03ad960f3f64d1ecb140feb942a1d659b50298afa2dcf4d70caabe2e42f5a83f8d8dc7181d5e08038ca5f235561f5054c2ba1f1529cf8b9632f916f893d0ef63fdecd3bdc2ada5527db79096f2c0cd555e"}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0xbb, 0xc, 0x1, 0x10, 0x4}, 0xaa, &(0x7f00000008c0)={0x5, 0xf, 0xaa, 0x4, [@ptm_cap={0x3}, @generic={0x7b, 0x10, 0x2, "7dcffa40431ddf3902229271bbc8156936ac736fa06a1bb7703895ae018211e5e1c95cde7ff4f3a1c04fc86cad2fc5bae95b62c494c519f703b0978d49d19d7c7ff03d87732b90d639fe56bebdfeff0b4f55ce93588ff608b60cbe48280623302728dee4e8f120698c6aebb85623b5abf524b38f4e1a3b2b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0xe3, 0x9, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x1000, 0xf00, 0x3, [0xc000, 0xff00c0, 0xc000, 0x60c0]}]}, 0x3, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x20, 0x17, 0x55, "f50a9497817ed3f36a742443a8de280eec58f7c80b810c45306e7f10b6b5e2344e041b309bbb637ba5305d86f61b5e194a1eab369e9c4d72e43e697431d0ddcffea11d10d500"/85}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.158550607s ago: executing program 4 (id=655): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x4, 0x3fff}, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002800)={@dev={0xac, 0x14, 0x14, 0x29}, @broadcast}, 0xc) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c17a"], 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424", 0x21) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f0000004780)={&(0x7f00000045c0)=[&(0x7f0000000040)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000000640)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x5, 0x1}, {0x2}, {0x3, 0x8c}, {0xade4, 0x927f}, {0x3, 0x800}, {0x1, 0x8000000000000001}, {0x100, 0x2}, {0x9, 0xe}, {0x53b, 0x594}, {0x1, 0x2}, {0x145, 0xcd}, {0x5, 0x3}, {0x3, 0x9}, {0x24d0, 0x3}, {0xe7}, {0x5, 0xa}, {0x75aa, 0xfff}, {0x3, 0xf5}, {0x9, 0x2}, {0x0, 0xfffffffffffffff8}, {0x632b, 0x7f}, {0x9, 0x9}, {0x7, 0x100000000}, {0x9f, 0x5}, {0x1ff, 0x3}, {0x2, 0x41e}, {0x7, 0x1ff}, {0xffffffffffffffff, 0x115}, {0x2, 0x8}, {0x16, 0x7}, {0x7ff}, {0xcc, 0x100}, {0x401, 0x5}, {0x1000, 0x5}, {0xfffffffffffffe00, 0xbc5}, {0x80, 0x1}, {0x2}, {0x8, 0x5}, {0x5, 0x7}, {0x101}, {0x200000004000}, {0xa32, 0x9}, {0x946, 0x2}, {0x3, 0x800}, {0x10001, 0x1f0}, {0x5, 0x7}, {0x3, 0x80}, {0x9, 0x8001}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0xf, 0x2}, {0xc, 0x6}, {0x1, 0x2}, {0x9, 0x7fffffffffffffff}, {0x5, 0x7}, {0x3, 0x6}, {0xfffffffffffffff4, 0x9}, {0x401}, {0x2, 0x3}, {0x0, 0xba}, {0x40, 0x7}, {0x7, 0x8}, {0xe6, 0x1000}, {0x40, 0x7}, {0x5, 0x1000}, {0x4, 0x101}, {0x7, 0x6}, {0x8, 0x5}, {0xc, 0x3}, {0xfffffffffffffff1, 0xffffffff}, {0x9c1, 0xffffffffffff0000}, {0x23, 0x2}, {0x5, 0x1}, {0x410d09b1, 0x5}, {0xffffffff, 0x1}, {0x100, 0x3}, {0x5, 0x1}, {0x4, 0x80000000}, {0x7, 0x2}, {0x80000001}, {0x0, 0x7}, {0x24, 0x6}, {0xc91, 0xfffffffffffffffe}, {0x1, 0x80}, {0x4, 0x9}, {0xc, 0x9}, {0x4, 0x6}, {0xfffffffffffffffc, 0xb}, {0x6, 0xad}, {0x1, 0x7}, {0x8, 0x8}, {0x80000001, 0xb}, {0x10000, 0x7d30310}, {0x1, 0xfffffffffffffeff}, {0x2, 0x7f}, {0x70f, 0x7}, {0x0, 0x2}, {0xffffffffffffffff, 0x3}, {0x80000000, 0x1}, {0xf, 0x7}, {0x7, 0x751}, {0x2, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x8e8}, {0x1ff, 0x9}, {}, {0x0, 0x5}, {0x0, 0xa4}, {0x3, 0x3}, {0x6, 0x6}, {0x80}, {0xffffffffffffff81, 0xa31}, {0x9, 0x10000}, {0x0, 0x81}, {0x4, 0x7fffffff}, {0x9, 0x5}, {0x7, 0x6}, {0x0, 0xfffffffffffffff7}, {0x4, 0x2e7}, {0x479, 0x4}, {0x10001, 0x1000}, {0x0, 0x2}, {0x10000, 0xa}, {0xff, 0x2}, {0xce32, 0x9}, {0x401, 0x7}, {0x5d8c, 0x5}, {0xd, 0xc2}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x2a99, 0x7}, {0x8, 0x1}, {0x8, 0x5}, {0x9, 0xd8}, {0x6, 0x2}, {0x2, 0x7}, {0x29fc, 0x2}, {0x6, 0x3c4}, {0x81, 0x800}, {0x0, 0x5}, {0x4}, {0x100000000, 0x3a}, {0x3, 0x101}, {0xffff, 0x9}, {0x9, 0xfe}, {0x7, 0x1}, {0x5, 0x7}, {0x1000, 0x3}, {0x8, 0x3}, {0x1, 0x203dfe80}, {0x6, 0xc}, {0x0, 0x8}, {0x7}, {0x6, 0x443f}, {0x5, 0xaa88}, {0x7}, {0x8001, 0xfffffffffffffffa}, {0xb6, 0xc1c}, {0x1, 0x2}, {0x5b1de090, 0x9}, {0x4, 0xc2}, {0x1, 0x1}, {0x4a, 0x7fff}, {0x7fffffffffffffff, 0x4}, {0x6, 0x2}, {}, {0x1, 0xfffffffffffffffd}, {0xc, 0x1000}, {0x80000001, 0xf}, {0x57, 0x80000000}, {0x5, 0x6}, {0x80000001}, {0x1ff}, {0xdf, 0xf1a}, {0x9, 0xffffffffffffb0e1}, {0x7, 0xfffffffffffffff7}, {0x7ff, 0x5}, {0x4, 0x6}, {0xfffffffffffffff8, 0xfffffffffffffffa}, {0x8, 0x401}, {0x1, 0xb137}, {0x8000, 0x7fff}, {0x1ff, 0x9}, {0x6, 0x8b78}, {0x5444, 0x2}, {0x51}, {0x100000001, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x200}, {0x2, 0xdfc}, {0x8000, 0xe78}, {0x4, 0x2}, {0x2, 0x2}, {0xe57, 0x26}, {0x7, 0x9}, {0x5, 0x1}, {0x6, 0x5}, {0x401, 0xf8f}, {0x3, 0x80000001}, {0x1, 0x7}, {0xd, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x3f8, 0x81}, {0x5, 0x1}, {0x8000000000000001, 0x7}, {0xffffffff991e51fd, 0x3}, {0xa5, 0xce35}, {0x3, 0x100000000}, {0x8, 0x6}, {0xfffffffffffffffa, 0x9}, {0xd, 0x8}, {0x1, 0x7}, {0x10000, 0xe11}, {0xfffffffffffffff9, 0xfffffffffffffffc}, {0x7fffffffffffffff, 0x4}, {0x2, 0x2dde}, {0x2, 0x1}, {0x80, 0x8000000000000000}, {0x6b, 0x3}, {0x0, 0x5}, {0xffff, 0x100000000}, {0xf, 0x7}, {0xffff, 0x1}, {0x80, 0x3}, {0xf, 0x3}, {0x2}, {0xf, 0xfffffffffffffffb}, {0x2, 0x1}, {0x6, 0x9}, {0x5, 0x2}, {0x8, 0xc}, {0x8, 0x1}, {0x5e1, 0x21}, {0xfffffffffffffffc, 0x8}, {0x8, 0x1}, {0x5245, 0x3ff}, {0x3ff, 0x1}, {0x8000000000000001, 0x5}, {0x4, 0xe}, {0x1a, 0xfe85}, {0x7, 0x2}, {0x4, 0xc0}, {0x8, 0x5}, {0xfffffffffffff001, 0x9cdb}, {0x6, 0xf8}, {0x5, 0x20ac}, {0x1, 0xe}, {0x5748, 0x3d6}, {0x0, 0xfffffffffffffff7}]}, &(0x7f0000001680)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000016c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000001700)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000001740)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000001780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f00000017c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000001800)=@uuid={{0x4f32494e, 0x5, 0x10, 0x2}}, &(0x7f0000001840)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000001880)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xfffffffffffffffc, 0x80}, {0xffffffffffff2fdc, 0x19}, {0x1, 0x800}, {0x179f, 0x1}, {0x2, 0x8}, {0x6}, {0x7, 0x1}, {0x2, 0x8000000000000000}, {0x7fff, 0xf0}, {0xfff, 0x2e}, {0x1, 0xd7b}, {0x401, 0x1}, {0x7, 0x5}, {0x3, 0xc697}, {0x6, 0xffffffffffff8001}, {0xf, 0x70000}, {0xaf67, 0x9160}, {0x40, 0x10000}, {0x8, 0x5}, {0x1, 0x72b}, {0x1, 0xffffffffffffd218}, {0x4000000000, 0xb1}, {0x3, 0x2}, {0x8}, {0x9, 0xa859}, {0xffff, 0x2}, {0x10001, 0x40}, {0x687, 0x6}, {0x8, 0x4}, {0x400, 0x3}, {0x9, 0x5}, {0x2, 0x5}, {0x7fba, 0xd1}, {0x3, 0x4}, {0x1, 0x7a}, {0x5, 0xff}, {0x9, 0x5}, {0x600000000000000, 0x7}, {0x8, 0x7}, {0x6, 0x8}, {0x7, 0x401}, {0xc084, 0x800}, {0x7, 0x10b}, {0x4d, 0xa}, {0x1f4, 0x3}, {0x6, 0x8}, {0x6, 0x6}, {0xfffffffffffffffb, 0x7}, {0xd82, 0xcdde}, {0x42, 0x4}, {0x721, 0x8000000000000001}, {0x5, 0x87}, {0xe4b, 0x9}, {0xc90}, {0x0, 0xe67e}, {0x7, 0xfffffffffffffff8}, {0x6, 0x1a}, {0x7, 0x9}, {0x1, 0xafa}, {0xb, 0x3}, {0xc, 0xc}, {0x7, 0x8}, {0x9, 0x3}, {0x5a, 0x6}, {0xcf, 0xd4d}, {0x55c, 0xfffffffffffffffd}, {0x3, 0x5}, {0x6, 0x40}, {0x0, 0x6}, {0xffffffff, 0xed6}, {0x4, 0x8}, {0xd4, 0x6}, {0x9, 0xfffffffffffffffb}, {0x2, 0x6}, {0x7fffffffffffffff, 0x6}, {0x3, 0x7aa}, {0x3, 0x1ff}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0xca}, {0x1, 0x5}, {0x8, 0x800}, {0x3, 0x5}, {0x7f, 0x8}, {0x1, 0x401}, {0x5, 0x6}, {0x3, 0x1}, {0xe186, 0x8000000000000000}, {0x3, 0x5}, {0x9, 0xa}, {0x2, 0x4d}, {0x101, 0x6}, {0x6, 0x1}, {0x3, 0xc7}, {0x1, 0x1}, {0x8, 0x4}, {0xa0, 0x2}, {0x8000, 0x81}, {0x6478, 0x200}, {0x5, 0x4}, {0x5, 0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x3}, {0x1000, 0x7}, {0x7}, {0x7, 0x1ff}, {0xffffffff, 0x13400000000000}, {0xfffffffffffff89c, 0x10000}, {0x1, 0xffffffffffffffff}, {0x1, 0xffffffff}, {0x4, 0x1}, {0x4, 0x7}, {0x8, 0x9}, {0x4}, {0x3, 0xf}, {0x2}, {0x8000, 0xfffffffffffffffc}, {0x8, 0x100000001}, {0x7ff, 0x3}, {0x5, 0x276e}, {0xfffffffffffffffb, 0x100000000}, {0x7, 0x61d}, {0x6, 0xfffffffffffffff8}, {0xd9e6, 0x5}, {0x0, 0x8}, {0x7, 0xfffffffffffffffd}, {0xbb, 0x6}, {0x8, 0x15}, {0x0, 0x3}, {0x8, 0xfff}, {0x2, 0x9}, {0x1, 0x8000000000000000}, {0x5, 0x9}, {0x2592, 0x6ce2}, {0x1}, {0x2, 0x27}, {0x66, 0x3}, {0x3, 0x8}, {0x10000, 0xf97}, {0x6a5fa9e2, 0x400}, {0x3, 0x8}, {0x0, 0x10000000000}, {0xec, 0x80000001}, {0x61c4, 0xffffffffffff17a9}, {0x9, 0x101}, {0x0, 0x6}, {0x8, 0x6}, {0x1, 0x12200000000}, {0x8, 0x1000000000000000}, {0x3, 0x1}, {0x7fffffffffffffff, 0xb}, {0x6, 0x528f}, {0xf880, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0x5}, {0x3b03963d, 0x6}, {0x0, 0x8}, {0x5, 0x8}, {0x10, 0x2}, {0x7f, 0x30000}, {0xd, 0x7}, {0x7fff, 0x3}, {0x0, 0x8}, {0x100000001, 0x7}, {0x1, 0x2}, {0x100000001, 0x33a4}, {0x3ff, 0x81}, {0x40, 0x5}, {0x9, 0x3ff}, {0x5, 0x1000}, {0xa0d4, 0x30000000000000}, {0x2}, {0x9}, {0x735, 0x5}, {0x24, 0x4}, {0x9, 0x8}, {0x200, 0x3}, {0x9, 0x2}, {0x0, 0xf8}, {0x6, 0x8}, {0x6, 0x100}, {0x6, 0x2}, {0x3ff, 0x1}, {0x7, 0x7}, {0x5, 0x5}, {0x200, 0x1}, {0x100000001}, {0x1, 0x80}, {0x0, 0x4}, {0x2, 0xa}, {0xd4, 0xfcd}, {0x7ff, 0x8}, {0x1, 0x4800000000000000}, {0x1ff6adc2, 0x8}, {0x3d1, 0x4}, {0x6dd05858, 0x8}, {0x14000000000000, 0x4}, {0xfff, 0x991e}, {0x100, 0x4}, {0x7, 0xb6df}, {0x7, 0x71}, {0xc, 0x7fff}, {0x8, 0x1}, {0x7ff, 0x2}, {0x7, 0x4000000000000000}, {0x2, 0x9}, {0x6, 0x4}, {0x7fff, 0x3}, {0x775, 0x180000000000}, {0x1, 0xd357}, {0xef, 0xaa}, {0x100000001, 0x8}, {0x7, 0x7fffffffffffffff}, {0xd55, 0x4}, {0x8c2, 0x4}, {0x800, 0x3}, {0x0, 0x4}, {0xa, 0x5}, {0xe42, 0x9}, {0x9, 0x5}, {0x7, 0xffffffffffffffff}, {0x5}, {0x10, 0x1}, {0x80, 0x101}, {0x100000001, 0x400}, {0x9, 0x6}, {0x8001, 0xc}, {0x800, 0x3}, {0x7}, {0x7, 0x6}, {0x2, 0xfffffffffffffff7}, {0x8, 0x7}, {0x6, 0x8000000000000000}, {0x5, 0x47}, {0xc1, 0x7}, {0x7a3}, {0x100, 0x7}, {0xffffffffffffffff, 0x3}, {0x1ff, 0x8000000000000000}, {0x8d13, 0x4}, {0x8}, {0x1, 0xfff}, {0x8, 0x4}, {0x1000, 0xe}, {0x8, 0x6}, {0x7fffffff, 0x6}, {0x0, 0x3ff}, {0x8000, 0xffffffffffffffff}, {0x5, 0xfffffffffffff000}, {0x9, 0x2}, {0x7fff, 0x7fff}, {0xff, 0x9}, {0x7f, 0xffff}]}, &(0x7f00000028c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x140000000}}, &(0x7f0000002900)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002940)=@journal={{0x4f32494e, 0x7, 0x10, 0x2}}, &(0x7f0000002980)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000029c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002a00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002a40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000002a80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002b00)=@label={{0x4f32494e, 0x4, 0x10, 0xb57c1e7afcc7d154}}, &(0x7f0000002b80)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002bc0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002c00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002c40)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x1}, &(0x7f0000002d80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002dc0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002e40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000002e80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000001, 0x180}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x8f, 0x9}, {0x5, 0x3}, {0x67, 0x8}, {0x6, 0x4c70}, {0xc, 0x9}, {0xffffffff, 0xfffffffffffffffa}, {0xfffffffffffffff8, 0x4}, {0x4}, {0x200, 0x10000}, {0x7, 0xa237}, {0xe6, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x7, 0x8}, {0x800, 0x5c4}, {0x5, 0xffffffffffffffff}, {0x7fffffff, 0x4}, {0x5, 0x4}, {0x6, 0x200000}, {0x7, 0x4}, {0x9, 0x4}, {0xa2f6, 0x9}, {0x3}, {0x2, 0x7fff}, {0x8, 0x4}, {0x3d, 0x5}, {0x80000000, 0x5}, {0x8, 0x596}, {0xfff, 0x7}, {0x4, 0x5}, {0x0, 0x64}, {0x8, 0x2}, {0x8000000000000000, 0x7}, {0xe3a1, 0x53e4}, {0x3}, {0x5, 0x8e88}, {0x9f, 0x3}, {0x9, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0xbab, 0xbf}, {0x160420000000000, 0x1ff}, {0x0, 0xffff}, {0x4, 0x9}, {0xf, 0x7}, {0x8, 0xd2}, {0x0, 0x2}, {0x7fffffffffffffff, 0xcdf5}, {0x3, 0x4}, {0x7fffffffffffffff, 0x99cf}, {0x10001, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x8000, 0x3}, {}, {0x1000, 0x81}, {0x6, 0x7fffffffffffffff}, {0xffffffff, 0xd}, {0x1, 0x7}, {0xda, 0x10001}, {0xfffffffffffffff9, 0xfffffffffffffffa}, {0x8, 0xc9b2}, {0xd79c, 0xc}, {0x3, 0x9}, {0x6, 0x7}, {0xf0, 0x5}, {0xa9, 0x9}, {0xd, 0xd}, {0xfffffffffffffffb, 0x4}, {0x7ff, 0x1ff}, {0x200, 0x200}, {0x4, 0x32}, {0xfffffffffffffffc}, {0x81, 0x4}, {0x7, 0x3}, {0xffffffffffffffff, 0x48}, {0x7, 0x7d5}, {0x8, 0x9}, {0x7, 0xfffffffffffffffb}, {0xa046, 0xec}, {0x8, 0x1fffffffe0}, {0x9, 0x8029}, {0x8, 0x61}, {0x17f47ecf, 0x6}, {0xae3, 0xeec}, {0xf5}, {0x1000, 0x573}, {0x480000000000000, 0x2}, {0xa38a, 0x3}, {0xffff, 0x4}, {0x5, 0x101}, {0x5, 0x2}, {0x3, 0x6}, {0x8, 0xb}, {0x7, 0xfffffffffffffffa}, {0x0, 0x6}, {0xfffffffffffffe01, 0x401}, {0x2, 0x4}, {0x1c00000, 0x4}, {0x9}, {0xfffffffffffffff9, 0x88a}, {0x4, 0xffff}, {0xdc6, 0x5}, {0x5, 0xf06c}, {0x3, 0x1}, {0x6492, 0x4}, {0x0, 0xffffffffffffffa1}, {0x3, 0x81}, {0x3, 0x1}, {0x3, 0x9}, {0x8, 0x1}, {0x7, 0x9b3}, {0x0, 0xe}, {0xa, 0xffffffffffffffff}, {0x171}, {0x1191, 0x40}, {0x800, 0xfffffffeffffffff}, {0x9, 0xf4}, {0x200, 0x7}, {0x0, 0x700000000000000}, {0x24e, 0xd}, {0x80000001, 0x9}, {0x1, 0xffffffffffffff44}, {0x4, 0xd5}, {0x80000001, 0x1}, {0xfffffffffffffff3, 0x7}, {0x9, 0xffffffffffff7fff}, {0xffffffffffffffa7, 0x6}, {0x6, 0xf64}, {0x7, 0x1}, {0x355e, 0xe00000000000}, {0x6, 0x8f7}, {0x1, 0x4}, {0x7fffffffffffffff, 0x5}, {0x9, 0x400}, {0x1, 0x3}, {0xe6, 0x3}, {0x5e55, 0x6}, {0x3, 0x7}, {0x5, 0x3}, {0xd34, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x800, 0x3}, {0x0, 0x9246}, {0x1, 0x9}, {0x2a}, {0x8, 0x80000001}, {0x4, 0x37}, {0x0, 0xffffffff}, {0x6, 0x1}, {0x5, 0x8}, {0xffffffffffffffff, 0x4}, {0x0, 0x10000}, {0x1, 0x7fffffff}, {0xabbf, 0x6}, {0x2, 0x7}, {0x6, 0x55d8b37e}, {0x9, 0x7fff}, {0x840c, 0x101}, {0x2, 0x8}, {0x100, 0x23a2}, {0xcc8, 0x6}, {0x5, 0xffffffffffffffff}, {0x0, 0x9}, {0x7fffffff}, {0x1000, 0x7}, {0x9}, {0x4ca, 0xd}, {0x6}, {0x3, 0x5}, {0xa7, 0x400}, {0x8, 0x8df}, {0x3, 0x9}, {0x8000000000000000, 0x66800000000000}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xe8}, {0x3, 0x3}, {0xfffffffffffffffc, 0x28000000}, {0x1, 0x3}, {0x6, 0x10000}, {0x7ff, 0x2f7}, {0x3, 0x2bda}, {0xd9, 0x8000000000000000}, {0x3, 0x1}, {0x800, 0x7fffffffffffffff}, {0x800, 0x5}, {0x5, 0xffffffffffffffff}, {0x7, 0x4}, {0xa, 0x3}, {0x1, 0x401}, {0xff}, {0x3, 0x8000000000000001}, {0x7, 0x2cd}, {0x35, 0xc}, {0x9, 0x8}, {0x1000, 0x7}, {0x7, 0x2}, {0x3, 0x72c8}, {0x5, 0x9}, {0x2, 0x3}, {0x9, 0x5}, {0x1, 0x800}, {0x8, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x8, 0x8}, {0xfffffffffffffffb, 0x40}, {0x800, 0x7}, {0x5, 0x81}, {0xf, 0x4}, {0x6, 0xa7}, {0x2, 0x101}, {0x800, 0x7}, {0x3, 0x9}, {0xd, 0x2}, {0x3, 0x7c0}, {0x8, 0x2}, {0x20000000, 0x2}, {0xfffffffffffffc00, 0x40}, {0x9, 0x3ff}, {0xfffffffffffffff7, 0x9}, {0x4, 0x4}, {0x7, 0x10000}, {0x90, 0x9}, {0xffff, 0x7}, {0x4a69, 0x10001}, {0x8b, 0x6}, {0x5, 0x10001}, {0x3, 0x800}, {0xa, 0x7ff}, {0x7f, 0x3}, {0x7, 0x3}, {0x1, 0x80}, {0x100000001, 0x1}, {0x3, 0x5}, {0x63a, 0x1}, {0x40, 0x8000000000000000}, {0x0, 0x9}, {0x3, 0x7fff}, {0xd, 0x9}, {0x9, 0xef1f}, {0x1, 0x7bd}, {0x3, 0x5}, {0x9, 0x8}, {0xfffffffffffffff4, 0x40}, {0x1043, 0x4}, {0x5, 0xff}, {0x2, 0x8000000000000001}]}, &(0x7f0000003f00)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000003f40)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000003f80)=@uuid={{0x4f32494e, 0x5, 0x10, 0xa0000000}}, &(0x7f0000003fc0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000004000)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000004040)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000004080)=@label={{0x4f32494e, 0x4, 0x10, 0x180000000}}, &(0x7f0000004100)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x20000000}, {}, 0x7f}, &(0x7f0000004280)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000042c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004380)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000043c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000004400)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000004440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000004480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f00000044c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000004540)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000004580)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}], 0x32}) 7.495450511s ago: executing program 2 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @loopback, 0x18000000}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000001740), 0xc0, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000001780)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000090, 0x0, 0x7}]}) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000380)=ANY=[@ANYBLOB="6dff6401043030303030303030303030303030306730b0b95b9c72b724ad"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x4, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x7, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x9}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x9, 0xe4, 0x2, '\x00', 0x1}, {0x5c, 0x2, 0x40, '\x00', 0x8}, {0x49, 0x6, 0xa, '\x00', 0x6}, {0xe, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x2}]}}) 6.516456661s ago: executing program 4 (id=673): memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0x4, "7f537787ff9941fce2c918ce19c558e28552b88fa17f911c8d7411454ab3f5e5fe12d4a51aabd9b491ebe2dd10a074d8d63d535646517d18a118fab11bae6aee79f4210b18429a28ffe692b3c2a70d0e7cf08a4383657fd8114a2ff93aaf3f93bc345148c0b08cce7998a44d212ecc684af31539d301355541cbfbf3da0b00f66cf319569d65af161777dad7352eca53d7cdccc64f60070bff3b42eae44c9fb671bbeb748ddb92e3b53eb7e0415a113d50cd3b8157c5bc15ba8f9b0e00c6e1aeaa34dc16d75dcf75669da795938ad191ed9ab2a6078dbea2bb89a613b9f97004ca5e1e71960ff7e9c4e2a0c15e4512146cc1d50e5d95799944e4f243ee53a507", 0x0, 0x8, 0x0, 0x19, 0x6, 0x2, 0x4, 0x1}, r1}}, 0x128) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000340)={r0, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x0, &(0x7f0000000280)={@align=0x9, {0x1c80, 0x8, 0x90, 0xe}}, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0xc}) r3 = syz_io_uring_setup(0x4260, &(0x7f0000000380)={0x0, 0x2241, 0x100, 0x2, 0x88}, &(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xe, 0x2010, r3, 0x10000000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000004c0)={0x4, r0, 'id1\x00'}) write$cgroup_type(r5, &(0x7f0000000540), 0x9) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x5, @empty, 0x6}, @in={0x2, 0x4e21, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r1, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x1000, {"796a37aceca447f9e164c0796d1b987e"}, 0x8, 0x3, 0x8}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000800)={0x4000, 0x1c000}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000840)={0x1, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x88) close_range(r0, r5, 0x2) syz_open_dev$evdev(&(0x7f0000000900), 0x1000, 0x2080) r6 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r6, r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000940)={0x7, r2, 'id0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8000}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x200440c4) close_range(r3, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000b80)) socketpair(0x2c, 0x800, 0x2, &(0x7f0000000c80)) syz_io_uring_setup(0x20e6, &(0x7f0000000cc0)={0x0, 0x20f8, 0x1000, 0x2, 0x11a, 0x0, r5}, &(0x7f0000000d40), &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)) syz_io_uring_complete(r4, r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000e80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e40), 0x111, 0x2}}, 0x20) 5.843335938s ago: executing program 2 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004881) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 4.910898347s ago: executing program 2 (id=684): syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400a2e0000004e1e"], 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 4.475012633s ago: executing program 3 (id=688): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000400)) syz_usb_connect(0x0, 0x24, &(0x7f0000001980)={{0x12, 0x1, 0x111, 0x1, 0x26, 0x55, 0x10, 0x61d, 0xc170, 0x4522, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x20, 0x2, "", [{{0x9, 0x4, 0x4, 0x5, 0x0, 0xa1, 0x54, 0xef, 0x1}}]}}]}}, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000900)="55062540bf75b8034f8491df6f18de90b0c013edafe5677339e324010a533cda02e208fa1e42802845b6133e6ce17d3029d5e9a6d152794e7ffa5db89c824e85a9fd2d415fe757b4605bdcdb5c1b2c66075a075d394ea1d13f8eead8f404bffdc348c1ff0974b795470311afc7832413887d4686f0b8ae562f325fa409b692f3c921fd656c7ae60bb9b7e47a6c27571705a08731e710863ef2d20f2fc6a770015eb32099637af7781b6b60ca9cac8c3e1126ecd3a372a9e4ddcd3436e87f45f009fae95b255cfc111347881599cd6009914b9bdf26bd3fdeb5f5d50fc58c8d0dcdaf", 0xe2}], 0x1) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xb7, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0xfa, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xe4, 0x91, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x9, 0x38}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x128, 0x40, 0x7, 0x40, 0x40, 0x8}, 0x9d, &(0x7f0000000080)={0x5, 0xf, 0x9d, 0x1, [@generic={0x98, 0x10, 0x0, "f587553c268001bde16f0b004a6d1942d365ab9bfe21a4df3f4a801fe9b141761dcd96aba8c1a111d0e6a7aea2f04c345530719856d3303aac8610d1bc3f1263375a649ef007134b6dbbc6126c446f11fa64a2d78dda9411d4736a5220348b3fe64d202be268fdf92cb6c46088019e09f382e614063051f4b4ad7ba9d24b51bd18d1474193489eb7ded8203c1c2112cb3650aa1b20"}]}, 0x2, [{0x34, &(0x7f0000000180)=@string={0x34, 0x3, "fccaff2a88e6f54bcab5f9bbf0848912d7ca15213ec77034ef1b383fd1b854dfb91245b08bac84eb0e0c29326adc7963f573"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_control_io$printer(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000580)={0x20, 0x21, 0x65, {0x65, 0x21, "f56f42f2a60052545c679b22e3db0a95affad15b8075347bde5da193f0ffae13a185c98a73a2eda7f51bcb2428ec3531ee6e8bc0e6a9436acb0beb39ed3ba36a93d1aeca30470e0674e963b3fce9a05ad719ff5b35303fef5c7237d92d086761af65ed"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404c}}}, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x40, 0xe, 0xd9, "822f34d6cdf68ddeb35270122ad6a34609eb7be063882cd97b1f462f077a8dbfffe01accb277640a5ebccfdfa9d38d49f6388d85f91721848c960f16430ed36a970e9b5f5096dd9b91db96ac3fb66f62c14eb762e16a9cbd490f6af44d8675c29753883be930e172f12ace6ed6c80a2061e0f454d850f27d6169170134232742b2f39cd1e3e2c367a66e45ff235d3528864ff49ba7b4026f11eac28cce21982f4661e5145f6a5b93ba8768c7a086b8c7a36f4134c20670876db0f202a8ea3827174d83881170e6548aa09224e8d6e9af95fea3ab4610973cb6"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x15, {0x13, "bece640a83cb26798b41ab98a5c820c87af060"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xa3}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) syz_usb_connect$midi(0x1, 0x7e, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x5, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0xe, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xfd, 0x2}], [{{0x9, 0x5, 0x7, 0xc, 0x400, 0x5, 0xb, 0x4, {0x14, 0x25, 0x1, 0x10, "2ba12228479e2462f79e7aff8e55d802"}}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0xc, 0x1, 0x5, {0xa, 0x25, 0x1, 0x6, "6a281ba0ce53"}}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x0, 0x3, 0x2, {0x14, 0x25, 0x1, 0x10, "106390d2b76402be0c0a6a1f3b0921a9"}}}]}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0xf2, 0xa, 0x3, 0xff, 0xbd}, 0xc, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x3, 0x9}]}, 0x6, [{0xe4, &(0x7f0000000700)=@string={0xe4, 0x3, "c3d6ada38f8ed198e7eca272cb334d886821e466b42cbf79d4315b9204a9882216e32047cb92a04798c4d9be6737079e92d60c457d454ff57b03bdd602bb97892e138ad656c0904c957701c5688f34160d488ff905e20011af8eff98417a92912c18ae3df9c3ba588dff0a765709d69249dd41ca0844ea38f522bb1cb4a423b54e7a853a547398c1bca243c6a721f33eaa70ba8f10f18a7de8adadcc0ce72a1d91d8ec830cc2d213e4b6b9401a9e95c1e47f965373991be75cf830ef446aa4af33400384120ad99a7a5b63a28e85b669528779c961d822babcc50cdd14b8a5082bf8"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41a}}, {0xd, &(0x7f0000000840)=@string={0xd, 0x3, "6efd534ed65b2f48cc4792"}}, {0x72, &(0x7f0000000880)=@string={0x72, 0x3, "6890daba82bdd42ce98f68fba8d857006b74f0b7fb167f5be46e8baa2c9d2d1f501e5b9491544f432e90b5ed673b5106494b7f44fee392506486d0d04284a66961614db35a8db54966e1cd802f05e5b61af2d727ba5e0ad484106f53a8f29e3555667964c8bd05491df4e3b5dfb03e84"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44d}}, {0xfd, &(0x7f0000000a40)=@string={0xfd, 0x3, "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"}}]}) 3.652092128s ago: executing program 0 (id=690): r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x762b, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x3, 0x52, 0xbd, 0x8, 0xb95, 0x2791, 0x9d87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x92, 0x40, 0x81, "", [{{0x9, 0x4, 0x32, 0xe2, 0x0, 0xff, 0xb4, 0xe8, 0x6}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000004000/0x2000)=nil) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000040)={0x0, 0x0, 0x5, "bc14aeda40bf0077cbe19aaf0d01000003000000000000000000001800"}) 3.370843837s ago: executing program 4 (id=691): mount(0x0, 0x0, 0x0, 0x208002, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="f5400000af000000716b928a57dd9c9dfbd93cabca08038ccfe4e310c3f227a6ff0dd6d225bf8037f7e4422337d6e458ba317186dd6a612e754689098ec0d73228cd3b21f709ef6cc14396a82c6d8340692ecfc5874b767de575a747061e8738c6608a19e74fb84e38a4075f86914a4176850bde8e3369c0ef9b6c1ee078feaccc08d23dbb"], 0x8f, 0x4000004, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) mount$nfs(&(0x7f0000000100)='\\^)\xc0+!+-,\b\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8000a0, &(0x7f0000000300)={[], [{@audit}, {@fsname={'fsname', 0x3d, 'cpuacct.usage_sys\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x7f, 0x21a9, 0x33524742, 0xb, 0x5, 0x10000, 0x8, 0x0, 0x0, 0xd, 0x1}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) 3.355138921s ago: executing program 2 (id=692): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)={0x2a, 0x6, 0x0, {0x4, 0x0, 0x1, 0x0, '&'}}, 0x2a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x6c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x1) add_key(&(0x7f0000000600)='rxrpc\x00', 0x0, &(0x7f0000000000)="0000000000000040e26148f239b2897b3aa70e0445dc56ef601edb92bc5a1150", 0x20, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) 3.161770096s ago: executing program 3 (id=693): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d8000000140081044e81f782db44b9040211080220000000040000a118000200e00020fd00000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8080) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.343431998s ago: executing program 0 (id=694): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @multicast1}}}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540feffff7f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b4e, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) 2.320067183s ago: executing program 0 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000b00)={0x40000000004, 0xf000, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x2, 0x0, 0x1, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 2.215690226s ago: executing program 0 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x0, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000003, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x3, 0xb, 0x3fe0000, 0x40, 0x3, 0xe}) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x2, "f42a"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[r9], 0x1, 0x800}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r10, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="e8f66856e4b3f4561929d749dd9b94dcb6f972cee56852", 0x17}], 0x1}}], 0x1, 0x20008000) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000080)="47143945cb50", 0x6) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, 0x0) 1.962842555s ago: executing program 4 (id=697): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fsetxattr(r1, &(0x7f0000000080)=@known='user.incfs.size\x00', 0x0, 0x0, 0x2) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') 1.463628811s ago: executing program 3 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0x8, 0x3c, 0xfb, 0x4, 0xfc, 0x38}}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x5, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x8000], 0x1, 0x3c4210}) (async) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) (rerun: 32) write$sysctl(r4, &(0x7f0000000040)='1\x00', 0x2) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xb, 0x97052, 0xffffffffffffffff, 0x5ce20000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.325628917s ago: executing program 3 (id=699): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x8, 0x2, 0x1, 0x1}, 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xec, 0x46}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c7a8ec54d3"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "643f536f1a3f954d366fcdee09"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xec, 0x46}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c7a8ec54d3"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "643f536f1a3f954d366fcdee09"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) pread64(r1, &(0x7f00000002c0)=""/159, 0x9f, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r4, &(0x7f0000000400)=""/207, 0xcf, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000500)={0x8, [0x2, 0x94e, 0x1ff, 0x40, 0x4, 0x3, 0xfffc, 0x7]}, &(0x7f0000000540)=0x14) syz_open_dev$vcsn(&(0x7f0000000580), 0x7, 0x400000) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000580), 0x7, 0x400000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x0, 0x23, 0xc4, {0xc4, 0xa, "beb27be6f479a97f5d329d705591f59a654d93e1e45fb5d609137d52736e4927a218918f1a45c0a6965baf569d43fd1c70f17b30185014cd813e2b13d0a46d73fa40ac753af7163c0e74a2f95ba5d9272dfcf9ea17064ea309175997285620d5c09baf9900b2e8984c5e593d632433ec938c1c335d3607e12dbb82d3bab587050c9fce31585b6121f021125f695fa43092912ffbd88367f120f7ad7dd8f136231a57c5a7fb6b24ddd43ba6bd8b3e45b97534ee920bbad0150fec31c1e80844956c59"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x40, 0x15, 0x44, "6cd20dfa7a6fd9841c3e5e0079576c255d8486c5fe10f7f872ffe2ecc3115b49db0b91c1ad6a5c97e2dc7ec63013337067ba1898110c491108f8480ac542dabb141a4087"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xdf}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x0, 0x5, 0x82, 0x2, 0x7, 0xdba8, 0xc, 0xe, 0xffff, 0x1, 0x100, 0x8}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000a40)=0x8, 0x4) r6 = gettid() r7 = fcntl$getown(r4, 0x9) r8 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000cc0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000cc0)={0x0, 0x0}) syz_clone3(&(0x7f0000000d80)={0x80000000, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x41}, &(0x7f0000000b40)=""/152, 0x98, &(0x7f0000000c00)=""/131, &(0x7f0000000d40)=[r6, r7, r8, r9], 0x4, {r4}}, 0x58) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000e80)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x3, 0xffffffffffffff5f, 0x28cf, 0x2, 0x3], 0x5, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000e80)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x3, 0xffffffffffffff5f, 0x28cf, 0x2, 0x3], 0x5, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000f80)=@vmx={0x4, 0x0, 0x2080, {0xa000, 0x10000, {}, 0x0, 0x1}, {"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", "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"}}) ioctl$CEC_ADAP_G_CAPS(r5, 0xc04c6100, &(0x7f0000003000)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000030c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0x90, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x258}, {0x6, 0x16, 0x3bc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004804}, 0x20000) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0x90, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x258}, {0x6, 0x16, 0x3bc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004804}, 0x20000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000003240)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000003280), 0x4) connect$can_bcm(r5, &(0x7f00000032c0), 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) tee(r12, r10, 0x6, 0x8) 938.564683ms ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0xe9db8df3, @local, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0xc4}, 0x1, 0x0, 0x0, 0x40048004}, 0x200500c0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f00002e5000/0x4000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xa, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0, &(0x7f0000000000)) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x7, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x40a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb32, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r6, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r6, &(0x7f0000000980)="a9", 0x1) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000307d1eb42d0000000000fb08022c00010010c00109840000120300000009210400440122290009058103000403fe0309050288cd8d521d03200005b10109d02c6c13079f281b686206e8706be8316763cc138ed90145049e8b2e84e7e82355f97bdc3b398136f388d205fdd361392d9a06f4e38fda71"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f0000000f80)={0x2c, &(0x7f0000000d80)=ANY=[@ANYBLOB='@1)'], 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x8040480) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0x9) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x4, 0xa, 0x1, 0x10000, 0x2, [0xffffd573, 0x8, 0x3, 0x1]}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000001c0)={0xc}) 313.368729ms ago: executing program 2 (id=701): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0xae) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x78}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7ff}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x8b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4040015) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000040)={r8, 0xfffff800}, 0x8) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000140)={0x3, 0x5, 0x2, 0xd8, 0x1000, 0x3, 0x0, 0x44}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010811798080000000000010902410001000000000904"], 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0) 194.364012ms ago: executing program 0 (id=702): socket$nl_generic(0x10, 0x3, 0x10) 90.498382ms ago: executing program 3 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100270000002700000049fa0fc000640000082f9078ac1414bbac1414294ae2d00c5260f734819495ddb90000000421880b00000003040008000004080086ddde5856ecfb8ad953a5806d25c74b1077bc5c433cb4a71368465594877bc7a6da60313fe53dc92a58233a64d55ea4df636019a64b00cc41add0705653be07616312be4a5a3fceb96f0d6a92161e852acf234cc8c380d2eb1d56fb4ddf0960aa5bb70ff0076ff4bc8a70c6660145036675d660d7497e3d74e95b3210684369d3a0f68a372cf8493170801a7c6db3ffc6d7caa713e4c6e4d59921931a3f5e517265302a5c7e720a6dc6a10d56cd0c9a6794e14e6c43c4e4b6785e298afde9e07bdf2e0410b497db43064328159a3cd227a5206008a1e296ef6cbac7c02f41a9a74da18c5917fd7d4798dad30a9c772c0ac88341018ef7a637ec1ec0d58365e0eb208cb365df1c8386978324156b566dace69ee51155746bc8c607d829fd2299221cf7a003df96b7c006477c37f928ed10f03894efd7b4f4618eb6541f4f3f1ce9b54b6e8dc515cf6769879f151d63d8c27abd739ec8006e77d45cd6a07ab838ae6e3b423a37028f8b26248636acab40a15f85266848434b04bb6d36e0732666ced916d76998ab48adef8a97d779ef4fc5fa338e556e4571fe5a36ba0345ffef7a626cf08d35dc149bace760f138562796f2731dfc04f9ab0b70e821c33b7acd0cc7fda2b308bdc322a96fcdf9677f7f33ad5b426f05910c0f849e9ff1efd7e02465df8779e3feea4efed6320dea28b2c742d813ab038d8f9dc059ca26bc326dbb8afe8cc3f87690bcbc4612c63b21a6884a11ea70b7ea0b4940d0c7d55ba8a70ca37e40ec52cfcf49384bb9e3a2b627db2ecd6df5e7f608cdc4b382bc9e93fec704919de0a645ff453cb2bdae7260ab2c87d7b036e0642cbbe6bfcc63a267a5bfa1d313609a53dac21c55cafb67c5c9af6aca7f7eefde15f8d17cb90eb173521b0190c50ca5126ea428f5d10b3e1706c92ef2bd226965edf67d5fe0eb958050b3d8b87ee9943dffe10cc4c8d122ca2abe9eae35b30d08c732f1a83440fa9801834d0164256bf9b6357b374f23093fe142e327d5ec314531ac7ddb80363dd052202a37936e684ec37d909e1b0da5ef9db7ee0cf26b40c8d3846f92f0716b3b9a17f86d34911e0dfb553eceaf97335799019dd86acf88dc2d081be6d110af1b9d86b74f219f07922e118c68e561112dcf4c2d0386e1cfe9be3c03000ce8244c5e747dba2684f2643da1a797bd1f34ca9ec64a45922bd74c7ceb63fc884114524bccb83a3c8f5263ebc43e0ad538b910138c5d86e469d4051ba1c9f57ec81e01e8e6a60ace5e15a69f1c3f4eb3b2369f84435495809cc09a74fc5a7c14214b5b00bb159d7f823838cc567e1d74fd4e6e43cb704c5747ea03b4d33ee26443895a7898fae0e96db69d93ee5778dee1eb3a3960097469ad68b7fe72a3b118c2496f0dba59ba906d977af3213615b3f9258d964d53b88c01b4d94d1eb34aa2600c94690024de9a28475564806bd08329c892d18d8b1569398bc9196c3d5f91ea12006361ff3f8c738c4bffd678e9df38902f4e4ae1f9be273114a1b2b02c5ad538f251352bb47d6ae0ba37bc12350df611d714a14c90652a128101fefa71be7a52a18628c5d6098aa26809383276c2c362bbdb96dea3abf37a5dac2c9406e030e0601cb70a9e733738a44e54ed82d9217e45dd16b31300b5551e7363cfc20b5245356788d4f17526e1bfdfb0ae182a8781f7878892c5d35fe765f4b3164a811764f42de49e84adf19ac5c5d12808decc095209e3637a5fd84bcc95656a108790543d553af1cf810fbfd75b266775bd56d950393cac16ddfad3847171801700497976406e06d2a1213fb4bb59e27c1cc42b365308af5a92a8300f875629a0107dc1c9161f8eef3ad43241fe94a48d829b29f3434789d42cbeb9bef87cb2f81f1d09e24f798275682776f4913151cc39ffc4d6aa40411e1fbd32b43fa74e03a77831abef0c0f812284370dd73fcca909f1d1eca3230130a6916772de004192e50042b286a96f39947a67f15dafad4aba91804320f7e05254f96bfe6dddb95bd1da97f21a93bf1afb8ce13f1de3fcb2ce661d4d735eab43ad36593edacdc340c3cf5526c3d32933beec823a2778808b6b83ed81f7b6668ec7a7d0fccdf238afee31d8747eebe8d5b41dc2bd30d880a9d0716b41a934d3b6a27c9608b2da0c4ed92b9915339fdaef8ef5144fb7bd41b1bb5d1a8b25f488f93c47c0a51ea4cf4de899c74945c4fddfce0881fcb8fb2a2094f89ca38b30b3a246bc4fcc0a37ad9d021a42c338addf2f9165f145aa9f30a3310f771d00c312457cf32c45932ed7ce1edc4666139634ab78d12c6f0b03387a2278bbad4d507a159f5e941bf2344da3638da433dd66a6e90dfe3b17a12d4b238ca42773c6275b2065ef50a0e4afe5d8fe37fc60fe58b4f38761ef7cd5827f06eb3704a9741b91b98cb90634e1a30cc189d7f1bfb57c97ddb96ffabcf9b663a1e36ec3d0836fffbd399e1d639b442f8b2adfba2626450a5310a1c84f42ab08ecc3eee72e92f14eb897bf7008f29761559b46974d0188e582cecd0417ff3a629f14ad8b817b2753f13a0f0d7944e5a1e035684fb551eac6b1011a14c9f8288732c748711315db2a67ef5698d6390e361bef15075c7ae7561b170313281d437359b3df141547aa1e604692af6bbceb0e3676d331b6d1bc1df5c299b8587ce7368729b18477769bec5d4b884fee392123c76a5d4dedef4ce51fa222f9be0f367bd7778f4b5df1d5e258e12d1c44faf1a7cd98f5cb9d685859acec9eee14778eef27f71df52f143d0002f62fda2128c48e8e880ebb3cb74c5b5e6396abd82085c60df12f69588f26a1b5e140e2d9bc3b4848a126214979f3a99438a1907a13488eea1caa22db1e06985e4c7c9f352dfb06dac65ae101c1520c4a4479ff8decee492fbcb8930babadcb92b9270bdfe4c37a266e6ad34e55a45a11ddbc4a34f1c5710d6322ea466bb7788d58d216e2bb31d77563a0bceffefeb0df85b113c8afbab8068d5a57b0914e9df998ad0bc50229924d854df548b52299ad565ae26728fe9cc993905f56aa5ab5593d823fd7fc4b341f20f0fac93c737abb66cd8408e96341b7c00701d91ea3ee2cdbf1ef04f5bcd37df1b952840ad10574bdd373c7e42a94d9dc0f12cc617b9dd6a019e482434e5d0e033d8408c649e878d4239fe524613fb10643bc088d3262fabdf7b29d0c6e282a9a956246be350fafb41d588407085ed5edc99ae771d5130f838842742af8218d22190b2034d2fa20c03cf974b7ac02f211cb04561c530b99034bade030f8b0d206ad784987428a8502b3e4059548645e94323a57be556294affa1fe67921509bec1e49108c760b892e2022588dc41d9b644acf4fe14db6489ef5ba06601010534c25a8593976d16cc69dc50bff65c8a6fa11ce70700814d3bd63d4274ccaded132e245b040700bb774524b37ff837dfc67910410a467db6911fea4be16207f31cdc8647bc075bf052fee1a0c486916865d06cf9a2f29324b076d3f30b2f2600aac0dc6e4887e716070597160697ad686bf87b5fba3b3a734012411d8074729a90e5431ab547251041db7b6c1d388459fb9e6f3541ca18df1dcd0625275aed5f6cab9660240cb8200ad729db902191f19ab17481f5d34d5f14f9b5d2139463a8b00cc07bca277b26e30af23ce65f706a2017005086f28f86cc6e48da140de900684b57bb34a68e99a353f75322f080c6d450ff9671724d55706ce564f54939ee4f5454b90a1ee97fbc19d83a6f5a940cc0ce030540604088a94d27caace7a8b3710ce602314ca1af2900898c6ecbed742f41c29b168b9fe64898b340769d7f9e19d2381020f5546611b25c75379cf260d8b2478f5ca5e6e58b33bb41d36dab69cd3534e84bdc8d788a6ead4672e4ebcf49b0c64713e3dd8afe2af306dac9e99f677ba51f16f1d6f0d01862cfb3c49ffe9b10f2d504f429e2df60cbbab7ea60637590c6bfe2521164bc45097467d0a87b206dd85c77edea2221992f4e1085f272256301f0e6946ada914ee81828278f741cebcd495ef05726f66e24c303d8d21a13864b6c43e7fd7ad891e6994a99fb47ed01e9ded895e776d2377b3a02b51962e8651302e3a11449594ff430efc5785afaffa9b68e4ad889b476f7eb39fa57c46798529b797918a0b3e78d812f233d820694b251f79775fc9ecb0ee11e73c59c4603e2db52773432d85ace4c1cb86725d2c6c736350c69de457d52c276489237332347db26b9bca35f57846b382fe81b0ada2c4bf8dd19b95eb7a1121320d20eed7e0bda5e24af54c012ee730f12a9b00887bcbf6584a86800ba644431bbc7accb1158bedc50e48ce1b11190314942d643e28a69a28586d1eb804804a38de1534c0cdc10e46f03e127c8bf35e5bdee5e7aa0b2bc3c1107aaece26c788caab2206950068280741098f271ca420b9832ddb872bb8d265cc71b47deb71de437e957e373621ddb80b5f25e0c131b5b94a6a4145cf708e620f029331f1207c5536e2867cb7b73ee0961cb84a6a3ee3aba5487db67e8e99e08ffd50f0cb1919f1833a5dd6e5ff70876211950962e31d1af3aa9fd359a644d9fccb49fbdbfb38556a6a68a278fd1552e8c15f82da7c21d0a4552f54628884b774255e077222152e0e35927e0ec6d98aa7c32c9d8340fddf094f140b0092265ee0ae7ed735355008ea0b38240a7dda4b9faca1a6d3f9be1242c906f12a0a564c3466fb09cf2e4fdecb3101b78dac6363ffe013088c6bae99f4d2b041243eff4c1e9f20c2adf99ffcf4d55ca2fbfd9ae1301d7c34fb2203d2c995d416c350b76ba66e009ce2c822c7bfba86e7f32adef47c1736051531eee9ca309c5bbdfea0bb5b2d79b7d5a23915e16cc07165dddad40fb91782b274a3f54d78b142504ca7435306829b979b7b71cc4780e26d43cc18b83d866e5960c2b8a5010a7c74d288cfffd0350cbc020e6eb02230f00387e0551e925f483eeaf790db1a1a633ee0e1c2db8308cf018e1bc74cebcfb57d1a1f15417f64d6e0851549062f9fdda42d3f50e970b0dc8c95283a39ceaf5338b6b999a10e332abbf701d77b4837a4976ecea0e9840477d2fa5e4835b6fb3b6fdd76f1166a5c735083b14d5f7bdfa47b4c3935ff95cb8e19ae9dbcb9e3aa91ffc92049416ba04ea9deeac997f55dd76ef156e568b12922793e3ec04d9647e9a2b016c5b3748a11b5e6ddb7f524f9af8e8e5236619ad03a855f6a080088be00000000154022040100000000000001080022eb000000002903a904020000000000000900081e020800655800000000f1522524c89b57d29527f0e7e203bb0b43f0b24349413fdec9665acfcf68d935e813c7e84a2fda04201d728132ed6bc19e0d5a9f2cd60c821827986fe06033f6441a7439b3d41d5029af96be80faf8300d9a206d62539cc283cf08536bac010000000100000001f67c26b5b830ae7db0045cc8e1b4d54e6173aa0ef6abff6f1d6488f5add73c475039a8b920a80be00234f4ff3fd2ce7ecce1f912da248ec9a9d226f252a6152b377bc92b600b169d033a4cf7881d2f63a752fb4d2f08de25eca7d1cbe390bb5e9f74931b67dbac3b4ccb44331cf4a7acb3d14c073ecb929617ce1dca1d2fb6c0254eea7ea4cbe66d77e6e3305e52920760ed6b6ce5362e00df0f4c66d0aa683ca9dead71fd6410c243f596bc9a3d81446d215399798c5daef0003816941327f6b391e0640757a84ed8fe36fdd524285859a4483ac9c6109c10c36ee16512d9a079ef8ff20b6b8307261862586553489d11399418ad5ccb51b964e12c79059f344652f554b23f085c03a3e18150bfc6a121eacd1c2da018eebdc4c9e88e9c4ea80cb5153a5e12d0a6392d9c937d89236c24e924d202aad7379d28252005034583e622ac8a34cc34c0211d55adc47eecf54c25e49bc495e14c012261a2dc2cdd7501d124778245cd8335b15637aff4aed97c1b69f53f8576230b741457d7ee971cc412133c"], 0xfce) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058192200000000a09058202200000000009050302", @ANYRES8=0x0], 0x0) 0s ago: executing program 0 (id=704): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000c40)=ANY=[@ANYBLOB="20068300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20000084) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) finit_module(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) kernel console output (not intermixed with test programs): t} for writing: No such file or directory [ 176.227268][ T7404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.879723][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 177.018359][ T5848] usb 3-1: USB disconnect, device number 35 [ 177.054513][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.065808][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.076079][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 177.086141][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.097549][ T10] usb 2-1: config 0 descriptor?? [ 177.099567][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 177.273388][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 177.281435][ T24] usb 4-1: can't read configurations, error -61 [ 177.419348][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 177.449868][ T7388] i2c i2c-1: failure reading data [ 177.473925][ T5848] usb 1-1: USB disconnect, device number 48 [ 177.535644][ T10] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 177.544215][ T10] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 177.553902][ T10] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 177.563997][ T10] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 177.571537][ T10] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 177.582115][ T10] elan 0003:04F3:0755.000E: failed to start in urb: -90 [ 177.590049][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 177.601375][ T10] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 177.617319][ T24] usb 4-1: can't read configurations, error -61 [ 177.643896][ T24] usb usb4-port1: attempt power cycle [ 177.723485][ T5933] usb 2-1: USB disconnect, device number 46 [ 177.783927][ T7421] fido_id[7421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 178.009521][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 178.042347][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 178.059321][ T24] usb 4-1: can't read configurations, error -61 [ 178.149632][ T808] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 178.192516][ T7427] gre0 speed is unknown, defaulting to 1000 [ 178.199819][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 178.208967][ T7427] gre0 speed is unknown, defaulting to 1000 [ 178.218930][ T7427] gre0 speed is unknown, defaulting to 1000 [ 178.228659][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 178.239052][ T24] usb 4-1: can't read configurations, error -61 [ 178.246251][ T24] usb usb4-port1: unable to enumerate USB device [ 178.309279][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 178.321609][ T808] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 178.346559][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.378053][ T808] usb 1-1: config 0 has no interface number 0 [ 178.386169][ T808] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 178.416105][ T7433] autofs: Bad value for 'fd' [ 178.419577][ T808] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 178.439437][ T808] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 178.459167][ T808] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.474373][ T808] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 178.484727][ T808] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 178.506289][ T808] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 178.527314][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.538595][ T808] usb 1-1: Product: syz [ 178.549307][ T808] usb 1-1: Manufacturer: syz [ 178.559112][ T808] usb 1-1: SerialNumber: syz [ 178.575447][ T808] usb 1-1: config 0 descriptor?? [ 178.590659][ T7425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.606714][ T7425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.820485][ T5848] gre0 speed is unknown, defaulting to 1000 [ 178.832027][ T7427] infiniband syz0: set active [ 178.836204][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.844958][ T7427] infiniband syz0: added gre0 [ 178.856964][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.873120][ T808] usb 1-1: NFC: intf ffff8880520d4000 id ffffffff8f3fd6e0 [ 178.910439][ T808] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 178.929950][ T808] usb 1-1: USB disconnect, device number 49 [ 178.966653][ T808] usb 1-1: NFC: intf ffff8880520d4000 [ 179.025699][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 179.038493][ T7427] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 179.067943][ T30] audit: type=1326 audit(1775904945.457:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.077100][ T7427] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 179.109326][ T7427] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 179.150300][ T30] audit: type=1326 audit(1775904945.457:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.175817][ T30] audit: type=1326 audit(1775904945.457:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.199253][ T30] audit: type=1326 audit(1775904945.457:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.227550][ T30] audit: type=1326 audit(1775904945.457:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.250791][ T30] audit: type=1326 audit(1775904945.457:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa63d5d04e code=0x7ffc0000 [ 179.278286][ T30] audit: type=1326 audit(1775904945.467:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.302332][ T30] audit: type=1326 audit(1775904945.467:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.315592][ T7427] RDS/IB: syz0: added [ 179.329745][ T30] audit: type=1326 audit(1775904945.467:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.334271][ T7427] smc: adding ib device syz0 with port count 1 [ 179.358956][ T7427] smc: ib device syz0 port 1 has no pnetid [ 179.364548][ T30] audit: type=1326 audit(1775904945.467:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa63d9c819 code=0x7ffc0000 [ 179.381241][ T808] gre0 speed is unknown, defaulting to 1000 [ 179.404858][ T7427] gre0 speed is unknown, defaulting to 1000 [ 179.799310][ T808] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 179.848524][ T7427] gre0 speed is unknown, defaulting to 1000 [ 179.981292][ T808] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 180.001315][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.031738][ T808] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 180.048867][ T808] usb 1-1: config 1 has no interface number 1 [ 180.062526][ T808] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.093755][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 180.103243][ T808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.119265][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.130776][ T808] usb 1-1: Product: syz [ 180.139401][ T808] usb 1-1: Manufacturer: syz [ 180.149451][ T808] usb 1-1: SerialNumber: syz [ 180.212577][ T7461] 9pnet_fd: p9_fd_create_unix (7461): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.246770][ T7460] 9pnet_fd: p9_fd_create_unix (7460): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.300296][ T5848] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 180.398893][ T7464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 180.414204][ T7427] gre0 speed is unknown, defaulting to 1000 [ 180.465633][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.489358][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.519326][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.533286][ T5848] usb 4-1: config 0 descriptor?? [ 180.559081][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 180.784774][ T7427] gre0 speed is unknown, defaulting to 1000 [ 180.899366][ T5934] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 180.955056][ T5848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.964499][ T5848] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.972638][ T5848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 180.980263][ T5848] pwc: recv_control_msg error -32 req 04 val 1000 [ 180.988150][ T5848] pwc: recv_control_msg error -32 req 04 val 1300 [ 181.000991][ T5848] pwc: recv_control_msg error -32 req 04 val 1400 [ 181.073277][ T5934] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 181.081863][ T5934] usb 2-1: config 1 has no interface number 0 [ 181.088140][ T5934] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.098623][ T5934] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 181.110871][ T5934] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 181.128411][ T5934] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 181.142666][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.151355][ T5934] usb 2-1: Product: syz [ 181.155717][ T5934] usb 2-1: Manufacturer: syz [ 181.161628][ T5934] usb 2-1: SerialNumber: syz [ 181.183171][ T5934] usb 2-1: Error in usbnet_get_endpoints (-22) [ 181.213667][ T7454] 9p: Bad value for 'rfdno' [ 181.230047][ T5848] pwc: recv_control_msg error -71 req 02 val 2100 [ 181.237921][ T5848] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.253338][ T5848] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.262014][ T5848] pwc: recv_control_msg error -71 req 02 val 2400 [ 181.271180][ T5848] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.278423][ T5848] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.299848][ T5848] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.316323][ T5848] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.331043][ T5848] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.343556][ T5848] pwc: Registered as video103. [ 181.357160][ T5848] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 181.373859][ T5848] usb 4-1: USB disconnect, device number 49 [ 181.398536][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 181.446215][ T7467] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 181.446215][ T7467] program syz.1.425 not setting count and/or reply_len properly [ 181.514771][ T5933] usb 2-1: USB disconnect, device number 47 [ 182.009387][ T5933] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 182.147968][ T7486] gfs2: path_lookup on c::: returned error -2 [ 182.184294][ T5933] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 182.194683][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.206163][ T29] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 182.213948][ T5933] usb 3-1: Product: syz [ 182.218250][ T5933] usb 3-1: Manufacturer: syz [ 182.223248][ T5933] usb 3-1: SerialNumber: syz [ 182.237598][ T5933] usb 3-1: config 0 descriptor?? [ 182.253197][ T5933] usb 3-1: selecting invalid altsetting 1 [ 182.259088][ T5933] technisat-usb2: could not set alternate setting to 0 [ 182.404971][ T29] usb 4-1: config 1 interface 0 has no altsetting 0 [ 182.414619][ T29] usb 4-1: string descriptor 0 read error: -22 [ 182.421226][ T29] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 182.430447][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.460321][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.469957][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.479108][ T5933] technisat-usb2: firmware version: 255.130 [ 182.486322][ T5933] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 182.532644][ T7496] : entered promiscuous mode [ 182.570929][ T808] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.572016][ T7496] sp0: Synchronizing with TNC [ 182.592030][ T808] usb 1-1: MIDIStreaming interface descriptor not found [ 182.719112][ T5933] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 182.771209][ T808] usb 1-1: USB disconnect, device number 50 [ 182.781329][ T5933] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 182.817442][ T5933] usb 3-1: USB disconnect, device number 36 [ 182.858824][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.883818][ T29] steelseries 0003:1038:1410.000F: unknown main item tag 0x6 [ 182.898173][ T29] steelseries 0003:1038:1410.000F: item 0 0 0 8 parsing failed [ 182.926299][ T29] steelseries 0003:1038:1410.000F: parse failed [ 182.943058][ T29] steelseries 0003:1038:1410.000F: probe with driver steelseries failed with error -22 [ 183.079792][ T5933] usb 4-1: USB disconnect, device number 50 [ 183.172185][ T7491] [U] è [ 183.630100][ T5848] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 183.806617][ T5848] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.817651][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.826375][ T5848] usb 2-1: Product: syz [ 183.830765][ T5848] usb 2-1: Manufacturer: syz [ 183.835434][ T5848] usb 2-1: SerialNumber: syz [ 183.858738][ T5848] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.886262][ T5934] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.114319][ T5933] usb 2-1: USB disconnect, device number 48 [ 184.199536][ T5848] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 184.216247][ T7533] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 184.359504][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 184.366668][ T5848] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.376822][ T5848] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 184.390004][ T5848] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 184.399909][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.409135][ T5848] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 184.423040][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.431436][ T5848] usb 1-1: Product: syz [ 184.440964][ T5848] usb 1-1: Manufacturer: syz [ 184.445813][ T5848] usb 1-1: SerialNumber: syz [ 184.454141][ T5848] usb 1-1: config 0 descriptor?? [ 184.519324][ T5845] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 184.679297][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 184.693087][ T5845] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 184.702626][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 184.711353][ T5845] usb 3-1: Product: syz [ 184.715687][ T5845] usb 3-1: Manufacturer: syz [ 184.721184][ T5845] usb 3-1: SerialNumber: syz [ 184.728341][ T5845] usb 3-1: config 0 descriptor?? [ 184.740004][ T5845] usbtest 3-1:0.0: FX2 device [ 184.748118][ T5845] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 184.873008][ T29] usb 1-1: USB disconnect, device number 51 [ 184.944864][ T5845] usb 3-1: USB disconnect, device number 37 [ 184.956869][ T7553] tipc: MTU too low for tipc bearer [ 184.962405][ T5934] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 184.962589][ T5934] ath9k_htc: Failed to initialize the device [ 184.977800][ T5933] usb 2-1: ath9k_htc: USB layer deinitialized [ 185.279580][ T5933] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 185.439614][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 185.453345][ T5933] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 185.472711][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 185.484816][ T5933] usb 2-1: Product: syz [ 185.493796][ T5933] usb 2-1: Manufacturer: syz [ 185.503663][ T5933] usb 2-1: SerialNumber: syz [ 185.521363][ T5933] usb 2-1: config 0 descriptor?? [ 185.624626][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 185.737396][ T5933] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 185.753494][ T5933] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 185.941700][ T5933] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 185.949703][ T5933] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 185.962260][ T5933] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 186.245316][ T5933] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 186.264885][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.271675][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.278337][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.285350][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.292027][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.299157][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.305859][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.312566][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.319763][ T5933] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 186.328252][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.337190][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.342342][ T5848] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 186.344437][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.358219][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.364885][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.371573][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.379578][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.386296][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.393216][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.399986][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 186.407059][ T5933] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 186.425277][ T5933] usb 2-1: USB disconnect, device number 49 [ 186.521712][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 186.532971][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.544958][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.557380][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.570619][ T5848] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 186.579963][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.588025][ T5848] usb 4-1: Product: syz [ 186.592895][ T5848] usb 4-1: Manufacturer: syz [ 186.597661][ T5848] usb 4-1: SerialNumber: syz [ 186.613159][ T5848] usb 4-1: config 0 descriptor?? [ 186.627567][ T5848] pegasus_notetaker 4-1:0.0: packet size is too small (0) [ 186.637854][ T5848] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 186.899397][ T5848] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 187.049450][ T5933] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 187.069332][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 187.076365][ T5848] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.087754][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.094495][ T5848] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 187.103914][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.116284][ T5848] usb 1-1: config 0 descriptor?? [ 187.199373][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 187.207613][ T5933] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.221635][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.228368][ T5933] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 187.237915][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.251995][ T5933] usb 2-1: config 0 descriptor?? [ 187.921707][ T5848] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 188.113709][ T5933] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 188.126685][ T5933] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 188.134774][ T5933] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 188.142877][ T5933] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 188.151035][ T5933] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 188.170511][ T5933] corsair-cpro 0003:1B1C:0C10.0011: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 188.297691][ T808] usb 4-1: USB disconnect, device number 51 [ 188.342201][ T5848] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -5 [ 188.516049][ T29] usb 1-1: USB disconnect, device number 52 [ 188.559078][ T5933] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -110 [ 188.591505][ T5933] usb 2-1: USB disconnect, device number 50 [ 188.739333][ T808] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 188.905933][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 188.928581][ T808] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 188.943699][ T808] usb 4-1: can't read configurations, error -61 [ 189.092764][ T808] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 189.191607][ T7608] tipc: Started in network mode [ 189.198695][ T7608] tipc: Node identity , cluster identity 4711 [ 189.207120][ T7608] tipc: Failed to obtain node identity [ 189.215579][ T7608] tipc: Enabling of bearer rejected, failed to enable media [ 189.239587][ T5845] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 189.250640][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 189.261233][ T808] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 189.269573][ T808] usb 4-1: can't read configurations, error -61 [ 189.277890][ T808] usb usb4-port1: attempt power cycle [ 189.389662][ T5845] usb 2-1: device descriptor read/64, error -71 [ 189.449354][ T5848] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 189.611781][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 189.623023][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 189.629645][ T808] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 189.635108][ T5848] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 189.651496][ T5845] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 189.661708][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.662190][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 189.679797][ T5848] usb 1-1: config 0 descriptor?? [ 189.686140][ T7610] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 189.693925][ T808] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 189.701723][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 189.711321][ T808] usb 4-1: can't read configurations, error -61 [ 189.714964][ T5848] gspca_main: spca561-2.14.0 probing abcd:cdee [ 189.799416][ T5845] usb 2-1: device descriptor read/64, error -71 [ 189.842447][ T808] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 189.859319][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 189.867075][ T29] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.878642][ T29] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.888903][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.896779][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 189.909461][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.912867][ T5845] usb usb2-port1: attempt power cycle [ 189.918435][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 189.935555][ T29] usb 3-1: config 0 descriptor?? [ 189.945429][ T808] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 189.958583][ T5848] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 189.963285][ T808] usb 4-1: can't read configurations, error -61 [ 189.977674][ T5848] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.988634][ T5848] usb 1-1: MIDIStreaming interface descriptor not found [ 189.997680][ T808] usb usb4-port1: unable to enumerate USB device [ 190.111162][ T5848] usb 1-1: USB disconnect, device number 53 [ 190.289570][ T5845] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 190.310231][ T5845] usb 2-1: device descriptor read/8, error -71 [ 190.382887][ T29] mcp2221 0003:04D8:00DD.0012: item fetching failed at offset 3/5 [ 190.392543][ T29] mcp2221 0003:04D8:00DD.0012: can't parse reports [ 190.399376][ T29] mcp2221 0003:04D8:00DD.0012: probe with driver mcp2221 failed with error -22 [ 190.549404][ T5845] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 190.570673][ T5845] usb 2-1: device descriptor read/8, error -71 [ 190.581815][ T29] usb 3-1: USB disconnect, device number 38 [ 190.679808][ T5845] usb usb2-port1: unable to enumerate USB device [ 190.803099][ T7624] netlink: 9 bytes leftover after parsing attributes in process `syz.0.472'. [ 190.813873][ T7624] gretap0: entered promiscuous mode [ 191.110157][ T5845] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 191.147179][ T7629] netlink: 220 bytes leftover after parsing attributes in process `syz.2.474'. [ 191.156859][ T7629] netlink: 'syz.2.474': attribute type 2 has an invalid length. [ 191.279732][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 191.293198][ T5845] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.302995][ T5845] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 191.316644][ T7633] 9p: Bad value for 'rfdno' [ 191.325810][ T5845] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 191.346442][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.356093][ T5845] usb 1-1: Product: syz [ 191.361022][ T5845] usb 1-1: SerialNumber: syz [ 191.727541][ T7650] misc userio: The device must be registered before sending interrupts [ 191.810295][ T7652] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 191.837768][ T7652] dvmrp6: entered allmulticast mode [ 191.953327][ T30] kauditd_printk_skb: 1857 callbacks suppressed [ 191.953347][ T30] audit: type=1326 audit(1775904958.347:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae1d9c819 code=0x7fc00000 [ 192.026750][ T7656] netlink: 'syz.2.483': attribute type 12 has an invalid length. [ 192.034972][ T5845] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 192.035011][ T5845] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 192.060099][ T30] audit: type=1326 audit(1775904958.347:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae1d9c819 code=0x7fc00000 [ 192.118435][ T5845] usb 1-1: USB disconnect, device number 54 [ 192.278133][ T7668] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.485'. [ 192.599396][ T5938] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 192.739533][ T808] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 192.759443][ T29] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 192.767333][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 192.775287][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.787974][ T5938] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 192.797222][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.805803][ T5938] usb 3-1: Product: syz [ 192.810765][ T5938] usb 3-1: Manufacturer: syz [ 192.815494][ T5938] usb 3-1: SerialNumber: syz [ 192.822881][ T5938] usb 3-1: config 0 descriptor?? [ 192.832301][ T5938] usb 3-1: no audio or video endpoints found [ 192.892090][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.903490][ T808] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 192.913211][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.921573][ T808] usb 2-1: Product: syz [ 192.926082][ T808] usb 2-1: Manufacturer: syz [ 192.931517][ T808] usb 2-1: SerialNumber: syz [ 192.945060][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.953445][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 192.968169][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.978507][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 192.990679][ T5933] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 193.001410][ T29] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 193.011908][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.019995][ T29] usb 4-1: Product: syz [ 193.024887][ T29] usb 4-1: Manufacturer: syz [ 193.029776][ T29] usb 4-1: SerialNumber: syz [ 193.105873][ T7697] Bluetooth: hci1: service_discovery: too big uuid_count value 16387 [ 193.115234][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.127445][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.170055][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 193.185019][ T5933] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 193.215245][ T5933] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 193.237212][ T5848] usb 3-1: USB disconnect, device number 39 [ 193.240714][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.262072][ T5933] usb 1-1: Product: syz [ 193.272225][ T5933] usb 1-1: Manufacturer: syz [ 193.284960][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.289574][ T5933] usb 1-1: SerialNumber: syz [ 193.308888][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.335713][ T5933] usb 1-1: config 0 descriptor?? [ 193.352921][ T5933] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 193.370909][ T5933] usb 1-1: Detected FT232R [ 193.531729][ T808] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 193.541634][ T29] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 193.551925][ T29] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 193.568696][ T808] usb 2-1: USB disconnect, device number 55 [ 193.575116][ T29] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 193.585913][ T29] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 193.628235][ T6574] udevd[6574]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.816002][ T29] usb 4-1: USB disconnect, device number 56 [ 193.895495][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.061033][ T5933] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 194.097490][ T7712] netlink: 'syz.3.496': attribute type 30 has an invalid length. [ 194.269847][ T994] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 194.324342][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329842][ T5848] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 194.337866][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419369][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 194.426483][ T994] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.438533][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.439776][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 194.456845][ T994] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.466822][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.476350][ T994] usb 2-1: Product: syz [ 194.481879][ T994] usb 2-1: Manufacturer: syz [ 194.486529][ T994] usb 2-1: SerialNumber: syz [ 194.494155][ T994] usb 2-1: config 0 descriptor?? [ 194.499293][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 194.510547][ T994] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.521595][ T5848] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.531650][ T994] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 194.538815][ T5848] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 194.552545][ T5848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 194.562247][ T5848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.571699][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.580089][ T5848] usb 3-1: Product: syz [ 194.584422][ T5848] usb 3-1: Manufacturer: syz [ 194.589167][ T5848] usb 3-1: SerialNumber: syz [ 194.598800][ T7710] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.606817][ T7710] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.614488][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 194.624567][ T29] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.633564][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.644228][ T29] usb 4-1: config 0 has no interface number 0 [ 194.650672][ T29] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.666431][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.677124][ T29] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.686455][ T29] usb 4-1: Product: syz [ 194.691219][ T29] usb 4-1: SerialNumber: syz [ 194.703904][ T29] usb 4-1: config 0 descriptor?? [ 194.716667][ T29] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 194.827781][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.838982][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.864352][ T5848] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 194.882578][ T5848] usb 3-1: USB disconnect, device number 40 [ 194.912413][ T29] usb 4-1: USB disconnect, device number 57 [ 195.138167][ T994] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 195.150485][ T994] em28xx 2-1:0.0: Config register raw data: 0x72 [ 195.157340][ T994] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 195.163694][ T994] em28xx 2-1:0.0: No AC97 audio processor [ 195.569911][ T994] usb 2-1: USB disconnect, device number 56 [ 195.731406][ T29] usb 1-1: USB disconnect, device number 55 [ 195.779260][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 195.818822][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.863956][ T29] ftdi_sio 1-1:0.0: device disconnected [ 196.231707][ T29] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 196.412585][ T29] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 196.432444][ T29] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 196.481112][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.530860][ T29] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 197.424088][ T994] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 197.464726][ T7762] trusted_key: syz.1.510 sent an empty control message without MSG_MORE. [ 197.590001][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 197.602535][ T994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.639332][ T994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.658811][ T994] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 197.670375][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.678949][ T994] usb 3-1: Product: syz [ 197.685545][ T994] usb 3-1: Manufacturer: syz [ 197.691997][ T994] usb 3-1: SerialNumber: syz [ 197.729374][ T5845] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 197.891776][ T5845] usb 4-1: device descriptor read/64, error -71 [ 197.924616][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.934793][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.970859][ T994] snd-ua101 3-1:1.1: sample format descriptor not found [ 197.983333][ T994] snd-ua101 3-1:1.0: invalid bNumEndpoints [ 198.006980][ T994] usb 3-1: USB disconnect, device number 41 [ 198.089414][ T5933] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 198.110758][ T29] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 198.121553][ T29] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 198.129268][ T29] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 198.137754][ T29] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 198.139620][ T5845] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 198.254047][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.276348][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.287361][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.299676][ T5845] usb 4-1: device descriptor read/64, error -71 [ 198.301381][ T5933] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.317461][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.330632][ T5933] usb 2-1: config 0 descriptor?? [ 198.430919][ T5845] usb usb4-port1: attempt power cycle [ 198.646839][ T7779] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 198.674904][ T7779] netlink: 'syz.2.515': attribute type 2 has an invalid length. [ 198.685827][ T7779] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 198.741588][ T5933] usbhid 2-1:0.0: can't add hid device: -32 [ 198.741677][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 198.775363][ T5845] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 198.791811][ T5845] usb 4-1: device descriptor read/8, error -71 [ 198.847119][ T7729] syz.0.503 (7729): drop_caches: 2 [ 198.976048][ T5933] usb 1-1: USB disconnect, device number 56 [ 199.031448][ T5845] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 199.061739][ T5845] usb 4-1: device descriptor read/8, error -71 [ 199.101440][ T7787] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7787] [ 199.122990][ T7787] netlink: 256 bytes leftover after parsing attributes in process `syz.2.518'. [ 199.191176][ T5845] usb usb4-port1: unable to enumerate USB device [ 199.227095][ T7792] fuseblk: Bad value for 'group_id' [ 199.232726][ T7792] fuseblk: Bad value for 'group_id' [ 199.321582][ T7796] binder: 7795:7796 ioctl c0306201 2000000001c0 returned -14 [ 199.419319][ T5933] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 199.463831][ T7800] overlay: filesystem on ./file0 not supported as upperdir [ 199.541982][ T7802] syzkaller1: entered promiscuous mode [ 199.547554][ T7802] syzkaller1: entered allmulticast mode [ 199.582364][ T5933] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 199.593605][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.604106][ T5933] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 199.618746][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.628516][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.638828][ T5933] usb 1-1: SerialNumber: syz [ 199.809535][ T5845] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 199.852471][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.863449][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.891911][ T5933] usb 1-1: USB disconnect, device number 57 [ 199.959351][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 199.964863][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.976317][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.987531][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.997352][ T5845] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.007184][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.022875][ T5845] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.032871][ T5845] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.040978][ T5845] usb 3-1: Manufacturer: syz [ 200.049431][ T5845] usb 3-1: config 0 descriptor?? [ 200.309303][ T5845] rc_core: IR keymap rc-hauppauge not found [ 200.315247][ T5845] Registered IR keymap rc-empty [ 200.324236][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.349499][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.371620][ T5845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 200.385692][ T5845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 200.403391][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.429435][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.459449][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.489673][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.529495][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.569383][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.589390][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.609474][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.650384][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.679426][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.700014][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.709522][ T5937] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 200.745741][ T5845] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 200.769780][ T5845] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.829066][ T5933] usb 3-1: USB disconnect, device number 42 [ 200.866184][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.879685][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 200.898414][ T5845] usb 2-1: USB disconnect, device number 57 [ 200.927778][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 200.956581][ T5937] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 200.975979][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.986283][ T5937] usb 1-1: Product: syz [ 200.995994][ T7819] exfat: Deprecated parameter 'debug' [ 200.998459][ T5937] usb 1-1: Manufacturer: syz [ 201.013348][ T5937] usb 1-1: SerialNumber: syz [ 201.033928][ T7819] /dev/nullb0: Can't open blockdev [ 201.041822][ T5937] usb 1-1: config 0 descriptor?? [ 201.102324][ T5937] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 201.244671][ T7829] tmpfs: Unknown parameter 'grpquota../file0' [ 201.628031][ T141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.808965][ T141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.957407][ T141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.047606][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.058867][ T141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.071601][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.083113][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.094958][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.103169][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.149816][ T5848] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 202.172078][ T5938] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 202.185013][ T7836] gre0 speed is unknown, defaulting to 1000 [ 202.273727][ T5937] gspca_zc3xx: reg_w_i err -71 [ 202.315479][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.350604][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.363917][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.378987][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.395957][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.408901][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 202.421117][ T5848] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.432911][ T141] bridge_slave_1: left allmulticast mode [ 202.435886][ T5938] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 202.438867][ T141] bridge_slave_1: left promiscuous mode [ 202.455582][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.469787][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.469787][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.489386][ T5938] usb 4-1: Product: syz [ 202.493750][ T5938] usb 4-1: Manufacturer: syz [ 202.505663][ T5938] usb 4-1: SerialNumber: syz [ 202.512568][ T5848] usb 3-1: config 0 descriptor?? [ 202.526611][ T5938] usb 4-1: config 0 descriptor?? [ 202.534146][ T141] bridge_slave_0: left allmulticast mode [ 202.540140][ T141] bridge_slave_0: left promiscuous mode [ 202.546269][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.552542][ T7835] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 202.566024][ T7835] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 202.786461][ T7835] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 202.794231][ T7835] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 202.872104][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.886494][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.897949][ T141] bond0 (unregistering): Released all slaves [ 202.909625][ T5937] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 202.920779][ T5937] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 202.949714][ T5937] usb 1-1: USB disconnect, device number 58 [ 203.054557][ T5848] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.177614][ T141] : left promiscuous mode [ 203.469471][ T5937] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 203.633042][ T5937] usb 1-1: device descriptor read/64, error -71 [ 203.687060][ T5938] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 203.846883][ T5938] dm9601 4-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 9a:26:63:1b:bb:b3 [ 203.890412][ T5937] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 203.916467][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 203.932043][ T5938] usb 4-1: USB disconnect, device number 62 [ 203.968064][ T5938] dm9601 4-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 204.049386][ T5937] usb 1-1: device descriptor read/64, error -71 [ 204.160252][ T5847] Bluetooth: hci1: command tx timeout [ 204.173026][ T5937] usb usb1-port1: attempt power cycle [ 204.264765][ T7864] netlink: 68 bytes leftover after parsing attributes in process `syz.3.539'. [ 204.286078][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.301119][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.322153][ T7836] bridge_slave_0: entered allmulticast mode [ 204.332591][ T7836] bridge_slave_0: entered promiscuous mode [ 204.380255][ T808] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 204.393820][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.416792][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.425502][ T7836] bridge_slave_1: entered allmulticast mode [ 204.433702][ T7836] bridge_slave_1: entered promiscuous mode [ 204.493477][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.508931][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.549321][ T5937] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 204.557373][ T808] usb 3-1: device descriptor read/64, error -32 [ 204.600143][ T5937] usb 1-1: device descriptor read/8, error -71 [ 204.654272][ T7836] team0: Port device team_slave_0 added [ 204.677119][ T7836] team0: Port device team_slave_1 added [ 204.769296][ T29] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 204.798775][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.810879][ T808] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 204.832778][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.859430][ T5937] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 204.880227][ T5937] usb 1-1: device descriptor read/8, error -71 [ 204.917696][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.949301][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 204.961645][ T808] usb 3-1: device descriptor read/64, error -32 [ 204.974277][ T29] usb 4-1: config 8 has an invalid interface number: 234 but max is 0 [ 204.993433][ T29] usb 4-1: config 8 has no interface number 0 [ 205.000954][ T5937] usb usb1-port1: unable to enumerate USB device [ 205.002312][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.014669][ T29] usb 4-1: config 8 interface 234 altsetting 1 bulk endpoint 0xD has invalid maxpacket 16 [ 205.031721][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.040195][ T29] usb 4-1: config 8 interface 234 has no altsetting 0 [ 205.092302][ T29] usb 4-1: New USB device found, idVendor=1608, idProduct=021c, bcdDevice= 6.42 [ 205.095027][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.122466][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.144952][ T29] usb 4-1: Product: syz [ 205.152468][ T29] usb 4-1: Manufacturer: syz [ 205.159889][ T29] usb 4-1: SerialNumber: syz [ 205.180540][ T7869] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 205.235275][ T141] hsr_slave_0: left promiscuous mode [ 205.245860][ T141] hsr_slave_1: left promiscuous mode [ 205.249876][ T808] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 205.260463][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.279611][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.301045][ T808] usb 3-1: device descriptor read/8, error -32 [ 205.311388][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.330545][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.377977][ T141] veth1_macvtap: left promiscuous mode [ 205.395521][ T141] veth0_macvtap: left promiscuous mode [ 205.688921][ T141] team0 (unregistering): Port device team_slave_1 removed [ 205.709481][ T141] team0 (unregistering): Port device team_slave_0 removed [ 205.931629][ T7836] hsr_slave_0: entered promiscuous mode [ 205.938597][ T7836] hsr_slave_1: entered promiscuous mode [ 205.945870][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 205.952077][ T7836] Cannot create hsr debugfs directory [ 206.224388][ T5933] usb 3-1: USB disconnect, device number 43 [ 206.239268][ T5847] Bluetooth: hci1: command tx timeout [ 206.653867][ T7836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.718426][ T7836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.756711][ T7903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.544'. [ 206.888962][ T7836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.962004][ T7836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.156086][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.170592][ T5845] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 207.187768][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.220931][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.228174][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.263418][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.270669][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.341536][ T5845] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 207.375960][ T5845] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.389581][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.411415][ T5845] usb 1-1: Product: syz [ 207.427209][ T5845] usb 1-1: Manufacturer: syz [ 207.447968][ T5845] usb 1-1: SerialNumber: syz [ 207.480286][ T29] io_ti 4-1:8.234: required endpoints missing [ 207.508067][ T5845] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.548520][ T29] usb 4-1: USB disconnect, device number 63 [ 207.568557][ T5934] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.802295][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.848203][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.033757][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.061614][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.101408][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.136025][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.157541][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.186522][ T29] usb 1-1: USB disconnect, device number 63 [ 208.319578][ T5847] Bluetooth: hci1: command tx timeout [ 208.350253][ T5848] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 208.399852][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 208.512196][ T5848] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 208.529408][ T5848] usb 3-1: config 0 has no interface number 0 [ 208.548037][ T5848] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 208.578055][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.600199][ T5848] usb 3-1: Product: syz [ 208.608029][ T5848] usb 3-1: Manufacturer: syz [ 208.615272][ T5848] usb 3-1: SerialNumber: syz [ 208.625216][ T5848] usb 3-1: config 0 descriptor?? [ 208.636482][ T7836] veth0_vlan: entered promiscuous mode [ 208.672134][ T7836] veth1_vlan: entered promiscuous mode [ 208.717336][ T7836] veth0_macvtap: entered promiscuous mode [ 208.723506][ T994] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 208.732239][ T5934] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 208.747474][ T5934] ath9k_htc: Failed to initialize the device [ 208.756786][ T29] usb 1-1: ath9k_htc: USB layer deinitialized [ 208.756804][ T7836] veth1_macvtap: entered promiscuous mode [ 208.804961][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.830611][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.856950][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.867212][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.884919][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.894018][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 208.904523][ T7936] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 208.912734][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.924171][ T994] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 208.928172][ T5938] usb 3-1: USB disconnect, device number 44 [ 208.938863][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.968684][ T994] usb 4-1: config 0 has no interface number 0 [ 208.984889][ T994] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 208.999766][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.014921][ T994] usb 4-1: Product: syz [ 209.049491][ T994] usb 4-1: Manufacturer: syz [ 209.082479][ T994] usb 4-1: SerialNumber: syz [ 209.110421][ T994] usb 4-1: config 0 descriptor?? [ 209.120571][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 209.143997][ T994] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 209.163976][ T994] uvcvideo 4-1:0.105: No valid video chain found. [ 209.185942][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.208782][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.265949][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.282684][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.300462][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 209.318010][ T29] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 209.335837][ T5848] usb 4-1: USB disconnect, device number 64 [ 209.336923][ T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 209.381045][ T29] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 209.392477][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.427881][ T29] usb 1-1: config 0 descriptor?? [ 209.443309][ T29] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 209.829406][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.859299][ T994] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 209.983269][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.008891][ T5848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.021527][ T994] usb 3-1: Using ep0 maxpacket: 32 [ 210.039992][ T994] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.060199][ T5848] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.081587][ T994] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.091797][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.103454][ T5848] usb 5-1: SerialNumber: syz [ 210.110307][ T994] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.120355][ T994] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 210.133305][ T994] usb 3-1: Product: syz [ 210.143029][ T994] usb 3-1: Manufacturer: syz [ 210.165875][ T994] hub 3-1:4.0: USB hub found [ 210.355343][ T5848] usb 5-1: 0:2 : does not exist [ 210.366517][ T994] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 210.399425][ T5847] Bluetooth: hci1: command tx timeout [ 210.410104][ T994] usb 3-1: USB disconnect, device number 45 [ 210.448775][ T5848] usb 5-1: USB disconnect, device number 2 [ 210.496575][ T6574] udevd[6574]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.512740][ T5844] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 210.669506][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 210.683404][ T5844] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 210.693853][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.703424][ T5844] usb 4-1: Product: syz [ 210.707673][ T5844] usb 4-1: Manufacturer: syz [ 210.712785][ T5844] usb 4-1: SerialNumber: syz [ 210.721263][ T5844] usb 4-1: config 0 descriptor?? [ 210.730819][ T5844] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 210.859277][ T29] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 210.881452][ T29] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 210.896873][ T29] usb 1-1: USB disconnect, device number 64 [ 210.943246][ T29] mos7840 1-1:0.0: device disconnected [ 211.329731][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 211.403525][ T7989] vivid-000: disconnect [ 211.411636][ T7989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.556'. [ 211.425830][ T7989] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 211.438192][ T7989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.502679][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.515585][ T5933] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 211.542934][ T5933] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 211.552958][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.578216][ T5933] usb 5-1: config 0 descriptor?? [ 211.624813][ T7988] vivid-000: reconnect [ 211.972022][ T5844] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 211.983149][ T5844] usb 4-1: USB disconnect, device number 65 [ 211.995910][ T5933] Bluetooth: Can't get state to change to load configuration err [ 212.012543][ T5933] Bluetooth: Loading sysconfig file failed [ 212.018611][ T5933] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 212.035923][ T5933] usb 5-1: USB disconnect, device number 3 [ 212.129500][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 212.281138][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.291372][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.301758][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.310912][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.319004][ T24] usb 1-1: SerialNumber: syz [ 212.534448][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.556758][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.679372][ T24] usb 1-1: 0:2 : does not exist [ 212.684536][ T5933] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 212.746507][ T24] usb 1-1: USB disconnect, device number 65 [ 212.812786][ T6574] udevd[6574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.851409][ T5933] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 212.869511][ T5933] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 212.888311][ T5933] usb 3-1: config 1 interface 0 has no altsetting 0 [ 212.907225][ T5933] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 212.917721][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.927900][ T5933] usb 3-1: Product: syz [ 212.932430][ T5933] usb 3-1: Manufacturer: syz [ 212.937104][ T5933] usb 3-1: SerialNumber: syz [ 212.948099][ T8003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.957438][ T8003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.210671][ T5938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.244868][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 213.389311][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 213.402120][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 213.421345][ T5938] usb 5-1: config 11 has an invalid interface number: 144 but max is 0 [ 213.430448][ T5938] usb 5-1: config 11 has no interface number 0 [ 213.436899][ T5938] usb 5-1: config 11 interface 144 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 213.452912][ T5938] usb 5-1: config 11 interface 144 altsetting 155 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 213.470673][ T5938] usb 5-1: config 11 interface 144 altsetting 155 endpoint 0x8A has invalid maxpacket 26287, setting to 1024 [ 213.484515][ T5938] usb 5-1: config 11 interface 144 altsetting 155 bulk endpoint 0x8A has invalid maxpacket 1024 [ 213.495600][ T5938] usb 5-1: config 11 interface 144 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.509834][ T5938] usb 5-1: config 11 interface 144 has no altsetting 0 [ 213.520292][ T5938] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4b.e6 [ 213.531571][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.542839][ T5938] usb 5-1: Product: syz [ 213.547130][ T5938] usb 5-1: Manufacturer: syz [ 213.552175][ T5938] usb 5-1: SerialNumber: syz [ 213.570458][ T8014] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.791929][ T5938] em28xx 5-1:11.144: New device syz syz @ 480 Mbps (1b80:e309, interface 144, class 144) [ 213.802104][ T5938] em28xx 5-1:11.144: Video interface 144 found: bulk [ 213.808855][ T5938] em28xx 5-1:11.144: DVB interface 144 found: [ 213.809752][ T5934] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 213.879671][ T5938] em28xx 5-1:11.144: unknown em28xx chip ID (0) [ 213.958714][ T5938] em28xx 5-1:11.144: reading from i2c device at 0xa0 failed (error=-5) [ 213.975403][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 213.986246][ T5938] em28xx 5-1:11.144: board has no eeprom [ 214.002613][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.022920][ T5934] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 214.023666][ T5933] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 214.047104][ T5934] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 214.059630][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.067687][ T5934] usb 1-1: Product: syz [ 214.069525][ T5938] em28xx 5-1:11.144: Identified as Easy Cap Capture DC-60 (card=64) [ 214.076948][ T5934] usb 1-1: Manufacturer: syz [ 214.085081][ T5934] usb 1-1: SerialNumber: syz [ 214.093406][ T5938] em28xx 5-1:11.144: analog set to bulk mode. [ 214.100774][ T5938] em28xx 5-1:11.144: dvb set to bulk mode. [ 214.107002][ T5933] em28xx 5-1:11.144: Registering V4L2 extension [ 214.136518][ T5938] usb 5-1: USB disconnect, device number 4 [ 214.180730][ T5938] em28xx 5-1:11.144: Disconnecting em28xx [ 214.213098][ T5933] em28xx 5-1:11.144: Config register raw data: 0xffffffed [ 214.235197][ T5933] em28xx 5-1:11.144: AC97 chip type couldn't be determined [ 214.243894][ T5933] em28xx 5-1:11.144: No AC97 audio processor [ 214.247161][ T5848] usb 3-1: USB disconnect, device number 46 [ 214.286138][ T5933] usb 5-1: Decoder not found [ 214.291243][ T5933] em28xx 5-1:11.144: failed to create media graph [ 214.299679][ T994] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 214.299883][ T5933] em28xx 5-1:11.144: V4L2 device video103 deregistered [ 214.354204][ T5934] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.374746][ T5934] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 214.402004][ T5933] em28xx 5-1:11.144: Remote control support is not available for this card. [ 214.404141][ T5934] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 214.441726][ T5938] em28xx 5-1:11.144: Closing input extension [ 214.489656][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 214.509769][ T994] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.534103][ T994] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 214.559860][ T5934] usb 1-1: USB disconnect, device number 66 [ 214.566321][ T994] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 9565, setting to 1024 [ 214.581014][ T994] usb 4-1: config 1 interface 0 has no altsetting 0 [ 214.599391][ T994] usb 4-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.40 [ 214.619038][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.633471][ T994] usb 4-1: Product: syz [ 214.642224][ T994] usb 4-1: Manufacturer: syz [ 214.647006][ T994] usb 4-1: SerialNumber: syz [ 214.657556][ T8028] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.748284][ T5938] em28xx 5-1:11.144: Freeing device [ 214.818477][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.028741][ T994] usbhid 4-1:1.0: can't add hid device: -71 [ 215.062499][ T994] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 215.129589][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.143909][ T994] usb 4-1: USB disconnect, device number 66 [ 215.321468][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.339645][ T5938] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.371325][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.407944][ T5938] usb 5-1: config 0 descriptor?? [ 215.446519][ T5938] pwc: Askey VC010 type 2 USB webcam detected. [ 215.669505][ T5933] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 215.790982][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 215.850212][ T5938] pwc: recv_control_msg error -32 req 02 val 2b00 [ 215.872516][ T5933] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 215.892019][ T5938] pwc: recv_control_msg error -32 req 02 val 2700 [ 215.903669][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.921639][ T5938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.928662][ T5933] usb 4-1: Product: syz [ 215.933190][ T5933] usb 4-1: Manufacturer: syz [ 215.938534][ T5938] pwc: recv_control_msg error -32 req 04 val 1000 [ 215.948219][ T5933] usb 4-1: SerialNumber: syz [ 215.954426][ T5938] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.968372][ T5938] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.980367][ T5933] usb 4-1: config 0 descriptor?? [ 215.995898][ T5938] pwc: recv_control_msg error -32 req 02 val 2000 [ 216.011268][ T5933] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 216.028852][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.040824][ T5933] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 216.069661][ T5933] usb 4-1: media controller created [ 216.079431][ T808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 216.145384][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.219312][ T808] usb 3-1: device descriptor read/64, error -71 [ 216.227160][ T5938] pwc: recv_control_msg error -32 req 04 val 1500 [ 216.247705][ T5938] pwc: recv_control_msg error -32 req 02 val 2500 [ 216.268423][ T5938] pwc: recv_control_msg error -32 req 02 val 2400 [ 216.286697][ T5938] pwc: recv_control_msg error -32 req 02 val 2600 [ 216.300414][ T5938] pwc: recv_control_msg error -32 req 02 val 2900 [ 216.315810][ T5938] pwc: recv_control_msg error -32 req 02 val 2800 [ 216.344795][ T5933] DVB: Unable to find symbol mt352_attach() [ 216.370668][ T5938] pwc: recv_control_msg error -32 req 04 val 1100 [ 216.414317][ T5938] pwc: Registered as video103. [ 216.420488][ T8105] tmpfs: Bad value for 'mpol' [ 216.450009][ T5938] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 216.489795][ T808] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 216.583710][ T5933] DVB: Unable to find symbol nxt6000_attach() [ 216.618697][ T5933] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 216.640848][ T29] usb 5-1: USB disconnect, device number 5 [ 216.673176][ T808] usb 3-1: device descriptor read/64, error -71 [ 216.690458][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 216.772929][ T5933] dvb-usb: schedule remote query interval to 1000 msecs. [ 216.787784][ T5933] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 216.805372][ T5933] dvb-usb: bulk message failed: -22 (7/0) [ 216.821876][ T808] usb usb3-port1: attempt power cycle [ 216.829719][ T5933] dvb-usb: bulk message failed: -22 (7/0) [ 216.852543][ T5933] usb 4-1: USB disconnect, device number 67 [ 217.034497][ T5933] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 217.180239][ T808] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 217.230358][ T808] usb 3-1: device descriptor read/8, error -71 [ 217.482297][ T808] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 217.510414][ T808] usb 3-1: device descriptor read/8, error -71 [ 217.620448][ T808] usb usb3-port1: unable to enumerate USB device [ 217.709353][ T5933] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 217.799306][ T29] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 217.864901][ T5933] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.874493][ T808] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 217.882258][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.890929][ T5933] usb 5-1: Product: syz [ 217.895245][ T5933] usb 5-1: Manufacturer: syz [ 217.900377][ T5933] usb 5-1: SerialNumber: syz [ 217.907717][ T5933] usb 5-1: config 0 descriptor?? [ 217.969726][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 217.976977][ T29] usb 1-1: config 10 has no interfaces? [ 217.984860][ T29] usb 1-1: New USB device found, idVendor=0bda, idProduct=817b, bcdDevice=99.e6 [ 217.994103][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.002535][ T29] usb 1-1: Product: syz [ 218.006933][ T29] usb 1-1: Manufacturer: syz [ 218.011656][ T29] usb 1-1: SerialNumber: syz [ 218.053611][ T808] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 218.063475][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.072581][ T808] usb 4-1: Product: syz [ 218.077157][ T808] usb 4-1: Manufacturer: syz [ 218.081885][ T808] usb 4-1: SerialNumber: syz [ 218.091032][ T808] usb 4-1: config 0 descriptor?? [ 218.100085][ T808] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 218.115054][ T5933] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.229651][ T29] usb 1-1: USB disconnect, device number 67 [ 218.708644][ T808] gspca_stk1135: reg_w 0x3 err -71 [ 218.715097][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.739260][ T808] gspca_stk1135: Sensor write failed [ 218.744753][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.753616][ T808] gspca_stk1135: Sensor write failed [ 218.759357][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.765780][ T808] gspca_stk1135: Sensor read failed [ 218.771223][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.777683][ T808] gspca_stk1135: Sensor read failed [ 218.783044][ T808] gspca_stk1135: Detected sensor type unknown (0x0) [ 218.802443][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.819352][ T808] gspca_stk1135: Sensor read failed [ 218.826248][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.837202][ T808] gspca_stk1135: Sensor read failed [ 218.842691][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.851743][ T808] gspca_stk1135: Sensor write failed [ 218.861210][ T808] gspca_stk1135: serial bus timeout: status=0x00 [ 218.867675][ T808] gspca_stk1135: Sensor write failed [ 218.876002][ T808] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 218.893859][ T808] usb 4-1: USB disconnect, device number 68 [ 219.210562][ T808] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 219.401097][ T808] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 219.409698][ T808] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 219.417897][ T808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 219.427725][ T808] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 219.438686][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 8 [ 219.450078][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 219.467929][ T808] usb 4-1: string descriptor 0 read error: -22 [ 219.474391][ T808] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 219.483764][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.495977][ T808] usb 4-1: config 0 descriptor?? [ 219.505625][ T808] hub 4-1:0.0: bad descriptor, ignoring hub [ 219.511826][ T808] hub 4-1:0.0: probe with driver hub failed with error -5 [ 219.519471][ T29] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 219.543182][ T5933] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 219.553032][ T5938] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 219.565531][ T5933] usb 5-1: USB disconnect, device number 6 [ 219.680626][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 219.688019][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.697254][ T29] usb 1-1: config 1 has an invalid interface number: 30 but max is 0 [ 219.707986][ T29] usb 1-1: config 1 has no interface number 0 [ 219.718218][ T29] usb 1-1: config 1 interface 30 has no altsetting 0 [ 219.723375][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.733918][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.741560][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.752460][ T5938] usb 3-1: config 1 has no interface number 0 [ 219.758963][ T5938] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.771910][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=51.04 [ 219.781560][ T5938] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 219.791246][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.800892][ T29] usb 1-1: Product: syz [ 219.806016][ T29] usb 1-1: Manufacturer: syz [ 219.812231][ T29] usb 1-1: SerialNumber: syz [ 219.818509][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.834435][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.843577][ T5938] usb 3-1: Product: syz [ 219.847952][ T5938] usb 3-1: Manufacturer: syz [ 219.852733][ T5938] usb 3-1: SerialNumber: syz [ 219.869587][ T5934] usb 4-1: USB disconnect, device number 69 [ 220.035328][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.045075][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.112040][ T8182] netlink: 'syz.4.605': attribute type 10 has an invalid length. [ 220.123060][ T8182] netlink: 156 bytes leftover after parsing attributes in process `syz.4.605'. [ 220.224863][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 220.272041][ T29] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 220.291232][ T29] gspca_vc032x: reg_r err -71 [ 220.311467][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.316933][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.331066][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.343892][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.356140][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.363058][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.368537][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.376969][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.389321][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.399248][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.410330][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.416507][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.425316][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.431574][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.437085][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.446095][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.452334][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.457810][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 220.467520][ T29] gspca_vc032x: Unknown sensor... [ 220.476481][ T29] vc032x 1-1:1.30: probe with driver vc032x failed with error -22 [ 220.498917][ T29] usb 1-1: USB disconnect, device number 68 [ 220.589365][ T808] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 220.688546][ T8180] usb usb9: usbfs: process 8180 (syz.2.604) did not claim interface 3 before use [ 220.706900][ T5938] cdc_ncm 3-1:1.1: bind() failure [ 220.763612][ T808] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.772973][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.787761][ T808] usb 5-1: Product: syz [ 220.792212][ T808] usb 5-1: Manufacturer: syz [ 220.797100][ T808] usb 5-1: SerialNumber: syz [ 220.805829][ T808] usb 5-1: config 0 descriptor?? [ 220.911321][ T5934] usb 3-1: USB disconnect, device number 51 [ 221.025075][ T808] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.639303][ T5934] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 221.652789][ T808] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 221.811161][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 221.834259][ T5934] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 221.868013][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 221.879314][ T5934] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 221.900512][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 221.919973][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.946193][ T5934] usb 4-1: config 0 descriptor?? [ 222.173376][ T5934] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 222.329286][ T808] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 222.377766][ T5934] hdpvr 4-1:0.0: device init failed [ 222.387933][ T5934] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 222.408273][ T5934] usb 4-1: USB disconnect, device number 70 [ 222.461293][ T808] usb 3-1: device descriptor read/64, error -71 [ 222.679413][ T994] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 222.699359][ T808] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 222.829411][ T808] usb 3-1: device descriptor read/64, error -71 [ 222.836525][ T994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.845232][ T994] usb 1-1: not running at top speed; connect to a high speed hub [ 222.854374][ T994] usb 1-1: config 251 has an invalid descriptor of length 38, skipping remainder of the config [ 222.864927][ T994] usb 1-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 222.876276][ T994] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 222.886643][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.895241][ T994] usb 1-1: Product: syz [ 222.899839][ T994] usb 1-1: Manufacturer: syz [ 222.904531][ T994] usb 1-1: SerialNumber: syz [ 222.943713][ T808] usb usb3-port1: attempt power cycle [ 223.127663][ T994] usb 1-1: USB disconnect, device number 69 [ 223.199712][ T5938] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 223.309381][ T808] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 223.340912][ T808] usb 3-1: device descriptor read/8, error -71 [ 223.361270][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.373894][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.387371][ T5938] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.412007][ T5938] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 223.420909][ T5933] usb 5-1: USB disconnect, device number 7 [ 223.428815][ T5938] usb 4-1: Manufacturer: syz [ 223.465384][ T5938] usb 4-1: config 0 descriptor?? [ 223.607543][ T8275] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 223.643354][ T808] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 223.649537][ T8275] CIFS mount error: No usable UNC path provided in device string! [ 223.649537][ T8275] [ 223.677119][ T8275] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 223.690587][ T808] usb 3-1: device descriptor read/8, error -71 [ 223.820807][ T808] usb usb3-port1: unable to enumerate USB device [ 223.939330][ T994] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.979368][ T5848] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 224.089322][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 224.099494][ T994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.111139][ T5848] usb 1-1: device descriptor read/64, error -71 [ 224.117788][ T994] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 224.126239][ T994] usb 5-1: config 4 has an invalid descriptor of length 48, skipping remainder of the config [ 224.137203][ T994] usb 5-1: config 4 has no interface number 0 [ 224.146883][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.148685][ T994] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 224.168506][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.178554][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.187069][ T994] usb 5-1: Product: syz [ 224.191871][ T994] usb 5-1: Manufacturer: syz [ 224.196530][ T994] usb 5-1: SerialNumber: syz [ 224.246830][ T5938] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 224.278283][ T5938] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 224.302614][ T5938] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 224.335180][ T5938] usb 4-1: USB disconnect, device number 71 [ 224.360429][ T5848] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 224.453953][ T994] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 224.473467][ T994] uvcvideo 5-1:4.147: No valid video chain found. [ 224.502473][ T994] usb 5-1: USB disconnect, device number 8 [ 224.510741][ T5848] usb 1-1: device descriptor read/64, error -71 [ 224.629684][ T5848] usb usb1-port1: attempt power cycle [ 224.809403][ T5938] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 224.939299][ T5938] usb 4-1: device descriptor read/64, error -71 [ 224.970090][ T5848] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 224.999896][ T5848] usb 1-1: device descriptor read/8, error -71 [ 225.179288][ T5938] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 225.239492][ T5848] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 225.260297][ T5848] usb 1-1: device descriptor read/8, error -71 [ 225.349336][ T5933] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 225.359328][ T5938] usb 4-1: device descriptor read/64, error -71 [ 225.371305][ T5848] usb usb1-port1: unable to enumerate USB device [ 225.480892][ T5938] usb usb4-port1: attempt power cycle [ 225.499409][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 225.507605][ T5933] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 225.528285][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.538183][ T5933] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 225.553511][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.568659][ T5933] usb 5-1: config 0 descriptor?? [ 225.729397][ T808] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 225.850197][ T5938] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 225.880472][ T5938] usb 4-1: device descriptor read/8, error -71 [ 226.005176][ T5933] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 226.013172][ T5933] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 226.021166][ T5933] aureal 0003:0755:2626.0015: unexpected long global item [ 226.029092][ T5933] aureal 0003:0755:2626.0015: probe with driver aureal failed with error -22 [ 226.119346][ T5938] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 226.140308][ T5938] usb 4-1: device descriptor read/8, error -71 [ 226.205302][ T994] usb 5-1: USB disconnect, device number 9 [ 226.250502][ T5938] usb usb4-port1: unable to enumerate USB device [ 226.804160][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 226.816302][ T8331] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 226.825102][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 226.889501][ T808] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 226.999336][ T994] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.040162][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 227.047355][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.058587][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.068469][ T808] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.077790][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.090676][ T808] usb 3-1: config 0 descriptor?? [ 227.100642][ T808] hub 3-1:0.0: USB hub found [ 227.149590][ T5938] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 227.160391][ T994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 227.172650][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 227.187782][ T994] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.197113][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.205406][ T994] usb 5-1: Product: syz [ 227.209742][ T994] usb 5-1: Manufacturer: syz [ 227.214390][ T994] usb 5-1: SerialNumber: syz [ 227.222266][ T994] usb 5-1: config 0 descriptor?? [ 227.303659][ T8338] loop5: detected capacity change from 0 to 7 [ 227.305028][ T808] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 227.320200][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 227.329148][ T8338] Dev loop5: unable to read RDB block 7 [ 227.339826][ T5938] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 227.350741][ T8338] loop5: unable to read partition table [ 227.352005][ T5938] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 227.366626][ T8338] loop5: partition table beyond EOD, truncated [ 227.379956][ T5938] usb 1-1: config 0 has no interface number 0 [ 227.387636][ T5938] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.390441][ T8338] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.424933][ T5938] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 227.456489][ T8329] Bluetooth: MGMT ver 1.23 [ 227.476931][ T5938] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 227.523411][ T808] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 227.537885][ T5938] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 227.555200][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 227.566130][ T808] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 227.594969][ T5938] usb 1-1: Product: syz [ 227.624037][ T5938] usb 1-1: config 0 descriptor?? [ 227.659132][ T8336] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.675879][ T808] usb 3-1: USB disconnect, device number 57 [ 227.763582][ T8342] fido_id[8342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 227.935874][ T5938] usb 1-1: USB disconnect, device number 74 [ 228.159383][ T808] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 228.169474][ T994] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 228.299338][ T994] usb 4-1: device descriptor read/64, error -71 [ 228.323886][ T808] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 228.333707][ T808] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 228.342126][ T808] usb 3-1: Product: syz [ 228.346502][ T808] usb 3-1: Manufacturer: syz [ 228.351323][ T808] usb 3-1: SerialNumber: syz [ 228.359074][ T808] usb 3-1: config 0 descriptor?? [ 228.487012][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.505502][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.540165][ T994] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 228.567944][ T808] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 228.679395][ T994] usb 4-1: device descriptor read/64, error -71 [ 228.719366][ T5848] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 228.770208][ T808] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 228.777367][ T808] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 228.784608][ T808] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 228.791881][ T994] usb usb4-port1: attempt power cycle [ 228.849823][ T808] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 228.886811][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.905245][ T5848] usb 1-1: config 192 has an invalid interface number: 40 but max is 1 [ 228.916124][ T5848] usb 1-1: config 192 has an invalid interface number: 172 but max is 1 [ 228.926761][ T5848] usb 1-1: config 192 has an invalid interface number: 172 but max is 1 [ 228.937343][ T5848] usb 1-1: config 192 has no interface number 0 [ 228.943950][ T5848] usb 1-1: config 192 has no interface number 1 [ 228.950475][ T5848] usb 1-1: config 192 interface 172 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 228.962443][ T5848] usb 1-1: config 192 interface 172 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 228.973799][ T5848] usb 1-1: config 192 interface 172 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.985374][ T5848] usb 1-1: config 192 interface 172 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.985785][ T808] usb 3-1: USB disconnect, device number 58 [ 228.999770][ T5848] usb 1-1: config 192 interface 40 has no altsetting 0 [ 229.013153][ T5848] usb 1-1: config 192 interface 172 has no altsetting 0 [ 229.021461][ T5848] usb 1-1: config 192 interface 172 has no altsetting 1 [ 229.036286][ T5848] usb 1-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 229.046565][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.055894][ T5848] usb 1-1: Product: syz [ 229.060620][ T5848] usb 1-1: Manufacturer: syz [ 229.069558][ T5848] usb 1-1: SerialNumber: syz [ 229.139582][ T994] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 229.160015][ T994] usb 4-1: device descriptor read/8, error -71 [ 229.289754][ T5848] usb-storage 1-1:192.40: USB Mass Storage device detected [ 229.316563][ T5848] usb-storage 1-1:192.40: Quirks match for vid 125f pid a94a: 2000000 [ 229.407050][ T994] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 229.416590][ T5848] usb-storage 1-1:192.172: USB Mass Storage device detected [ 229.427714][ T5848] usb-storage 1-1:192.172: Quirks match for vid 125f pid a94a: 2000000 [ 229.442024][ T994] usb 4-1: device descriptor read/8, error -71 [ 229.472659][ T5848] usb 1-1: USB disconnect, device number 75 [ 229.559675][ T994] usb usb4-port1: unable to enumerate USB device [ 229.571084][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.596527][ T8362] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 229.703768][ T8367] bond0: entered promiscuous mode [ 229.708900][ T8367] bond_slave_0: entered promiscuous mode [ 229.716379][ T8367] bond_slave_1: entered promiscuous mode [ 229.762084][ T808] usb 5-1: USB disconnect, device number 10 [ 229.990620][ T5848] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 230.162306][ T5848] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.209303][ T994] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 230.290728][ T5848] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 230.359329][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 230.372799][ T994] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.386725][ T994] usb 1-1: config 0 has no interface number 0 [ 230.398090][ T994] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 230.408123][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.416444][ T994] usb 1-1: Product: syz [ 230.421112][ T994] usb 1-1: Manufacturer: syz [ 230.425744][ T994] usb 1-1: SerialNumber: syz [ 230.434963][ T994] usb 1-1: config 0 descriptor?? [ 230.445033][ T994] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 230.459524][ T5848] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.465844][ T5848] usb usb3-port1: attempt power cycle [ 230.629293][ T5844] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.759479][ T5844] usb 5-1: device descriptor read/64, error -71 [ 230.809391][ T5848] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 230.830127][ T5848] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.959507][ T5848] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 230.990050][ T5848] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.996982][ T5848] usb usb3-port1: unable to enumerate USB device [ 231.004249][ T5844] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.074497][ T8380] netlink: 'syz.3.644': attribute type 29 has an invalid length. [ 231.083785][ T8380] netlink: 'syz.3.644': attribute type 29 has an invalid length. [ 231.139395][ T5844] usb 5-1: device descriptor read/64, error -71 [ 231.250296][ T5844] usb usb5-port1: attempt power cycle [ 231.460138][ T994] gspca_spca1528: reg_w err -71 [ 231.476050][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 231.477724][ T994] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 231.502991][ T994] usb 1-1: USB disconnect, device number 76 [ 231.599420][ T5844] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 231.621465][ T5844] usb 5-1: device descriptor read/8, error -71 [ 231.709376][ T5848] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 231.859406][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 231.864776][ T5844] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.876906][ T5848] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 231.886463][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.896016][ T5848] usb 4-1: Product: syz [ 231.900948][ T5844] usb 5-1: device descriptor read/8, error -71 [ 231.907202][ T5848] usb 4-1: Manufacturer: syz [ 231.912250][ T5848] usb 4-1: SerialNumber: syz [ 231.920056][ T5848] usb 4-1: config 0 descriptor?? [ 232.019600][ T5844] usb usb5-port1: unable to enumerate USB device [ 232.131359][ T808] usb 4-1: USB disconnect, device number 80 [ 232.339550][ T5848] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 232.491845][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.500991][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.512473][ T5848] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.521978][ T5848] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.535377][ T5848] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 232.544648][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.552751][ T5848] usb 1-1: Product: syz [ 232.556966][ T5848] usb 1-1: Manufacturer: syz [ 232.562467][ T5848] usb 1-1: SerialNumber: syz [ 232.796041][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.811652][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.836220][ T5848] usb 1-1: Can't get UAC3 power state for id 11 [ 232.846449][ T5848] usb 1-1: 5:0: failed to get current value for ch 0 (-71) [ 232.861188][ T5848] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 232.869125][ T5848] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 232.879767][ T5848] usb 1-1: [5] FU [Generic In Capture Volume] ch = 1, val = 0/1/1 [ 232.950669][ T5848] usb 1-1: USB disconnect, device number 77 [ 233.049640][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.066354][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 233.182005][ T36] tipc: Subscription rejected, illegal request [ 233.229327][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 233.236478][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.246783][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.258541][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.268876][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.277065][ T24] usb 4-1: Product: syz [ 233.281510][ T24] usb 4-1: Manufacturer: syz [ 233.286182][ T24] usb 4-1: SerialNumber: syz [ 233.301561][ T24] usb 4-1: 0:2 : does not exist [ 233.512387][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 233.560575][ T8411] netlink: 10 bytes leftover after parsing attributes in process `syz.4.655'. [ 233.584195][ T24] usb 4-1: USB disconnect, device number 81 [ 233.626703][ T6574] udevd[6574]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.779320][ T29] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 233.829297][ T808] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.929369][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 233.936328][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 233.949067][ T29] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 233.958423][ T29] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 233.966974][ T808] usb 5-1: device descriptor read/64, error -71 [ 233.973493][ T29] usb 1-1: Product: syz [ 233.977904][ T29] usb 1-1: Manufacturer: syz [ 233.982612][ T29] usb 1-1: SerialNumber: syz [ 234.119867][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 234.196639][ T29] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 234.211117][ T808] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.232410][ T29] visor 1-1:1.0: probe with driver visor failed with error -71 [ 234.248840][ T29] usb 1-1: USB disconnect, device number 78 [ 234.301341][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.320247][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.338769][ T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 234.352030][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.371798][ T808] usb 5-1: device descriptor read/64, error -71 [ 234.381324][ T24] usb 3-1: config 0 descriptor?? [ 234.490241][ T808] usb usb5-port1: attempt power cycle [ 234.805096][ T24] hid-led 0003:27B8:01ED.0017: unexpected long global item [ 234.814461][ T24] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -22 [ 234.839399][ T808] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.860000][ T808] usb 5-1: device descriptor read/8, error -71 [ 235.001315][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.009859][ T5848] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 235.018596][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.099379][ T808] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.121933][ T808] usb 5-1: device descriptor read/8, error -71 [ 235.161762][ T5848] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 235.170823][ T5848] usb 1-1: can't read configurations, error -22 [ 235.240147][ T808] usb usb5-port1: unable to enumerate USB device [ 235.252581][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.262134][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.309990][ T5848] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 235.322310][ T808] usb 3-1: USB disconnect, device number 63 [ 235.476648][ T5848] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 235.486727][ T5848] usb 1-1: can't read configurations, error -22 [ 235.494247][ T5848] usb usb1-port1: attempt power cycle [ 235.527794][ T8439] sp0: Synchronizing with TNC [ 235.555952][ T8439] tipc: Started in network mode [ 235.561392][ T8439] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 235.571885][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 235.583295][ T8438] [U] è`` [ 235.839470][ T5848] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 235.872863][ T5848] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 235.891124][ T5848] usb 1-1: can't read configurations, error -22 [ 235.913595][ T8447] 9p: Bad value for 'wfdno' [ 235.927685][ T8447] dvmrp0: entered allmulticast mode [ 236.029498][ T5848] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 236.065576][ T5848] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 236.076553][ T5848] usb 1-1: can't read configurations, error -22 [ 236.086250][ T5848] usb usb1-port1: unable to enumerate USB device [ 236.299374][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 236.454159][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 236.467539][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 236.477278][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.572251][ T24] usb 4-1: config 0 descriptor?? [ 236.590960][ T8445] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 236.650337][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 236.853966][ T5196] bcm5974 4-1:0.0: could not read from device [ 236.860832][ T808] usb 4-1: USB disconnect, device number 82 [ 237.014811][ T8451] tracefs: Unknown parameter 'mÿd000000000000000g0°¹[œr·$­' [ 237.026600][ T5196] bcm5974 4-1:0.0: could not read from device [ 237.048600][ T5855] bcm5974 4-1:0.0: could not read from device [ 237.088751][ T5196] bcm5974 4-1:0.0: could not read from device [ 237.369337][ T5848] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 237.509462][ T5848] usb 5-1: device descriptor read/64, error -71 [ 237.759429][ T5848] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 237.909412][ T5848] usb 5-1: device descriptor read/64, error -71 [ 237.960841][ T8469] netlink: 'syz.3.678': attribute type 21 has an invalid length. [ 237.968950][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 238.022012][ T5848] usb usb5-port1: attempt power cycle [ 238.030316][ T5914] IPVS: starting estimator thread 0... [ 238.049068][ T8472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.679'. [ 238.059008][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 238.068044][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.140700][ T8473] IPVS: using max 26 ests per chain, 62400 per kthread [ 238.272770][ T8479] genirq: Flags mismatch irq 6. 00200000 (aio_iiro_16) vs. 00200000 (pcl812) [ 238.295613][ T8479] genirq: Flags mismatch irq 6. 00200000 (aio_iiro_16) vs. 00200000 (pcl812) [ 238.381485][ T5848] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 238.412354][ T5848] usb 5-1: device descriptor read/8, error -71 [ 238.436486][ T8485] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.682'. [ 238.447319][ T8484] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.682'. [ 238.659591][ T5848] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 238.711812][ T5848] usb 5-1: device descriptor read/8, error -71 [ 238.831238][ T5848] usb usb5-port1: unable to enumerate USB device [ 238.989334][ T5914] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 239.141182][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 239.151132][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 239.162721][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 239.172572][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 239.182557][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 239.191715][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.203287][ T5914] usb 3-1: config 0 descriptor?? [ 239.369421][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 239.413118][ T5914] hdpvr 3-1:0.0: firmware version 0x1e dated [ 239.529299][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 239.536732][ T24] usb 4-1: config 2 has an invalid interface number: 4 but max is 0 [ 239.546137][ T24] usb 4-1: config 2 has no interface number 0 [ 239.552360][ T24] usb 4-1: config 2 interface 4 has no altsetting 0 [ 239.562554][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22 [ 239.572444][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.580647][ T24] usb 4-1: Product: syz [ 239.584938][ T24] usb 4-1: Manufacturer: syz [ 239.589774][ T24] usb 4-1: SerialNumber: syz [ 239.614067][ T5914] hdpvr 3-1:0.0: device init failed [ 239.619703][ T5914] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 239.640493][ T5914] usb 3-1: USB disconnect, device number 64 [ 239.801717][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.811591][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.822310][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.833690][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.847415][ T24] quatech2 4-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected [ 239.867305][ T24] usb 4-1: qt2_attach - failed to power on unit: -71 [ 239.877243][ T24] quatech2 4-1:2.4: probe with driver quatech2 failed with error -71 [ 239.893696][ T24] usb 4-1: USB disconnect, device number 83 [ 240.171006][ T5914] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 240.351388][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.360729][ T5914] usb 1-1: config 194 has an invalid interface number: 50 but max is 0 [ 240.370147][ T5914] usb 1-1: config 194 has no interface number 0 [ 240.376505][ T5914] usb 1-1: config 194 interface 50 has no altsetting 0 [ 240.386816][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 240.396431][ T5914] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=9d.87 [ 240.407358][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.450600][ T8524] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 240.459623][ T8524] netlink: 'syz.3.693': attribute type 9 has an invalid length. [ 240.467384][ T8524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.693'. [ 240.549484][ T5844] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 240.643066][ T808] usb 1-1: USB disconnect, device number 83 [ 240.700713][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 240.708507][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.717725][ T5844] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 240.726087][ T5844] usb 5-1: config 0 has no interface number 0 [ 240.729809][ T29] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 240.733365][ T5844] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 240.751108][ T5844] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 240.761599][ T5844] usb 5-1: config 0 interface 88 has no altsetting 0 [ 240.772549][ T5844] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 240.781989][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 240.790416][ T5844] usb 5-1: Product: syz [ 240.794650][ T5844] usb 5-1: Manufacturer: syz [ 240.799625][ T5844] usb 5-1: SerialNumber: syz [ 240.807847][ T5844] usb 5-1: config 0 descriptor?? [ 240.902865][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 240.914779][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 240.923946][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.935770][ T29] usb 4-1: config 0 descriptor?? [ 240.942022][ T8524] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 241.029366][ T5844] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input29 [ 241.053848][ T5844] usb 5-1: USB disconnect, device number 23 [ 241.194936][ T8526] netlink: 'syz.0.694': attribute type 21 has an invalid length. [ 241.203477][ T8526] netlink: 100 bytes leftover after parsing attributes in process `syz.0.694'. [ 241.364654][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.376105][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.383749][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.394582][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.403556][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.411046][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.419171][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.426657][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.434447][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.443899][ T29] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 241.458465][ T29] magicmouse 0003:05AC:0324.0018: hidraw0: USB HID v7f.fd Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 241.470353][ T29] magicmouse 0003:05AC:0324.0018: magicmouse input not registered [ 241.482294][ T29] magicmouse 0003:05AC:0324.0018: probe with driver magicmouse failed with error -12 [ 241.556477][ T29] usb 4-1: USB disconnect, device number 84 [ 241.620188][ T5844] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 241.779324][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 241.787574][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.798822][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.808704][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.821750][ T5844] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.831877][ T994] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 241.839801][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.852440][ T5844] usb 1-1: config 0 descriptor?? [ 242.003803][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.016154][ T994] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.025296][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.036904][ T994] usb 5-1: config 0 descriptor?? [ 242.262862][ T994] usbhid 5-1:0.0: can't add hid device: -71 [ 242.273883][ T994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.299611][ T5844] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input30 [ 242.319762][ T994] usb 5-1: USB disconnect, device number 24 [ 242.359538][ T8540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.365666][ T8540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.373291][ T8540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.381315][ T8540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.388516][ T8540] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.434954][ T8540] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.458543][ T5844] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 242.593671][ T8530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 242.634197][ T8530] kvm: pic: level sensitive irq not supported [ 242.634641][ T8530] kvm: pic: level sensitive irq not supported [ 242.799870][ T994] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 242.815660][ T808] usb 1-1: USB disconnect, device number 84 [ 242.899330][ T5844] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 242.960729][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 242.968913][ T994] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.980814][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.987501][ T994] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 242.996739][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.008289][ T994] usb 5-1: config 0 descriptor?? [ 243.059331][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 243.066396][ T5844] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.077935][ T5844] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.091891][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 243.098558][ T5844] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 243.107776][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.118583][ T5844] usb 4-1: config 0 descriptor?? [ 243.371859][ T5844] uclogic 0003:5543:0005.001A: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 243.408016][ T5844] usb 4-1: USB disconnect, device number 85 [ 243.454173][ T994] mcp2221 0003:04D8:00DD.001B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 243.570912][ T8555] fido_id[8555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 243.622590][ C0] ================================================================== [ 243.630778][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 243.638573][ C0] Read of size 1 at addr ffff888055e4ffff by task syz.4.697/8533 [ 243.646496][ C0] [ 243.648900][ C0] CPU: 0 UID: 0 PID: 8533 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.648964][ C0] Tainted: [L]=SOFTLOCKUP [ 243.648989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.649023][ C0] Call Trace: [ 243.649032][ C0] [ 243.649043][ C0] dump_stack_lvl+0xe8/0x150 [ 243.649120][ C0] print_address_description+0x55/0x1e0 [ 243.649193][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 243.649247][ C0] print_report+0x58/0x70 [ 243.649316][ C0] kasan_report+0x117/0x150 [ 243.649356][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 243.649437][ C0] mcp2221_raw_event+0x106a/0x1240 [ 243.649489][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 243.649546][ C0] ? down_trylock+0x50/0xb0 [ 243.649618][ C0] hid_input_report+0x41d/0x580 [ 243.649691][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 243.649748][ C0] hid_irq_in+0x47e/0x6d0 [ 243.649834][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 243.649909][ C0] dummy_timer+0xbc0/0x4650 [ 243.650003][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 243.650054][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 243.650118][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 243.650168][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 243.650225][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 243.650277][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 243.650338][ C0] hrtimer_run_softirq+0x17a/0x240 [ 243.650396][ C0] handle_softirqs+0x22a/0x840 [ 243.650468][ C0] ? __irq_exit_rcu+0xca/0x220 [ 243.650545][ C0] __irq_exit_rcu+0xca/0x220 [ 243.650626][ C0] irq_exit_rcu+0x9/0x30 [ 243.650692][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 243.650755][ C0] [ 243.650777][ C0] [ 243.650786][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.650839][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 243.650910][ C0] Code: f7 e8 bd fd e5 f5 f7 c3 00 02 00 00 74 05 e8 60 69 11 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 96 d7 f5 65 8b 05 dd a7 84 07 85 c0 74 18 5b 41 5e e9 41 48 [ 243.650945][ C0] RSP: 0018:ffffc90003f1fa08 EFLAGS: 00000206 [ 243.650995][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 0000000080000001 [ 243.651028][ C0] RDX: 0000000000000000 RSI: ffffffff8e106c7e RDI: 0000000000000001 [ 243.651057][ C0] RBP: ffffc90003f1fb70 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 243.651095][ C0] R10: dffffc0000000000 R11: fffffbfff20677df R12: dffffc0000000000 [ 243.651137][ C0] R13: 1ffff920007e3f50 R14: ffff8880330f6008 R15: 0000000000000001 [ 243.651177][ C0] raw_process_ep_io+0x293/0xd90 [ 243.651235][ C0] ? __pfx_raw_process_ep_io+0x10/0x10 [ 243.651294][ C0] ? _copy_from_user+0x94/0xb0 [ 243.651342][ C0] raw_ioctl+0x252c/0x41c0 [ 243.651379][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 243.651464][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 243.651565][ C0] ? do_vfs_ioctl+0x1166/0x1530 [ 243.651604][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 243.651658][ C0] ? do_futex+0x395/0x420 [ 243.651749][ C0] ? __fget_files+0x2a/0x420 [ 243.651819][ C0] ? __fget_files+0x2a/0x420 [ 243.651886][ C0] ? __fget_files+0x3a0/0x420 [ 243.651941][ C0] ? __fget_files+0x2a/0x420 [ 243.652010][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 243.652058][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 243.652094][ C0] __se_sys_ioctl+0xfc/0x170 [ 243.652143][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.652181][ C0] do_syscall_64+0x15f/0xf80 [ 243.652252][ C0] ? trace_irq_disable+0x3b/0x140 [ 243.652306][ C0] ? clear_bhb_loop+0x40/0x90 [ 243.652367][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.652416][ C0] RIP: 0033:0x7f678df9c4ab [ 243.652452][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 243.652486][ C0] RSP: 002b:00007f678eefdf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.652537][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f678df9c4ab [ 243.652567][ C0] RDX: 00007f678eefdfe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 243.652595][ C0] RBP: 0000000000000003 R08: 00007f678e340320 R09: 0000000000000000 [ 243.652622][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000140 [ 243.652663][ C0] R13: 0000000000000000 R14: 00007f678e215fa0 R15: 00007fffad72a358 [ 243.652699][ C0] [ 243.652715][ C0] [ 243.779813][ T29] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 243.780998][ C0] The buggy address belongs to the physical page: [ 243.781041][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x55e4f [ 244.109864][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 244.117036][ C0] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 244.125649][ C0] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 244.134253][ C0] page dumped because: kasan: bad access detected [ 244.140868][ C0] page_owner tracks the page as freed [ 244.146459][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 7061, tgid 7058 (syz.3.315), ts 157223521172, free_ts 157660662804 [ 244.165412][ C0] post_alloc_hook+0x231/0x280 [ 244.170221][ C0] get_page_from_freelist+0x24ba/0x2540 [ 244.175811][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 244.181753][ C0] alloc_pages_mpol+0x235/0x490 [ 244.186649][ C0] alloc_pages_noprof+0xac/0x2a0 [ 244.191620][ C0] __pmd_alloc+0x3a/0x5c0 [ 244.195993][ C0] copy_pmd_range+0x5552/0x5970 [ 244.200894][ C0] copy_page_range+0xbe8/0x11f0 [ 244.205860][ C0] dup_mmap+0xf40/0x1d90 [ 244.210139][ C0] copy_mm+0x13b/0x4a0 [ 244.214321][ C0] copy_process+0x1efd/0x4430 [ 244.219031][ C0] kernel_clone+0x2d7/0x940 [ 244.223575][ C0] __x64_sys_clone+0x1b6/0x230 [ 244.228424][ C0] do_syscall_64+0x15f/0xf80 [ 244.233155][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.239173][ C0] page last free pid 7078 tgid 7078 stack trace: [ 244.245532][ C0] __free_frozen_pages+0xbc7/0xd30 [ 244.250676][ C0] tlb_remove_table_rcu+0x85/0x100 [ 244.255898][ C0] rcu_core+0x7cd/0x1070 [ 244.260172][ C0] handle_softirqs+0x22a/0x840 [ 244.264971][ C0] __irq_exit_rcu+0xca/0x220 [ 244.269592][ C0] irq_exit_rcu+0x9/0x30 [ 244.273871][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.279738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.285853][ C0] [ 244.288295][ C0] Memory state around the buggy address: [ 244.294130][ C0] ffff888055e4fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 244.302582][ C0] ffff888055e4ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 244.310850][ C0] >ffff888055e4ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 244.318967][ C0] ^ [ 244.327491][ C0] ffff888055e50000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 244.335578][ C0] ffff888055e50080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 244.343657][ C0] ================================================================== [ 244.351744][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.358960][ C0] CPU: 0 UID: 0 PID: 8533 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.369753][ C0] Tainted: [L]=SOFTLOCKUP [ 244.374099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.384188][ C0] Call Trace: [ 244.387498][ C0] [ 244.390373][ C0] vpanic+0x56c/0xa60 [ 244.394723][ C0] ? __pfx_vpanic+0x10/0x10 [ 244.399341][ C0] panic+0xc5/0xd0 [ 244.403147][ C0] ? __pfx_panic+0x10/0x10 [ 244.407590][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.412911][ C0] ? rcu_is_watching+0x15/0xb0 [ 244.417708][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.423019][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.428329][ C0] check_panic_on_warn+0x89/0xb0 [ 244.433430][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.438855][ C0] end_report+0x73/0x170 [ 244.443131][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.448454][ C0] kasan_report+0x128/0x150 [ 244.452998][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 244.458321][ C0] mcp2221_raw_event+0x106a/0x1240 [ 244.463496][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.469333][ C0] ? down_trylock+0x50/0xb0 [ 244.473871][ C0] hid_input_report+0x41d/0x580 [ 244.478752][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 244.484341][ C0] hid_irq_in+0x47e/0x6d0 [ 244.488709][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 244.494130][ C0] dummy_timer+0xbc0/0x4650 [ 244.498688][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.503653][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.508622][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.513602][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.519448][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.524412][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 244.529648][ C0] hrtimer_run_softirq+0x17a/0x240 [ 244.534793][ C0] handle_softirqs+0x22a/0x840 [ 244.539593][ C0] ? __irq_exit_rcu+0xca/0x220 [ 244.544395][ C0] __irq_exit_rcu+0xca/0x220 [ 244.549033][ C0] irq_exit_rcu+0x9/0x30 [ 244.553344][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.559025][ C0] [ 244.561982][ C0] [ 244.564932][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.570940][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 244.577387][ C0] Code: f7 e8 bd fd e5 f5 f7 c3 00 02 00 00 74 05 e8 60 69 11 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 96 d7 f5 65 8b 05 dd a7 84 07 85 c0 74 18 5b 41 5e e9 41 48 [ 244.597263][ C0] RSP: 0018:ffffc90003f1fa08 EFLAGS: 00000206 [ 244.603411][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 0000000080000001 [ 244.611417][ C0] RDX: 0000000000000000 RSI: ffffffff8e106c7e RDI: 0000000000000001 [ 244.619424][ C0] RBP: ffffc90003f1fb70 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 244.627449][ C0] R10: dffffc0000000000 R11: fffffbfff20677df R12: dffffc0000000000 [ 244.635538][ C0] R13: 1ffff920007e3f50 R14: ffff8880330f6008 R15: 0000000000000001 [ 244.643562][ C0] raw_process_ep_io+0x293/0xd90 [ 244.648722][ C0] ? __pfx_raw_process_ep_io+0x10/0x10 [ 244.654229][ C0] ? _copy_from_user+0x94/0xb0 [ 244.659018][ C0] raw_ioctl+0x252c/0x41c0 [ 244.663468][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 244.669189][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 244.674876][ C0] ? do_vfs_ioctl+0x1166/0x1530 [ 244.679773][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 244.684579][ C0] ? do_futex+0x395/0x420 [ 244.688979][ C0] ? __fget_files+0x2a/0x420 [ 244.693622][ C0] ? __fget_files+0x2a/0x420 [ 244.698677][ C0] ? __fget_files+0x3a0/0x420 [ 244.703564][ C0] ? __fget_files+0x2a/0x420 [ 244.708205][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.713178][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 244.717968][ C0] __se_sys_ioctl+0xfc/0x170 [ 244.722706][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.728848][ C0] do_syscall_64+0x15f/0xf80 [ 244.733576][ C0] ? trace_irq_disable+0x3b/0x140 [ 244.738740][ C0] ? clear_bhb_loop+0x40/0x90 [ 244.743442][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.749533][ C0] RIP: 0033:0x7f678df9c4ab [ 244.753992][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 244.773722][ C0] RSP: 002b:00007f678eefdf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.782221][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f678df9c4ab [ 244.790226][ C0] RDX: 00007f678eefdfe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 244.798227][ C0] RBP: 0000000000000003 R08: 00007f678e340320 R09: 0000000000000000 [ 244.806243][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000140 [ 244.814242][ C0] R13: 0000000000000000 R14: 00007f678e215fa0 R15: 00007fffad72a358 [ 244.822341][ C0] [ 244.826444][ C0] Kernel Offset: disabled [ 244.830913][ C0] Rebooting in 86400 seconds..