last executing test programs: 52.470436862s ago: executing program 3 (id=1464): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 52.369681582s ago: executing program 3 (id=1466): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c21504220000000000010902240001000000000904000002030400000921000000012205"], 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000006c0)=""/120) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000500000008"], 0x50) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r11, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r11, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r9) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x880) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 49.308100719s ago: executing program 3 (id=1478): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0xbad48a7c311717ee, 0x15, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 47.143177354s ago: executing program 1 (id=1485): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x19) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x15c}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x10000, 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) 46.239505058s ago: executing program 1 (id=1489): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x0, r1}) r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000040050b391740000102030109027d000301053009080b00010107208c0904000000010120000964010040041d000708240a0001ff23040c240302ff010005000700810904018d2ee9f17d5091730101022000090501090002030b04631f0100034004000904020000"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16], 0xfdef) unshare(0x68040200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024882, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) unshare(0x2c020400) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 46.239089146s ago: executing program 3 (id=1490): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0xa) 45.258825433s ago: executing program 3 (id=1492): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000500)="52aff5f36ec6c942ea2f8645dd2ad0de49ed224d9baea92933543709a762a3c73bc71838e7c290319fb1eff835f043ad3cf26acbc69b6a4c1fbb97f157cdfe03fd8800f7ebd9c39ae11e5c0ec1bc151ce33df80847551dc729288ce05759e388cdfec65b40dac954ab593961276488ea9bb99d933510d6a502addd0a5f2b957f2b37f4e9741eb0862225deb506e1e509e84ef036cc0597a5", 0x98, r1) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x6, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0x10001, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0xffffffffffffff51, 0x50fd24f7], 0x60000, 0xc42d4}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_usb_connect(0x5, 0x2f, &(0x7f0000001440)={{0x12, 0x1, 0x110, 0x9a, 0x62, 0x20, 0x40, 0x421, 0x3cd, 0xee46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x1, 0x5, 0x70, 0x3, "", [{{0x9, 0x4, 0x28, 0x81, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xb, 0x2, 0x7, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="8b178a87079705f8d809"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x48045) syz_usb_control_io(r0, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c48451202e5af6c7b510625"], 0x0, 0x0, 0x0, 0x0}, 0x0) 44.940865398s ago: executing program 3 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x6}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100d8000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x40) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x27}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000000080), 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x24}}, 0x20000850) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, r9, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dae8b927d3"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f3772dfca"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4b35891a2b7e9f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4004030) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a00010027bd700004000000010040000800ec000841"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) 44.622834807s ago: executing program 32 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x6}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100d8000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x40) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x27}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000000080), 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x24}}, 0x20000850) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, r9, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dae8b927d3"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f3772dfca"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4b35891a2b7e9f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4004030) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a00010027bd700004000000010040000800ec000841"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) 44.231167926s ago: executing program 1 (id=1496): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 42.516595005s ago: executing program 1 (id=1502): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0xa) 41.458597969s ago: executing program 1 (id=1505): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x0, r1}) r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000040050b391740000102030109027d000301053009080b00010107208c0904000000010120000964010040041d000708240a0001ff23040c240302ff010005000700810904018d2ee9f17d5091730101022000090501090002030b04631f0100034004000904020000"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16], 0xfdef) unshare(0x68040200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024882, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) unshare(0x2c020400) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 40.962315797s ago: executing program 1 (id=1506): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd22, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 40.173226305s ago: executing program 33 (id=1506): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd22, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10.9411845s ago: executing program 2 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c4d0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x2}) userfaultfd(0x80800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) close(r0) 10.753535201s ago: executing program 2 (id=1583): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x0, r1}) r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000040050b391740000102030109027d000301053009080b00010107208c0904000000010120000964010040041d000708240a0001ff23040c240302ff010005000700810904018d2ee9f17d5091730101022000090501090002030b04631f0100034004000904020000010220"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16], 0xfdef) unshare(0x68040200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024882, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) unshare(0x2c020400) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 9.051518257s ago: executing program 5 (id=1585): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="40123b00000045"], 0x0, 0x0}) 8.915266245s ago: executing program 2 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2e, 0x401000, 0xe, 0x3, 0x2000001, 0x1, 0xb000000}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001400180008ac0f0006ac0f0009ac0f0006ac0f"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000b0100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x40, 0x5, 0x3, "e71796"}, 0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc048aeca, &(0x7f00000002c0)={0x9, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}]}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4004892) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000240)={0x921, "452860b24d659a5b4b8d5bf9d19f68060592b2165e1cd2b82216af1273b818cf", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) 7.807621445s ago: executing program 6 (id=1589): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x15, 0x1}, 0x1, 0xb, 0xffffffff, {0x4, 0x5}, 0x6, 0x7fff}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002640)=""/4070, 0xfe6}, {&(0x7f0000003640)=""/4054, 0xfd6}, {&(0x7f0000001600)=""/4134, 0x1026}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000400)=""/193, 0xc1}], 0x6}, 0x1a2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r5, 0x1) r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000011c0)='cpuacct.stat\x00', 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001080)={0x9f, &(0x7f0000000c80)={0x0, 0xa, 0x2, "ffc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x9b, "fd84f4a9269904883bff00c186bdfb1b5db7639f89227ad1bc1b4d55cc5ad70eac0a1454c63caade48487c384df4a5fb50c94836383164a81dc8aa91d1278b66b10959fb2bb4c063e3ca8d198a74bcdbf1acc4cfc338bd2fef684eefdb45f28eda476f8384dd00b1ad507863a8f4eebd8b309459dad587bfd70cb937575ea55b2bca843641687dc11fa0a1905084e41f5fe6e11392bc7faf51f723"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000800000020ea3f002f000000a35ef5ca4a15982dc65a80df2625d528e03e52edc8986b9159fb8000213801d66dc590f2d8f6388c0c596940d3de6ee98c894603bed4f0ce1ac8f85c5d77c8200b0000007eb3f1a3871d9e9c4e41aa29b11f97192c9c8c0c23dbcf063994ea81680a089e57ec4677362c2405da2fd1b9d75d3e051aef649d5e9a0bdbb4af3c239b0ca715e7c5b2dcb4bab8bb94430a191f62dc32c80153adce7a3ca55d7b52e4464f2b0fba3054758cbdf8fadd7ff484f38cfce97c104a880673e6eed2a5a79406ed46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x2, "aa83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.387256517s ago: executing program 4 (id=1590): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586", @ANYBLOB="f3a72a993eddbaad367b359c82208953143c9c12d974df0e4a458113e8b2e878dc721561ed0b4585c3be5de8808d9d4a5999e223787927e585855f85192e78c7bbe6180e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x10, 0x30, {0x30, 0x2, "2d379fa588f65181441300be8bb1c0bc5a5c4cc307201bd9d8e468f6d01bfdd7f251026902153367a1a9cbd948da"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 6.887619145s ago: executing program 2 (id=1591): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x15, 0x1}, 0x1, 0xb, 0xffffffff, {0x4, 0x5}, 0x6, 0x7fff}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) close_range(r1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r4, 0x0, &(0x7f0000001080)={0x9f, &(0x7f0000000c80)={0x0, 0xa, 0x2, "ffc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x9b, "fd84f4a9269904883bff00c186bdfb1b5db7639f89227ad1bc1b4d55cc5ad70eac0a1454c63caade48487c384df4a5fb50c94836383164a81dc8aa91d1278b66b10959fb2bb4c063e3ca8d198a74bcdbf1acc4cfc338bd2fef684eefdb45f28eda476f8384dd00b1ad507863a8f4eebd8b309459dad587bfd70cb937575ea55b2bca843641687dc11fa0a1905084e41f5fe6e11392bc7faf51f723"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000800000020ea3f002f000000a35ef5ca4a15982dc65a80df2625d528e03e52edc8986b9159fb8000213801d66dc590f2d8f6388c0c596940d3de6ee98c894603bed4f0ce1ac8f85c5d77c8200b0000007eb3f1a3871d9e9c4e41aa29b11f97192c9c8c0c23dbcf063994ea81680a089e57ec4677362c2405da2fd1b9d75d3e051aef649d5e9a0bdbb4af3c239b0ca715e7c5b2dcb4bab8bb94430a191f62dc32c80153adce7a3ca55d7b52e4464f2b0fba3054758cbdf8fadd7ff484f38cfce97c104a880673e6eed2a5a79406ed46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.665290685s ago: executing program 0 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14, 0x2}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2}, "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"}}, 0xfce) 6.444429995s ago: executing program 0 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c4d0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x2}) userfaultfd(0x80800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) close(r0) 6.432847515s ago: executing program 5 (id=1594): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000500)="52aff5f36ec6c942ea2f8645dd2ad0de49ed224d9baea92933543709a762a3c73bc71838e7c290319fb1eff835f043ad3cf26acbc69b6a4c1fbb97f157cdfe03fd8800f7ebd9c39ae11e5c0ec1bc151ce33df80847551dc729288ce05759e388cdfec65b40dac954ab593961276488ea9bb99d933510d6a502addd0a5f2b957f2b37f4e9741eb0862225deb506e1e509e84ef036cc0597a5", 0x98, r1) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x6, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0x10001, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0xffffffffffffff51, 0x50fd24f7], 0x60000, 0xc42d4}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_usb_connect(0x5, 0x2f, &(0x7f0000001440)={{0x12, 0x1, 0x110, 0x9a, 0x62, 0x20, 0x40, 0x421, 0x3cd, 0xee46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x1, 0x5, 0x70, 0x3, "", [{{0x9, 0x4, 0x28, 0x81, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xb, 0x2, 0x7, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="8b178a87079705f8d809"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x48045) syz_usb_control_io(r0, &(0x7f0000000b40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.235579069s ago: executing program 0 (id=1595): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 5.563211107s ago: executing program 6 (id=1596): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x0, r1}) r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000040050b391740000102030109027d000301053009080b00010107208c0904000000010120000964010040041d000708240a0001ff23040c240302ff010005000700810904018d2ee9f17d5091730101022000090501090002030b04631f0100034004000904020000010220"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16], 0xfdef) unshare(0x68040200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024882, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) unshare(0x2c020400) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 4.980158257s ago: executing program 2 (id=1597): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="40123b00000045"], 0x0, 0x0}) 4.71656025s ago: executing program 4 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, 0x0, 0x0) 4.65435725s ago: executing program 5 (id=1599): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x413, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe1, 0x8b, 0xab, 0x20, 0x1199, 0x9005, 0xc5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xa, 0x30, 0xf1, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0xff, 0x88, 0x22, 0xb, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x6f, 0x3}}]}}]}}]}}, 0x0) 4.519467821s ago: executing program 0 (id=1600): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000180)=[{0x81, 0x5401, 0x0, &(0x7f0000000080)}], 0x1}) 4.509542938s ago: executing program 4 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c4d0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x2}) userfaultfd(0x80800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) close(r0) 4.361388947s ago: executing program 4 (id=1602): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x15, 0x1}, 0x1, 0xb, 0xffffffff, {0x4, 0x5}, 0x6, 0x7fff}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002640)=""/4070, 0xfe6}, {&(0x7f0000003640)=""/4054, 0xfd6}, {&(0x7f0000001600)=""/4134, 0x1026}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000400)=""/193, 0xc1}], 0x6}, 0x1a2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000011c0)='cpuacct.stat\x00', 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001080)={0x9f, &(0x7f0000000c80)={0x0, 0xa, 0x2, "ffc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x9b, "fd84f4a9269904883bff00c186bdfb1b5db7639f89227ad1bc1b4d55cc5ad70eac0a1454c63caade48487c384df4a5fb50c94836383164a81dc8aa91d1278b66b10959fb2bb4c063e3ca8d198a74bcdbf1acc4cfc338bd2fef684eefdb45f28eda476f8384dd00b1ad507863a8f4eebd8b309459dad587bfd70cb937575ea55b2bca843641687dc11fa0a1905084e41f5fe6e11392bc7faf51f723"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000800000020ea3f002f000000a35ef5ca4a15982dc65a80df2625d528e03e52edc8986b9159fb8000213801d66dc590f2d8f6388c0c596940d3de6ee98c894603bed4f0ce1ac8f85c5d77c8200b0000007eb3f1a3871d9e9c4e41aa29b11f97192c9c8c0c23dbcf063994ea81680a089e57ec4677362c2405da2fd1b9d75d3e051aef649d5e9a0bdbb4af3c239b0ca715e7c5b2dcb4bab8bb94430a191f62dc32c80153adce7a3ca55d7b52e4464f2b0fba3054758cbdf8fadd7ff484f38cfce97c104a880673e6eed2a5a79406ed46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x2, "aa83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.505545655s ago: executing program 6 (id=1603): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.391102448s ago: executing program 6 (id=1604): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586", @ANYBLOB="f3a72a993eddbaad367b359c82208953143c9c12d974df0e4a458113e8b2e878dc721561ed0b4585c3be5de8808d9d4a5999e223787927e585855f85192e78c7bbe6180e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.269899666s ago: executing program 5 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c4d0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x2}) userfaultfd(0x80800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) close(r0) 3.216447117s ago: executing program 0 (id=1606): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c21504220000000000010902240001000000000904000002030400000921000000012205"], 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000006c0)=""/120) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000500000008"], 0x50) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r11, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r11, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r9) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x368, r12, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x261}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8fce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1af7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fda44a7214dfcc1f54dcf5465e99930468f73834a4653d3b04039c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x400c000}, 0x880) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3.209229001s ago: executing program 5 (id=1607): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x15, 0x1}, 0x1, 0xb, 0xffffffff, {0x4, 0x5}, 0x6, 0x7fff}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002640)=""/4070, 0xfe6}, {&(0x7f0000003640)=""/4054, 0xfd6}, {&(0x7f0000001600)=""/4134, 0x1026}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000400)=""/193, 0xc1}], 0x6}, 0x1a2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r5, 0x1) r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000011c0)='cpuacct.stat\x00', 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001080)={0x9f, &(0x7f0000000c80)={0x0, 0xa, 0x2, "ffc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x9b, "fd84f4a9269904883bff00c186bdfb1b5db7639f89227ad1bc1b4d55cc5ad70eac0a1454c63caade48487c384df4a5fb50c94836383164a81dc8aa91d1278b66b10959fb2bb4c063e3ca8d198a74bcdbf1acc4cfc338bd2fef684eefdb45f28eda476f8384dd00b1ad507863a8f4eebd8b309459dad587bfd70cb937575ea55b2bca843641687dc11fa0a1905084e41f5fe6e11392bc7faf51f723"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000800000020ea3f002f000000a35ef5ca4a15982dc65a80df2625d528e03e52edc8986b9159fb8000213801d66dc590f2d8f6388c0c596940d3de6ee98c894603bed4f0ce1ac8f85c5d77c8200b0000007eb3f1a3871d9e9c4e41aa29b11f97192c9c8c0c23dbcf063994ea81680a089e57ec4677362c2405da2fd1b9d75d3e051aef649d5e9a0bdbb4af3c239b0ca715e7c5b2dcb4bab8bb94430a191f62dc32c80153adce7a3ca55d7b52e4464f2b0fba3054758cbdf8fadd7ff484f38cfce97c104a880673e6eed2a5a79406ed46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x2, "aa83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.122870475s ago: executing program 4 (id=1608): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103400001"], 0x0) 1.819622735s ago: executing program 2 (id=1609): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586", @ANYBLOB="f3a72a993eddbaad367b359c82208953143c9c12d974df0e4a458113e8b2e878dc721561ed0b4585c3be5de8808d9d4a5999e223787927e585855f85192e78c7bbe6180e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x10, 0x30, {0x30, 0x2, "2d379fa588f65181441300be8bb1c0bc5a5c4cc307201bd9d8e468f6d01bfdd7f251026902153367a1a9cbd948da"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.03246418s ago: executing program 5 (id=1610): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x5}}, 0x18) signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x13, 0xffffffffffffffff, 0x29115000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000f2b000/0x3000)=nil, 0x3000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r6, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0245720, &(0x7f0000000180)) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x7d930e54, 0xe0b, 0x7ff, 0x3, 0x1, 0x0, 0x0, 0x100, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106}}, 0x20) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe1, 0x8b, 0xab, 0x20, 0x1199, 0x9005, 0xc5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xa, 0x30, 0xf1, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0xff, 0x88, 0x22, 0xb, [], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x3, 0x1, 0x61}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x6f, 0x3}}]}}]}}]}}, 0x0) 980.723753ms ago: executing program 6 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14, 0x2}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2}}}, 0x22) 538.545103ms ago: executing program 6 (id=1612): syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586", @ANYBLOB="f3a72a993eddbaad367b359c82208953143c9c12d974df0e4a458113e8b2e878dc721561ed0b4585c3be5de8808d9d4a5999e223787927e585855f85192e78c7bbe6180e"], 0x0) 138.052664ms ago: executing program 0 (id=1613): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="b801ddff180001000000000011000000e0000001000000000000000000000000fe8000000000000000000000000000bb4e22000b000300000a00208000000000477d7b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1b8}}, 0x8044) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], 0x1e0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x47ec, &(0x7f0000000400)={0x0, 0x9ac7, 0x800, 0x0, 0x366}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6000, @fd_index=0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x1, 0xfffffffd, 0x6f, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r14 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1614): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c21504220000000000010902240001000000000904000002030400000921000000012205000905810300"], 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000006c0)=""/120) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000500000008"], 0x50) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r11, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r11, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed00", 0x13}, {0x0}, {&(0x7f0000000100)="127d589163267e4b0e", 0x9}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r9) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3ec, r12, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x261}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8fce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1af7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fda44a7214dfcc1f54dcf5465e99930468f73834a4653d3b04039c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ac000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x400c000}, 0x880) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): b2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.460302][ T5708] dvb-usb: bulk message failed: -22 (5/0) [ 496.466048][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.479681][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.491032][ T5708] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 496.499785][ T5708] usb 4-1: media controller created [ 496.514821][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.535767][ T5708] usb 4-1: selecting invalid altsetting 3 [ 496.542306][ T5708] ttusb2: set interface to alts=3 failed [ 496.559028][ T9704] usb 3-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 496.582096][ T9704] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 496.607191][ T5708] DVB: Unable to find symbol tda10086_attach() [ 496.614358][ T5708] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 496.623968][ T5708] dvb-usb: bulk message failed: -22 (4/0) [ 496.630053][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.643378][ T5708] dvb-usb: bulk message failed: -22 (5/0) [ 496.650592][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 496.658273][T10479] dvb-usb: bulk message failed: -22 (7/0) [ 496.663448][ T5708] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 496.677888][ T9704] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 496.681194][T10479] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 496.701292][ T9704] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 496.742587][T10479] ttusb2: i2c transfer failed. [ 496.794665][ T9704] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 496.805813][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 496.865018][ T9704] usb 3-1: USB disconnect, device number 27 [ 496.903273][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.917934][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.023846][T10497] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1437'. [ 497.033442][T10497] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.115803][ T5348] usb 4-1: USB disconnect, device number 11 [ 497.161750][ T5348] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 497.417943][ T9704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 497.425693][ T188] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 497.547566][ T9704] usb 1-1: device descriptor read/64, error -71 [ 497.597804][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 497.603849][ T188] usb 2-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 497.615772][ T188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.626500][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.635533][ T188] usb 2-1: Product: syz [ 497.640349][ T188] usb 2-1: Manufacturer: syz [ 497.645217][ T188] usb 2-1: SerialNumber: syz [ 497.657183][ T188] usb 2-1: config 0 descriptor?? [ 497.787803][ T9704] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 497.893987][ T188] usb 2-1: USB disconnect, device number 13 [ 497.929442][ T9704] usb 1-1: device descriptor read/64, error -71 [ 497.977449][ T5348] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 498.037889][ T9704] usb usb1-port1: attempt power cycle [ 498.097816][ T5708] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 498.138544][ T5348] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 498.149211][ T5348] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 498.159364][ T5348] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 498.170502][ T5348] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 498.180333][ T5348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.190147][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.198513][ T5348] usb 4-1: Product: syz [ 498.202695][ T5348] usb 4-1: Manufacturer: syz [ 498.207292][ T5348] usb 4-1: SerialNumber: syz [ 498.214823][ T5348] usb 4-1: config 0 descriptor?? [ 498.268070][ T5708] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 498.278392][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.288691][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.302061][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.314933][ T5708] usb 5-1: config 0 descriptor?? [ 498.328539][ T5708] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 498.387482][ T9704] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 498.429640][ T9704] usb 1-1: device descriptor read/8, error -71 [ 498.436110][ T5348] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 498.449274][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.461370][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.474004][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.483312][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.528832][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.546243][T10513] bond3: option mode: unable to set because the bond device has slaves [ 498.558530][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.580211][ T5627] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.599618][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.623377][ T4967] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.652639][T10510] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 498.675305][ T5348] usb 4-1: USB disconnect, device number 12 [ 498.699036][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.708451][ T5708] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 498.716488][ T9704] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 498.723235][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.758244][ T9704] usb 1-1: device descriptor read/8, error -71 [ 498.887929][ T9704] usb usb1-port1: unable to enumerate USB device [ 498.896501][ T5708] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 498.908070][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.921866][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.931863][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.946257][ T5708] usb 2-1: config 0 descriptor?? [ 499.477458][ T5348] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 499.561313][ T5708] usb 2-1: string descriptor 0 read error: -22 [ 499.630087][ T5348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 499.638867][ T5348] usb 4-1: not running at top speed; connect to a high speed hub [ 499.646915][ T5348] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.662765][ T5348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.675122][ T5348] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.687520][ T5348] usb 4-1: string descriptor 0 read error: -22 [ 499.693983][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.710406][ T5348] usb 4-1: 0:2 : does not exist [ 499.772661][T10515] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 499.810097][T10515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.860184][ T5708] uclogic 0003:256C:006D.0033: interface is invalid, ignoring [ 499.875443][ T188] usb 2-1: USB disconnect, device number 14 [ 500.397490][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 500.536560][ T5348] usb 4-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 500.552409][ T5348] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 500.562241][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 500.575813][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.589499][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.599962][ T5348] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.610763][ T9] usb 1-1: config 0 descriptor?? [ 500.622369][ T5348] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 500.631992][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 500.668089][ T5348] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.713312][ T5348] usb 4-1: USB disconnect, device number 13 [ 500.797572][ T5708] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 500.883860][ T9] usb 5-1: USB disconnect, device number 12 [ 500.978121][ T5708] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.991138][ T5708] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 501.001606][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.167509][ T9704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 501.277488][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 501.317436][ T9704] usb 3-1: Using ep0 maxpacket: 32 [ 501.323171][ T9704] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 501.336442][ T9704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.344904][ T9704] usb 3-1: Product: syz [ 501.349241][ T9704] usb 3-1: Manufacturer: syz [ 501.353918][ T9704] usb 3-1: SerialNumber: syz [ 501.361117][ T9704] usb 3-1: config 0 descriptor?? [ 501.370871][ T9704] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 501.378697][ T9704] dvb-usb: bulk message failed: -22 (4/0) [ 501.384485][ T9704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.394854][ T9704] dvb-usb: bulk message failed: -22 (5/0) [ 501.402444][ T9704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.415931][ T9704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.426042][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427590][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 501.436246][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.443803][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 501.446440][ T9704] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 501.460914][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.461291][ T9704] usb 3-1: media controller created [ 501.474128][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.482797][ T9] usb 5-1: Product: syz [ 501.487049][ T9] usb 5-1: Manufacturer: syz [ 501.493204][ T9] usb 5-1: SerialNumber: syz [ 501.499370][ T9704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.510992][ T9] usb 5-1: config 0 descriptor?? [ 501.526457][ T9704] usb 3-1: selecting invalid altsetting 3 [ 501.532352][ T9704] ttusb2: set interface to alts=3 failed [ 501.574026][T10546] dvb-usb: bulk message failed: -22 (7/0) [ 501.580420][T10546] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 501.591030][ T9704] DVB: Unable to find symbol tda10086_attach() [ 501.593053][T10546] ttusb2: i2c transfer failed. [ 501.597253][ T9704] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 501.607219][ T9704] dvb-usb: bulk message failed: -22 (4/0) [ 501.621104][ T9704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.631730][ T9704] dvb-usb: bulk message failed: -22 (5/0) [ 501.634578][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 501.637869][ T9704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.656964][ T9704] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 501.747284][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.750149][ T9] usb 5-1: USB disconnect, device number 13 [ 501.765107][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.935230][ T5348] usb 3-1: USB disconnect, device number 28 [ 501.972132][ T5348] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 502.507489][ T5348] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 502.657470][ T5348] usb 5-1: Using ep0 maxpacket: 16 [ 502.663575][ T5348] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 502.676686][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.684976][ T5348] usb 5-1: Product: syz [ 502.689214][ T5348] usb 5-1: Manufacturer: syz [ 502.693831][ T5348] usb 5-1: SerialNumber: syz [ 502.700984][ T5348] usb 5-1: config 0 descriptor?? [ 502.708606][ T5348] hub 5-1:0.0: bad descriptor, ignoring hub [ 502.714721][ T5348] hub 5-1:0.0: probe with driver hub failed with error -5 [ 502.727061][ T5348] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 502.741107][ T9704] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 502.755225][ T1162] usb 5-1: Failed to submit usb control message: -71 [ 502.764579][ T1162] usb 5-1: unable to send the bmi data to the device: -71 [ 502.774389][ T1162] usb 5-1: unable to get target info from device [ 502.782727][ T1162] usb 5-1: could not get target info (-71) [ 502.789471][ T1162] usb 5-1: could not probe fw (-71) [ 502.913468][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.923542][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.929196][ T9704] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 502.946449][ T9704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.958473][ T9704] usb 3-1: config 0 descriptor?? [ 502.966525][ T9704] cp210x 3-1:0.0: cp210x converter detected [ 503.049847][ T5708] usb 5-1: USB disconnect, device number 14 [ 503.103923][ T5348] usb 1-1: USB disconnect, device number 20 [ 503.366907][ T9704] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 503.467650][ T5708] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 503.537474][ T5348] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 503.569311][ T5676] usb 2-1: USB disconnect, device number 15 [ 503.576068][ T9704] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 503.589398][ T9704] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 503.611334][ T9704] usb 3-1: cp210x converter now attached to ttyUSB0 [ 503.628548][ T9704] usb 3-1: USB disconnect, device number 29 [ 503.646958][ T5708] usb 4-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 503.662965][ T9704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 503.674978][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.686170][ T9704] cp210x 3-1:0.0: device disconnected [ 503.693254][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.701249][ T5348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.714248][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.729392][ T5348] usb 1-1: not running at top speed; connect to a high speed hub [ 503.737948][ T5348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.747537][T10158] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 503.751279][ T5348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.765993][ T5348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.779020][ T5348] usb 1-1: string descriptor 0 read error: -22 [ 503.786513][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.792097][ T5708] usb 4-1: config 0 descriptor?? [ 503.811737][ T5708] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 503.829217][ T5348] usb 1-1: 0:2 : does not exist [ 503.919425][T10158] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.928124][T10158] usb 5-1: not running at top speed; connect to a high speed hub [ 503.936047][T10158] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.946484][T10158] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.957304][ T5676] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 503.966246][T10158] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.979811][T10158] usb 5-1: string descriptor 0 read error: -22 [ 503.986215][T10158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.007047][T10582] bond1: option mode: unable to set because the bond device has slaves [ 504.126607][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.129213][ T5676] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 504.154900][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.161930][ T5676] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 504.189467][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 504.199051][ T5676] usb 2-1: Product: syz [ 504.203331][ T5676] usb 2-1: Manufacturer: syz [ 504.425194][ T5676] usb 2-1: USB disconnect, device number 16 [ 504.685025][ T5348] usb 1-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 504.696838][ T5348] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 504.711511][ T5348] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.723007][ T5348] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 504.746837][ T5348] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.779660][T10158] usb 5-1: 0:2 : does not exist [ 504.785283][ T5348] usb 1-1: USB disconnect, device number 21 [ 504.796765][T10158] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 504.813469][T10158] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 504.821307][T10158] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 504.832459][T10158] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 504.843586][T10158] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.855503][T10158] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 504.887326][T10158] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 504.908203][T10158] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 504.948379][T10158] usb 5-1: USB disconnect, device number 15 [ 505.577696][T10597] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 505.594628][T10597] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 505.737633][ T5348] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 505.899887][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 505.919002][ T5348] usb 1-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 505.938993][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.953019][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.965977][ T5348] usb 1-1: Product: syz [ 505.976466][ T5348] usb 1-1: Manufacturer: syz [ 505.993010][ T5348] usb 1-1: SerialNumber: syz [ 506.016000][ T5348] usb 1-1: config 0 descriptor?? [ 506.230602][ T5676] usb 4-1: USB disconnect, device number 14 [ 506.268542][ T5348] usb 1-1: USB disconnect, device number 22 [ 506.347477][T10158] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 506.427646][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 506.498191][T10158] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 506.509810][T10158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.520845][T10158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.532639][T10158] usb 3-1: config 0 descriptor?? [ 506.544231][T10158] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 506.587625][ T5676] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 506.628580][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 506.638895][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 506.651694][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.663125][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 506.671800][ T9] usb 5-1: Product: syz [ 506.676263][ T9] usb 5-1: Manufacturer: syz [ 506.688115][ T9] hub 5-1:4.0: USB hub found [ 506.727505][ T5348] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 506.738683][ T5676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.749117][ T5676] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 506.769209][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.893316][ T5348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.898463][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.908280][ T5348] usb 2-1: not running at top speed; connect to a high speed hub [ 506.915782][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.921159][ T5348] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.943775][ T5348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.954370][ T5348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.969249][ T5348] usb 2-1: string descriptor 0 read error: -22 [ 506.975809][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.994551][ T5348] usb 2-1: 0:2 : does not exist [ 507.009546][ T9] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 507.057824][ T188] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 507.219153][ T188] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 507.229779][ T188] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 507.245630][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 507.254174][ T188] usb 1-1: Product: syz [ 507.258661][ T188] usb 1-1: Manufacturer: syz [ 507.357731][ T5676] usb 5-1: USB disconnect, device number 16 [ 507.478966][ T188] usb 1-1: USB disconnect, device number 23 [ 507.807297][ T5348] usb 2-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 507.821180][ T5348] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 507.830043][T10627] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1481'. [ 507.839332][T10627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 507.856144][ T5348] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 507.868524][ T5348] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 507.904513][ T5348] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 507.942728][ T5348] usb 2-1: USB disconnect, device number 17 [ 508.257493][ T188] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 508.419505][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 508.428334][ T188] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 508.439114][ T188] usb 5-1: config 3 has an invalid interface number: 249 but max is 0 [ 508.447401][ T188] usb 5-1: config 3 has no interface number 0 [ 508.453572][ T188] usb 5-1: config 3 interface 249 has no altsetting 0 [ 508.464809][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.473185][ T188] usb 5-1: Product: syz [ 508.477541][ T188] usb 5-1: Manufacturer: syz [ 508.482260][ T188] usb 5-1: SerialNumber: syz [ 508.497499][ T5348] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 508.637478][ T5348] usb 1-1: device descriptor read/64, error -71 [ 508.697229][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.708550][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.720727][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.731290][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.887514][ T5348] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 508.944065][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.954434][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.967040][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.978470][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.999231][ T188] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 509.005883][ T188] gspca_sn9c2028: read1 error -71 [ 509.012208][ T188] gspca_sn9c2028: read1 error -71 [ 509.018585][ T5348] usb 1-1: device descriptor read/64, error -71 [ 509.029113][ T188] gspca_sn9c2028: read1 error -71 [ 509.034227][ T188] sn9c2028 5-1:3.249: probe with driver sn9c2028 failed with error -71 [ 509.046413][ T188] usb 5-1: USB disconnect, device number 17 [ 509.133377][ T9] usb 3-1: USB disconnect, device number 30 [ 509.141129][ T5348] usb usb1-port1: attempt power cycle [ 509.299083][ T188] usb 4-1: USB disconnect, device number 15 [ 509.488748][ T5348] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 509.508026][ T5348] usb 1-1: device descriptor read/8, error -71 [ 509.597444][ T5676] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 509.607459][T10158] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 509.747569][ T5348] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 509.749142][ T5676] usb 3-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 509.765849][ T5676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.776794][T10158] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.779851][ T5348] usb 1-1: device descriptor read/8, error -71 [ 509.790699][T10158] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 509.799954][ T5676] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.800001][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.821688][ T188] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 509.831280][T10158] usb 2-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 509.843707][ T5676] usb 3-1: config 0 descriptor?? [ 509.849017][T10158] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 509.861646][ T5676] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 509.869295][T10158] usb 2-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 509.881323][T10158] usb 2-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 509.895932][T10158] usb 2-1: config 1 interface 1 has no altsetting 0 [ 509.906738][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.914876][T10158] usb 2-1: Product: syz [ 509.919560][T10158] usb 2-1: Manufacturer: syz [ 509.924189][T10158] usb 2-1: SerialNumber: syz [ 509.938721][ T5348] usb usb1-port1: unable to enumerate USB device [ 509.977462][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 509.983625][ T188] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 509.994137][ T188] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.002737][ T188] usb 5-1: config 0 has no interface number 0 [ 510.009151][ T188] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 510.019995][ T188] usb 5-1: config 0 interface 1 has no altsetting 0 [ 510.029303][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.039720][ T188] usb 5-1: Product: syz [ 510.043923][ T188] usb 5-1: Manufacturer: syz [ 510.049176][ T188] usb 5-1: SerialNumber: syz [ 510.064735][ T188] usb 5-1: config 0 descriptor?? [ 510.066860][T10642] bond2: option mode: unable to set because the bond device has slaves [ 510.197737][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.222333][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.303144][ T188] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 510.322880][ T188] cx231xx 5-1:0.1: Failed to read PCB config [ 510.335126][ T188] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 510.359081][ T188] usb 5-1: USB disconnect, device number 18 [ 510.633839][T10158] usb 2-1: unit 5 not found! [ 510.734315][T10158] usb 2-1: USB disconnect, device number 18 [ 510.742532][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.803324][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.847963][ T188] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 510.871102][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.968446][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.017629][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 511.025688][ T188] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 511.044992][ T188] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.056123][ T188] usb 5-1: config 0 has no interface number 0 [ 511.062778][ T188] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 511.074603][ T188] usb 5-1: config 0 interface 1 has no altsetting 0 [ 511.088930][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.112188][ T188] usb 5-1: Product: syz [ 511.116436][ T188] usb 5-1: Manufacturer: syz [ 511.119726][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.121617][ T188] usb 5-1: SerialNumber: syz [ 511.134488][ T188] usb 5-1: config 0 descriptor?? [ 511.146060][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.154090][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.165641][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.174715][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.186655][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.358462][ T188] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 511.387140][ T188] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 511.520515][ T188] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 511.531004][ T188] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 511.548443][ T188] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 511.564154][ T188] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 511.583186][ T188] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 511.594820][ T188] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 511.621766][ T188] i2c i2c-2: Added multiplexed i2c bus 4 [ 511.630641][ T188] i2c i2c-2: Added multiplexed i2c bus 5 [ 511.636829][ T188] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 511.654849][ T188] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 511.707487][ T5676] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 511.722832][ T1162] bridge_slave_0: left allmulticast mode [ 511.729079][ T1162] bridge_slave_0: left promiscuous mode [ 511.739304][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.751031][ T188] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -32 [ 511.868385][ T5676] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 511.888074][ T5676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.899274][ T5676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.909461][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.926888][ T5676] usb 2-1: config 0 descriptor?? [ 511.932263][T10158] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 511.991055][ T1162] bond1 (unregistering): (slave geneve2): Releasing active interface [ 512.003967][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.016812][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.073503][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.095819][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.105700][T10158] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.117596][ T1162] bond0 (unregistering): Released all slaves [ 512.122044][T10158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.143546][ T1162] bond1 (unregistering): Released all slaves [ 512.152559][T10158] usb 1-1: config 0 descriptor?? [ 512.176682][T10158] cp210x 1-1:0.0: cp210x converter detected [ 512.194500][ T1162] bond2 (unregistering): Released all slaves [ 512.226561][ T1162] bond3 (unregistering): Released all slaves [ 512.366433][ T188] usb 3-1: USB disconnect, device number 31 [ 512.375764][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 512.396863][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 512.404463][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 512.413053][ T5676] usbhid 2-1:0.0: can't add hid device: -32 [ 512.419700][ T5676] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 512.449751][ T5676] usb 2-1: USB disconnect, device number 19 [ 512.988619][T10158] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 512.998607][T10158] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 513.021354][T10158] usb 1-1: cp210x converter now attached to ttyUSB0 [ 513.032539][ T1162] hsr_slave_0: left promiscuous mode [ 513.041290][T10158] usb 1-1: USB disconnect, device number 28 [ 513.052876][T10158] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.060756][ T1162] hsr_slave_1: left promiscuous mode [ 513.072444][T10158] cp210x 1-1:0.0: device disconnected [ 513.132902][ T1162] veth1_macvtap: left promiscuous mode [ 513.141517][ T1162] veth0_macvtap: left promiscuous mode [ 513.147293][ T1162] veth1_vlan: left promiscuous mode [ 513.152834][ T1162] veth0_vlan: left promiscuous mode [ 513.204497][ T9] usb 5-1: USB disconnect, device number 19 [ 513.257446][ T4932] Bluetooth: hci1: command tx timeout [ 513.397467][ T5676] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 513.579031][ T5676] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.612955][ T5676] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 513.643392][ T5676] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.677466][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 513.688299][ T5676] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 513.737566][ T5676] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.798910][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.844644][ T5676] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.851721][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 513.855328][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.881868][ T5676] usb 3-1: invalid MIDI out EP 0 [ 513.899241][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 513.913920][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.950332][ T188] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 513.964707][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 513.980969][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 513.992613][ T9] usb 5-1: Product: syz [ 514.014802][ T9] usb 5-1: Manufacturer: syz [ 514.063935][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.079824][ T9] hub 5-1:4.0: USB hub found [ 514.107496][ T188] usb 1-1: device descriptor read/64, error -71 [ 514.136278][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.292212][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.322998][ T5676] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 514.339666][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.399258][ T188] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 514.431005][ T9] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 514.453902][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 514.524022][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.537462][ T188] usb 1-1: device descriptor read/64, error -71 [ 514.543794][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.569221][T10658] bridge_slave_0: entered allmulticast mode [ 514.590979][T10658] bridge_slave_0: entered promiscuous mode [ 514.610053][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.628086][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.648590][T10658] bridge_slave_1: entered allmulticast mode [ 514.657908][ T188] usb usb1-port1: attempt power cycle [ 514.668704][T10658] bridge_slave_1: entered promiscuous mode [ 514.780138][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.821942][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.929723][T10658] team0: Port device team_slave_0 added [ 514.947990][T10158] usb 5-1: USB disconnect, device number 20 [ 514.958890][T10658] team0: Port device team_slave_1 added [ 515.057548][ T188] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 515.069135][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.076712][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.103862][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.130229][ T188] usb 1-1: device descriptor read/8, error -71 [ 515.269501][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.276981][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.322791][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.342709][ T4932] Bluetooth: hci1: command tx timeout [ 515.408099][ T188] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 515.428833][ T188] usb 1-1: device descriptor read/8, error -71 [ 515.557943][ T188] usb usb1-port1: unable to enumerate USB device [ 515.674093][T10658] hsr_slave_0: entered promiscuous mode [ 515.700518][T10658] hsr_slave_1: entered promiscuous mode [ 515.708362][T10658] debugfs: 'hsr0' already exists in 'hsr' [ 515.716306][T10658] Cannot create hsr debugfs directory [ 515.739067][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.750221][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.760600][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.768803][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.788674][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.027822][ T188] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 516.192774][ T5348] usb 3-1: USB disconnect, device number 32 [ 516.199904][ T188] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 516.235005][ T188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.252738][ T188] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 516.267801][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.286984][ T188] usb 5-1: config 0 descriptor?? [ 516.302557][ T188] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 516.386990][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 516.524181][T10719] bond3: option mode: unable to set because the bond device has slaves [ 516.679149][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.722053][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.912927][T10658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.954857][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.011996][T10658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 517.053119][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.077870][ T188] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 517.131561][T10658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.165521][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.221141][ T1162] bridge_slave_0: left allmulticast mode [ 517.241616][ T1162] bridge_slave_0: left promiscuous mode [ 517.248602][ T188] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 517.249978][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.267431][ T5348] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 517.289194][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.311312][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.321319][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.340116][ T188] usb 1-1: config 0 descriptor?? [ 517.417630][ T5619] Bluetooth: hci1: command tx timeout [ 517.460502][ T5348] usb 3-1: Using ep0 maxpacket: 32 [ 517.466604][ T5348] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 517.484680][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.493619][ T5348] usb 3-1: Product: syz [ 517.501797][ T5348] usb 3-1: Manufacturer: syz [ 517.506759][ T5348] usb 3-1: SerialNumber: syz [ 517.531793][ T5348] usb 3-1: config 0 descriptor?? [ 517.551739][ T5348] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 517.565193][ T5348] dvb-usb: bulk message failed: -22 (4/0) [ 517.575233][ T5348] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.588485][ T5348] dvb-usb: bulk message failed: -22 (5/0) [ 517.594344][ T5348] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.612538][ T5348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.624719][ T5348] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 517.633545][ T5348] usb 3-1: media controller created [ 517.656538][ T1162] bond1 (unregistering): (slave geneve2): Releasing active interface [ 517.665467][ T5348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.697924][ T5348] usb 3-1: selecting invalid altsetting 3 [ 517.703790][ T5348] ttusb2: set interface to alts=3 failed [ 517.712028][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.730716][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.742115][ T1162] bond0 (unregistering): Released all slaves [ 517.752427][T10750] dvb-usb: bulk message failed: -22 (7/0) [ 517.763503][ T1162] bond1 (unregistering): Released all slaves [ 517.769903][T10750] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 517.787162][T10750] ttusb2: i2c transfer failed. [ 517.796933][ T188] usbhid 1-1:0.0: can't add hid device: -71 [ 517.803119][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 517.819588][ T188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.827745][ T5619] Bluetooth: hci3: command tx timeout [ 517.840839][ T1162] bond2 (unregistering): Released all slaves [ 517.844001][ T5348] DVB: Unable to find symbol tda10086_attach() [ 517.857004][ T188] usb 1-1: USB disconnect, device number 33 [ 517.863476][ T5348] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 517.872846][ T5348] dvb-usb: bulk message failed: -22 (4/0) [ 517.880948][ T5348] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.892297][ T5348] dvb-usb: bulk message failed: -22 (5/0) [ 517.902075][ T5348] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.912332][ T5348] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 517.939591][ T1162] bond3 (unregistering): Released all slaves [ 518.020120][ T1162] bond4 (unregistering): Released all slaves [ 518.077138][T10658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 518.096100][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.128105][T10760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.158049][T10760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.169978][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 518.210025][ T9] usb 3-1: USB disconnect, device number 33 [ 518.275103][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 518.392089][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.402357][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.418633][T10724] bridge_slave_0: entered allmulticast mode [ 518.426432][T10724] bridge_slave_0: entered promiscuous mode [ 518.450818][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.464092][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.472789][T10724] bridge_slave_1: entered allmulticast mode [ 518.480864][T10724] bridge_slave_1: entered promiscuous mode [ 518.576671][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.591379][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.612633][ T1162] hsr_slave_0: left promiscuous mode [ 518.621613][ T1162] hsr_slave_1: left promiscuous mode [ 518.657742][ T5683] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 518.713190][ T188] usb 5-1: USB disconnect, device number 21 [ 518.832875][ T5683] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 518.855397][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.876086][ T5683] usb 1-1: config 0 descriptor?? [ 518.896109][ T5683] cp210x 1-1:0.0: cp210x converter detected [ 519.008934][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 519.042473][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 519.147669][ T188] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 519.158334][ T5676] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 519.298557][T10724] team0: Port device team_slave_0 added [ 519.312208][T10724] team0: Port device team_slave_1 added [ 519.322444][ T5676] usb 3-1: unable to get BOS descriptor or descriptor too short [ 519.338461][ T188] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 519.356393][ T5676] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 519.364562][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.382559][ T5676] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 519.389977][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.402731][ T5676] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 519.402781][ T5676] usb 3-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 519.423906][ T5676] usb 3-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 519.463149][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.467679][ T5676] usb 3-1: config 1 interface 1 has no altsetting 0 [ 519.491384][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.500333][ T5619] Bluetooth: hci1: command tx timeout [ 519.506517][ T5676] usb 3-1: Product: syz [ 519.511066][ T5676] usb 3-1: Manufacturer: syz [ 519.515714][ T5676] usb 3-1: SerialNumber: syz [ 519.528904][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 519.536947][ T188] usb 5-1: config 0 descriptor?? [ 519.559077][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.566633][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.617397][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.633478][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.641173][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.669755][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.802451][ T5683] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 519.818966][ T5683] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 519.834928][ T5683] usb 1-1: cp210x converter now attached to ttyUSB0 [ 519.856230][ T5683] usb 1-1: USB disconnect, device number 34 [ 519.863515][ T1162] IPVS: stop unused estimator thread 0... [ 519.893351][ T5683] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.902303][ T5619] Bluetooth: hci3: command tx timeout [ 519.916566][ T5683] cp210x 1-1:0.0: device disconnected [ 519.948000][T10724] hsr_slave_0: entered promiscuous mode [ 519.955020][T10724] hsr_slave_1: entered promiscuous mode [ 519.968944][T10724] debugfs: 'hsr0' already exists in 'hsr' [ 519.974759][T10724] Cannot create hsr debugfs directory [ 520.097168][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.174986][ T188] usb 5-1: string descriptor 0 read error: -22 [ 520.376365][T10780] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 520.503979][T10780] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.520764][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.590591][ T188] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 520.609051][ T188] usb 5-1: USB disconnect, device number 22 [ 520.646844][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.654079][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.750349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.757611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.978537][ T5683] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 521.050077][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.061269][T10724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 521.107111][ T5676] usb 3-1: unit 5 not found! [ 521.114460][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.125559][T10724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.140517][ T5683] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 521.150148][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.162948][ T5683] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.183325][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 521.200665][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 521.218228][ T5683] usb 1-1: Product: syz [ 521.230290][T10724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.242938][ T5683] usb 1-1: Manufacturer: syz [ 521.277780][ T5676] usb 3-1: USB disconnect, device number 34 [ 521.291253][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.320723][T10724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 521.361815][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.379005][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.499140][ T5705] usb 1-1: USB disconnect, device number 35 [ 521.540855][T10658] veth0_vlan: entered promiscuous mode [ 521.588702][T10658] veth1_vlan: entered promiscuous mode [ 521.650998][T10658] veth0_macvtap: entered promiscuous mode [ 521.665272][T10658] veth1_macvtap: entered promiscuous mode [ 521.688089][ T5676] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 521.719112][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.736142][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.754090][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.761633][T10158] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 521.811908][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.838674][ T5676] usb 3-1: device descriptor read/64, error -71 [ 521.863683][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.870885][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.918487][T10158] usb 5-1: Using ep0 maxpacket: 32 [ 521.929745][T10158] usb 5-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 521.945505][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.952695][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.964437][T10158] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.979441][ T5619] Bluetooth: hci3: command tx timeout [ 521.993783][T10158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.009561][T10158] usb 5-1: Product: syz [ 522.017701][T10158] usb 5-1: Manufacturer: syz [ 522.026655][T10158] usb 5-1: SerialNumber: syz [ 522.038243][T10158] usb 5-1: config 0 descriptor?? [ 522.049082][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.061220][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.087588][ T5676] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 522.175664][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.193394][ T5806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.205184][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.229082][ T5676] usb 3-1: device descriptor read/64, error -71 [ 522.229114][ T5806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.260292][ T5806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.279153][T10158] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 522.288211][ T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.333613][T10158] usb 5-1: USB disconnect, device number 23 [ 522.350791][ T5676] usb usb3-port1: attempt power cycle [ 522.377873][ T188] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 522.392610][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.534299][T10724] veth0_vlan: entered promiscuous mode [ 522.558620][ T188] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 522.578974][T10724] veth1_vlan: entered promiscuous mode [ 522.585202][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.615400][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.642776][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.665166][ T188] usb 1-1: config 0 descriptor?? [ 522.716484][T10724] veth0_macvtap: entered promiscuous mode [ 522.725577][ T5676] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 522.748056][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.758399][T10724] veth1_macvtap: entered promiscuous mode [ 522.778366][ T5676] usb 3-1: device descriptor read/8, error -71 [ 522.817239][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.860985][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.938804][ T5705] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 522.946858][ T1086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.029938][ T5676] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 523.043523][ T5805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.070243][ T5805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.088334][ T5676] usb 3-1: device descriptor read/8, error -71 [ 523.099123][ T83] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.126440][ T188] usbhid 1-1:0.0: can't add hid device: -71 [ 523.146570][ T188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 523.162885][ T5705] usb 6-1: unable to get BOS descriptor or descriptor too short [ 523.188186][ T188] usb 1-1: USB disconnect, device number 36 [ 523.199072][ T5705] usb 6-1: not running at top speed; connect to a high speed hub [ 523.211980][ T5792] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 523.227464][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.236965][ T5676] usb usb3-port1: unable to enumerate USB device [ 523.238063][ T5705] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.255218][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.295253][ T5705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.333594][ T5705] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.373605][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.381936][ T5705] usb 6-1: string descriptor 0 read error: -22 [ 523.396633][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.402591][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.419482][ T5792] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 523.443113][ T5792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.464254][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.480625][ T5705] usb 6-1: 0:2 : does not exist [ 523.508857][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.538835][ T5792] usb 5-1: config 0 descriptor?? [ 523.569127][ T5792] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 523.779166][T10853] bond3: option mode: unable to set because the bond device has slaves [ 523.941479][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.961867][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.047497][ T5792] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 524.058154][ T5619] Bluetooth: hci3: command tx timeout [ 524.093930][T10878] syzkaller1: entered promiscuous mode [ 524.099941][T10878] syzkaller1: entered allmulticast mode [ 524.111486][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 524.208566][ T5792] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 524.226498][ T5792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 524.241880][ T5792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 524.255765][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 524.264673][ T5792] usb 7-1: Product: syz [ 524.272184][ T5792] usb 7-1: Manufacturer: syz [ 524.295916][ T5792] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input48 [ 524.345369][ T5705] usb 6-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 524.366398][ T5705] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 524.388836][ T5705] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 524.403454][ T5705] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 524.494089][ T5705] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 524.577768][ T5348] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 524.604280][ T5705] usb 6-1: USB disconnect, device number 2 [ 524.649204][ T5792] usb 7-1: USB disconnect, device number 2 [ 524.759891][ T5348] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 524.808519][ T5348] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 524.827181][ T5348] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.848216][ T5683] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 524.862010][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.881593][ T5348] usb 1-1: Product: syz [ 524.891245][ T5348] usb 1-1: Manufacturer: syz [ 524.901418][ T5348] usb 1-1: SerialNumber: syz [ 524.930797][ T5348] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 525.039584][ T5683] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 525.051047][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.067703][ T5792] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 525.077887][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.099937][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.124804][ T5348] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -32 [ 525.139915][ T5683] usb 3-1: config 0 descriptor?? [ 525.238773][ T5792] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 525.263284][ T5348] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 525.277257][ T5792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 525.292517][ T5348] usb 1-1: USB disconnect, device number 37 [ 525.312062][ T5792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 525.358040][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 525.379381][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.379502][ T5792] usb 7-1: Product: syz [ 525.439791][ T5792] usb 7-1: Manufacturer: syz [ 525.465599][ T5792] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input49 [ 525.475745][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 525.657944][ T9704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 525.793112][T10910] syzkaller0: entered promiscuous mode [ 525.798880][T10910] syzkaller0: entered allmulticast mode [ 525.803131][ T5683] usb 3-1: string descriptor 0 read error: -22 [ 525.822503][ T9704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.839142][ T9704] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 525.856557][ T9704] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 525.880583][ T9704] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 525.891808][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 525.901878][ T9704] usb 6-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 525.916094][ T9704] usb 6-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 525.959131][ T5792] usb 7-1: USB disconnect, device number 3 [ 525.971231][ T9704] usb 6-1: config 1 interface 1 has no altsetting 0 [ 525.987955][ T5676] usb 5-1: USB disconnect, device number 24 [ 526.003986][ T9704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.011973][T10888] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 526.058056][ T9704] usb 6-1: Product: syz [ 526.066508][ T9704] usb 6-1: Manufacturer: syz [ 526.087264][ T9704] usb 6-1: SerialNumber: syz [ 526.280751][ T5683] uclogic 0003:256C:006D.0035: interface is invalid, ignoring [ 526.419659][ T5676] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 526.599170][ T5676] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 526.623112][ T5676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 526.657575][ T5676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 526.694863][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 526.719813][ T5676] usb 5-1: Product: syz [ 526.724104][ T5676] usb 5-1: Manufacturer: syz [ 526.756745][ T5676] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input50 [ 527.026955][ T5676] usb 5-1: USB disconnect, device number 25 [ 527.540934][ T5676] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 527.703854][ T5676] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 527.719250][ T5676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 527.731146][ T5676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 527.745898][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 527.755600][ T5676] usb 5-1: Product: syz [ 527.760117][ T5676] usb 5-1: Manufacturer: syz [ 527.795749][ T5676] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input51 [ 528.284442][ T5676] usb 5-1: USB disconnect, device number 26 [ 528.666929][T10888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 528.830456][ T5676] usb 3-1: USB disconnect, device number 39 [ 529.030284][T10946] syzkaller1: entered promiscuous mode [ 529.038580][T10946] syzkaller1: entered allmulticast mode [ 529.158936][ T5683] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 529.329448][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.340075][ T9704] usb 6-1: unit 5 not found! [ 529.348510][ T5676] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 529.362899][ T5683] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 529.373465][ T5683] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 529.385431][ T5683] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 529.394655][ T5683] usb 5-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 529.405900][ T5683] usb 5-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 529.419686][ T5683] usb 5-1: config 1 interface 1 has no altsetting 0 [ 529.429217][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.437503][ T5683] usb 5-1: Product: syz [ 529.441715][ T5683] usb 5-1: Manufacturer: syz [ 529.446337][ T5683] usb 5-1: SerialNumber: syz [ 529.538051][ T5676] usb 1-1: device descriptor read/64, error -71 [ 529.582107][ T9704] usb 6-1: USB disconnect, device number 3 [ 529.670703][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.717424][ T5792] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 529.828920][ T5676] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 529.909520][ T5792] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.931676][ T5792] usb 3-1: not running at top speed; connect to a high speed hub [ 529.947511][ T5792] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.962214][T10945] netlink: 'syz.6.1535': attribute type 4 has an invalid length. [ 529.971777][ T5792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.982497][ T5676] usb 1-1: device descriptor read/64, error -71 [ 529.997393][ T5792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.014895][T10945] netlink: 'syz.6.1535': attribute type 4 has an invalid length. [ 530.024368][ T5792] usb 3-1: string descriptor 0 read error: -22 [ 530.042636][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.089984][ T5792] usb 3-1: 0:2 : does not exist [ 530.107672][ T5676] usb usb1-port1: attempt power cycle [ 530.449102][ T5676] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 530.467448][ T5708] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 530.515564][ T5676] usb 1-1: device descriptor read/8, error -71 [ 530.637711][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 530.657605][ T5708] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 530.679354][ T5708] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.701821][ T5708] usb 6-1: config 0 has no interface number 0 [ 530.720519][ T5708] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 530.733989][ T5708] usb 6-1: config 0 interface 1 has no altsetting 0 [ 530.748749][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.761554][ T5676] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 530.769450][ T5708] usb 6-1: Product: syz [ 530.774017][ T5708] usb 6-1: Manufacturer: syz [ 530.779563][ T5708] usb 6-1: SerialNumber: syz [ 530.788990][ T5708] usb 6-1: config 0 descriptor?? [ 530.797990][ T5676] usb 1-1: device descriptor read/8, error -71 [ 530.908028][ T5676] usb usb1-port1: unable to enumerate USB device [ 530.957510][ T188] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 531.010681][ T5708] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 531.022039][ T5708] cx231xx 6-1:0.1: Failed to read PCB config [ 531.030774][ T5792] usb 3-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 531.040527][ T5708] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 531.053290][ T5792] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 531.061749][ T5708] usb 6-1: USB disconnect, device number 4 [ 531.080190][ T5792] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 531.092799][ T5792] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 531.124800][ T5792] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 531.138187][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 531.149948][ T188] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 531.171501][ T5792] usb 3-1: USB disconnect, device number 40 [ 531.172310][ T188] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.186883][ T5683] usb 5-1: unit 5 not found! [ 531.207491][ T188] usb 7-1: config 0 has no interface number 0 [ 531.224678][ T188] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 531.250654][ T188] usb 7-1: config 0 interface 1 has no altsetting 0 [ 531.264528][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.276687][ T5683] usb 5-1: USB disconnect, device number 27 [ 531.282912][ T188] usb 7-1: Product: syz [ 531.288696][ T188] usb 7-1: Manufacturer: syz [ 531.293353][ T188] usb 7-1: SerialNumber: syz [ 531.311143][ T188] usb 7-1: config 0 descriptor?? [ 531.396641][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 531.541051][ T188] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 531.548351][ T5708] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 531.564260][ T188] cx231xx 7-1:0.1: Failed to read PCB config [ 531.579520][ T188] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 531.614861][ T188] usb 7-1: USB disconnect, device number 4 [ 531.718650][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 531.729259][ T5708] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 531.760924][ T5708] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.777484][ T5708] usb 6-1: config 0 has no interface number 0 [ 531.787428][ T5708] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 531.817720][ T5708] usb 6-1: config 0 interface 1 has no altsetting 0 [ 531.831845][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.842026][ T5708] usb 6-1: Product: syz [ 531.846221][ T5708] usb 6-1: Manufacturer: syz [ 531.850892][ T5708] usb 6-1: SerialNumber: syz [ 531.862292][ T5708] usb 6-1: config 0 descriptor?? [ 531.941941][T10978] syzkaller0: entered promiscuous mode [ 531.947595][T10978] syzkaller0: entered allmulticast mode [ 532.092958][ T5708] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 532.115981][ T5708] cx231xx 6-1:0.1: Failed to read PCB config [ 532.127494][ T188] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 532.135420][ T5708] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 532.176403][ T5708] usb 6-1: USB disconnect, device number 5 [ 532.307892][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 532.322373][ T188] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 532.345570][ T188] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.362826][ T188] usb 7-1: config 0 has no interface number 0 [ 532.371618][ T188] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 532.383782][ T188] usb 7-1: config 0 interface 1 has no altsetting 0 [ 532.395843][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.404253][ T188] usb 7-1: Product: syz [ 532.409418][ T188] usb 7-1: Manufacturer: syz [ 532.414329][ T188] usb 7-1: SerialNumber: syz [ 532.431367][ T188] usb 7-1: config 0 descriptor?? [ 532.580248][ T5792] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 532.655813][ T188] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 532.667679][ T188] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 532.750493][ T5792] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 532.775997][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 532.787971][ T188] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 532.788527][ T188] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 532.789140][ T188] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 532.798646][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.815609][ T188] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 532.832710][ T188] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 532.842063][ T188] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -32 [ 532.847069][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.888810][ T5792] usb 1-1: config 0 descriptor?? [ 532.896674][ T188] i2c i2c-2: Added multiplexed i2c bus 4 [ 532.905718][ T188] i2c i2c-2: Added multiplexed i2c bus 5 [ 532.920164][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.929498][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.946910][ T188] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 532.964467][ T188] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 533.015065][ T188] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 533.031641][ T188] usb 7-1: USB disconnect, device number 5 [ 533.539432][ T5792] usb 1-1: string descriptor 0 read error: -22 [ 533.761617][T10981] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 533.956090][ T5792] uclogic 0003:256C:006D.0036: interface is invalid, ignoring [ 534.373330][T10987] syzkaller1: entered promiscuous mode [ 534.381263][T10987] syzkaller1: entered allmulticast mode [ 534.477676][T10981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.526697][ T5792] usb 1-1: USB disconnect, device number 42 [ 534.679667][ T188] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 534.748393][ T5676] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 534.759507][ T5705] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 534.860989][ T188] usb 6-1: unable to get BOS descriptor or descriptor too short [ 534.870600][ T188] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 534.885261][ T188] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 534.904781][ T188] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 534.912609][ T5676] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 534.914651][ T188] usb 6-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 534.936720][ T188] usb 6-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 534.952266][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 534.958475][ T188] usb 6-1: config 1 interface 1 has no altsetting 0 [ 534.960595][ T5676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.966396][ T5705] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 534.992696][ T5705] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.001835][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.016938][ T5676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.021316][ T188] usb 6-1: Product: syz [ 535.031146][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.055359][ T5705] usb 5-1: config 0 has no interface number 0 [ 535.067418][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 535.071091][ T5676] usb 3-1: config 0 descriptor?? [ 535.076157][ T188] usb 6-1: Manufacturer: syz [ 535.100742][ T5705] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 535.123515][ T188] usb 6-1: SerialNumber: syz [ 535.141420][ T5705] usb 5-1: config 0 interface 1 has no altsetting 0 [ 535.173938][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.207659][ T5705] usb 5-1: Product: syz [ 535.218296][ T5705] usb 5-1: Manufacturer: syz [ 535.225461][ T5705] usb 5-1: SerialNumber: syz [ 535.236601][ T5705] usb 5-1: config 0 descriptor?? [ 535.323577][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.328587][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 535.363494][ T9] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 535.413344][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.476474][ T5705] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 535.489544][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 535.533004][ T5676] usbhid 3-1:0.0: can't add hid device: -71 [ 535.551132][ T5676] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.567695][ T5705] cx231xx 5-1:0.1: Failed to read PCB config [ 535.573823][ T9] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.592703][ T5676] usb 3-1: USB disconnect, device number 41 [ 535.610987][ T5705] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 535.648598][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.663776][ T5705] usb 5-1: USB disconnect, device number 28 [ 535.746906][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.766021][ T9] usb 7-1: invalid MIDI out EP 0 [ 535.928183][ T5683] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 536.057152][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.118446][ T5683] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 536.163514][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 536.165512][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.187572][ T5705] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 536.196371][ T5683] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 536.244018][ T5683] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.282483][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.297260][ T5683] usb 1-1: Product: syz [ 536.309935][ T5683] usb 1-1: Manufacturer: syz [ 536.319093][ T5683] usb 1-1: SerialNumber: syz [ 536.356711][ T5683] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 536.379419][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 536.400568][ T5705] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 536.420062][ T5705] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.468013][ T5705] usb 5-1: config 0 has no interface number 0 [ 536.523091][ T5705] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 536.608082][ T5683] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -32 [ 536.620263][ T5705] usb 5-1: config 0 interface 1 has no altsetting 0 [ 536.675972][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.718735][ T5705] usb 5-1: Product: syz [ 536.740401][ T5705] usb 5-1: Manufacturer: syz [ 536.761858][ T5705] usb 5-1: SerialNumber: syz [ 536.797079][ T5705] usb 5-1: config 0 descriptor?? [ 536.815904][ T5683] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 536.865504][ T5683] usb 1-1: USB disconnect, device number 43 [ 536.887442][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 536.924702][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.051070][ T5705] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 537.081462][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.094285][ T5705] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 537.105778][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 537.118657][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.131478][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.144941][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.159069][ T9] usb 3-1: string descriptor 0 read error: -22 [ 537.165969][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.218197][ T9] usb 3-1: 0:2 : does not exist [ 537.238590][ T5705] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 537.256212][ T5705] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 537.296530][ T5705] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 537.319472][ T5705] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 537.336770][ T5705] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 537.356685][ T5705] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71 [ 537.420064][ T5705] i2c i2c-2: Added multiplexed i2c bus 4 [ 537.487636][ T5705] i2c i2c-2: Added multiplexed i2c bus 5 [ 537.495497][ T5705] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 537.519959][ T5705] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 537.648540][ T5683] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 537.712247][ T5705] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 537.745091][ T5705] usb 5-1: USB disconnect, device number 29 [ 537.818783][ T5683] usb 1-1: device descriptor read/64, error -71 [ 538.107551][ T5683] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 538.130907][ T9] usb 3-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 538.178729][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 538.218594][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 538.272999][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 538.287611][ T5683] usb 1-1: device descriptor read/64, error -71 [ 538.371037][ T5792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 538.396563][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 538.422668][ T5683] usb usb1-port1: attempt power cycle [ 538.558369][ T188] usb 6-1: unit 5 not found! [ 538.575169][ T5792] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 538.579358][ T9] usb 3-1: USB disconnect, device number 42 [ 538.611736][ T5792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 538.640038][ T5792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 538.674577][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 538.693803][ T5792] usb 5-1: Product: syz [ 538.709468][ T5792] usb 5-1: Manufacturer: syz [ 538.755417][ T5792] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input52 [ 538.787676][ T5683] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 538.866647][ T188] usb 6-1: USB disconnect, device number 6 [ 538.877167][ T5683] usb 1-1: device descriptor read/8, error -71 [ 538.928515][ T5705] usb 7-1: USB disconnect, device number 6 [ 539.053943][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 539.104374][ T5792] usb 5-1: USB disconnect, device number 30 [ 539.112700][T11073] syzkaller1: entered promiscuous mode [ 539.124092][T11073] syzkaller1: entered allmulticast mode [ 539.137585][ T5683] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 539.168233][ T5683] usb 1-1: device descriptor read/8, error -71 [ 539.288581][ T5683] usb usb1-port1: unable to enumerate USB device [ 539.317494][ T188] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 539.500188][ T188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.513174][ T188] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 539.534642][ T188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.549194][ T188] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.573628][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.581228][ T5792] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 539.612856][ T188] usbtmc 6-1:16.0: bulk endpoints not found [ 539.761466][ T5792] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 539.786692][ T5792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 539.811968][ T5792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 539.836926][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 539.846434][ T5792] usb 5-1: Product: syz [ 539.852540][ T5792] usb 5-1: Manufacturer: syz [ 539.882575][ T5792] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input53 [ 540.110592][ T5792] usb 5-1: USB disconnect, device number 31 [ 540.229666][ T5683] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 540.400515][ T5683] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 540.414815][ T5683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.426053][ T5683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.437529][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.453110][ T5683] usb 7-1: config 0 descriptor?? [ 540.738594][ T5792] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 540.880206][ T5683] usbhid 7-1:0.0: can't add hid device: -71 [ 540.891636][ T5683] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 540.902026][ T5792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.911584][ T5792] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 540.926182][ T5683] usb 7-1: USB disconnect, device number 7 [ 540.937035][ T5792] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 540.957932][ T5792] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.977066][ T5792] usb 1-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 540.989896][ T5792] usb 1-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 541.004429][ T5792] usb 1-1: config 1 interface 1 has no altsetting 0 [ 541.015664][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.024235][ T5792] usb 1-1: Product: syz [ 541.030282][ T5792] usb 1-1: Manufacturer: syz [ 541.035030][ T5792] usb 1-1: SerialNumber: syz [ 541.637267][ T5705] usb 6-1: USB disconnect, device number 7 [ 541.648292][ T5683] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 541.662292][ T188] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 541.857552][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 541.868543][ T188] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 541.881062][ T5683] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 541.904993][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.920166][ T5683] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.945557][ T5683] usb 3-1: config 0 has no interface number 0 [ 541.962448][ T188] usb 5-1: config 0 descriptor?? [ 541.974195][ T5683] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 541.999895][ T188] cp210x 5-1:0.0: cp210x converter detected [ 542.009026][T10158] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 542.022863][ T5683] usb 3-1: config 0 interface 1 has no altsetting 0 [ 542.026123][ T5792] usb 1-1: unit 5 not found! [ 542.045146][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.067405][ T5683] usb 3-1: Product: syz [ 542.079377][ T5683] usb 3-1: Manufacturer: syz [ 542.087401][ T5683] usb 3-1: SerialNumber: syz [ 542.109404][ T5683] usb 3-1: config 0 descriptor?? [ 542.165780][ T5792] usb 1-1: USB disconnect, device number 48 [ 542.179156][ T5676] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 542.212655][T10158] usb 7-1: unable to get BOS descriptor or descriptor too short [ 542.249810][T10158] usb 7-1: not running at top speed; connect to a high speed hub [ 542.271419][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.291031][T10158] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.301945][T10158] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.331790][T10158] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.350568][T10158] usb 7-1: string descriptor 0 read error: -22 [ 542.357075][T10158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.395780][ T5676] usb 6-1: unable to get BOS descriptor or descriptor too short [ 542.400645][ T188] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 542.418645][ T5683] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 542.422654][ T5676] usb 6-1: not running at top speed; connect to a high speed hub [ 542.446171][T10158] usb 7-1: 0:2 : does not exist [ 542.453969][ T5676] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.456026][ T5683] cx231xx 3-1:0.1: Failed to read PCB config [ 542.474956][ T5676] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.497463][ T5683] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 542.517211][ T5676] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.537173][ T5683] usb 3-1: USB disconnect, device number 43 [ 542.551565][ T5676] usb 6-1: string descriptor 0 read error: -22 [ 542.576629][ T5676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.624219][ T188] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 542.654241][ T188] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 542.731452][ T188] usb 5-1: cp210x converter now attached to ttyUSB0 [ 542.795940][ T188] usb 5-1: USB disconnect, device number 32 [ 542.856334][ T188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 542.895655][ T188] cp210x 5-1:0.0: device disconnected [ 543.005054][ T5683] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 543.179668][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 543.189264][ T5683] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 543.214014][ T5683] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.229287][ T5683] usb 3-1: config 0 has no interface number 0 [ 543.239258][ T5683] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 543.251766][ T5683] usb 3-1: config 0 interface 1 has no altsetting 0 [ 543.272669][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.283088][ T5683] usb 3-1: Product: syz [ 543.288909][ T5683] usb 3-1: Manufacturer: syz [ 543.294757][ T5683] usb 3-1: SerialNumber: syz [ 543.307821][T11137] syzkaller1: entered promiscuous mode [ 543.314762][ T5683] usb 3-1: config 0 descriptor?? [ 543.338251][T11137] syzkaller1: entered allmulticast mode [ 543.420135][T10158] usb 7-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 543.452733][T10158] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 543.474723][T10158] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 543.495120][T10158] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 543.538197][T10158] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 543.562965][ T5683] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 543.596959][ T5683] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 543.646688][ T5676] usb 6-1: 0:2 : does not exist [ 543.662671][T10158] usb 7-1: USB disconnect, device number 8 [ 543.729613][ T5683] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 543.760125][ T5683] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 543.777586][ T5683] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 543.786261][ T5683] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 543.796902][ T5683] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 543.808675][ T5683] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 543.842751][ T5683] i2c i2c-2: Added multiplexed i2c bus 4 [ 543.861604][ T5683] i2c i2c-2: Added multiplexed i2c bus 5 [ 543.869086][ T5683] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 543.884992][ T5683] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 543.907967][ T5676] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 543.944508][ T5676] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 543.962553][ T5683] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 543.977853][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 543.980742][ T5676] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 544.008573][ T5683] usb 3-1: USB disconnect, device number 44 [ 544.113044][ T5676] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 544.128829][ T9] usb 5-1: device descriptor read/64, error -71 [ 544.246106][ T5676] usb 6-1: USB disconnect, device number 8 [ 544.398367][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 544.547845][ T9] usb 5-1: device descriptor read/64, error -71 [ 544.678069][ T9] usb usb5-port1: attempt power cycle [ 544.947445][ T5676] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 545.038185][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 545.058962][ T9] usb 5-1: device descriptor read/8, error -71 [ 545.067767][ T5683] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 545.110084][ T5676] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.129404][ T5708] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 545.148806][ T5676] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 545.167576][ T5676] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.168040][ T188] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 545.177518][ T5676] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 545.203989][ T5676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.221757][ T5676] usbtmc 7-1:16.0: bulk endpoints not found [ 545.238707][ T5683] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 545.251303][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.271585][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.281949][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.293967][ T5683] usb 6-1: config 0 descriptor?? [ 545.308138][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 545.338441][ T9] usb 5-1: device descriptor read/8, error -71 [ 545.348560][ T188] usb 1-1: Using ep0 maxpacket: 32 [ 545.361491][ T188] usb 1-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 545.380565][ T188] usb 1-1: config 0 interface 0 has no altsetting 0 [ 545.400503][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.410302][ T188] usb 1-1: Product: syz [ 545.419342][ T188] usb 1-1: Manufacturer: syz [ 545.428619][ T188] usb 1-1: SerialNumber: syz [ 545.444620][ T188] usb 1-1: config 0 descriptor?? [ 545.468381][ T9] usb usb5-port1: unable to enumerate USB device [ 545.700277][ T188] usb 1-1: USB disconnect, device number 49 [ 545.913215][ T5683] usbhid 6-1:0.0: can't add hid device: -71 [ 545.929599][ T5683] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 545.952908][ T5683] usb 6-1: USB disconnect, device number 9 [ 545.970250][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.985381][ T5708] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 545.998279][ T5708] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 546.018594][ T5708] usb 3-1: can't read configurations, error -71 [ 546.592474][ T5683] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 546.758368][ T5683] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 546.767604][T10158] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 546.782420][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 546.795806][T11226] syzkaller1: entered promiscuous mode [ 546.801384][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 546.808488][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 546.818268][T11226] syzkaller1: entered allmulticast mode [ 546.823126][ T5683] usb 1-1: Product: syz [ 546.831844][ T5683] usb 1-1: Manufacturer: syz [ 546.855500][ T5683] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input54 [ 546.919938][T10158] usb 6-1: Using ep0 maxpacket: 32 [ 546.926000][T10158] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 546.936568][T10158] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.957426][T10158] usb 6-1: config 0 has no interface number 0 [ 546.963639][T10158] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 546.978569][T10158] usb 6-1: config 0 interface 1 has no altsetting 0 [ 546.989379][T10158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.998999][T10158] usb 6-1: Product: syz [ 547.003299][T10158] usb 6-1: Manufacturer: syz [ 547.008130][T10158] usb 6-1: SerialNumber: syz [ 547.017666][T10158] usb 6-1: config 0 descriptor?? [ 547.082913][ T5683] usb 1-1: USB disconnect, device number 50 [ 547.088076][ T5708] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 547.249626][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 547.260857][T10158] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 547.286536][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.296965][T10158] cx231xx 6-1:0.1: Failed to read PCB config [ 547.313322][T10158] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 547.325483][ T5708] usb 3-1: config 0 descriptor?? [ 547.347931][ T5708] cp210x 3-1:0.0: cp210x converter detected [ 547.358141][T10158] usb 6-1: USB disconnect, device number 10 [ 547.610775][ T5683] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 547.728657][ T5676] usb 7-1: USB disconnect, device number 9 [ 547.791033][ T5683] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 547.798259][T10158] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 547.825775][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 547.845242][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 547.881510][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 547.893059][ T5683] usb 1-1: Product: syz [ 547.901036][ T5683] usb 1-1: Manufacturer: syz [ 547.936623][ T5683] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input55 [ 547.964253][T11224] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1586'. [ 547.969868][T10158] usb 6-1: Using ep0 maxpacket: 32 [ 548.008800][T10158] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 548.034731][T10158] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.049434][ T5708] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 548.059468][T10158] usb 6-1: config 0 has no interface number 0 [ 548.065641][ T5708] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 548.074591][T10158] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 548.100482][ T5708] usb 3-1: cp210x converter now attached to ttyUSB0 [ 548.118426][T10158] usb 6-1: config 0 interface 1 has no altsetting 0 [ 548.128920][ T5708] usb 3-1: USB disconnect, device number 46 [ 548.140335][T10158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.161296][T10158] usb 6-1: Product: syz [ 548.166442][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 548.181071][T10158] usb 6-1: Manufacturer: syz [ 548.188744][ T5708] cp210x 3-1:0.0: device disconnected [ 548.197192][T10158] usb 6-1: SerialNumber: syz [ 548.223245][T10158] usb 6-1: config 0 descriptor?? [ 548.247441][ T9704] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 548.350148][ T5683] usb 1-1: USB disconnect, device number 51 [ 548.410975][ T9704] usb 7-1: unable to get BOS descriptor or descriptor too short [ 548.442230][ T9704] usb 7-1: not running at top speed; connect to a high speed hub [ 548.465568][ T9704] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.489375][T10158] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 548.506758][ T9704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.508100][ T188] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 548.520713][T10158] cx231xx 6-1:0.1: Failed to read PCB config [ 548.540338][ T9704] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.550805][T10158] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 548.564396][ T9704] usb 7-1: string descriptor 0 read error: -22 [ 548.572948][ T9704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.583269][T10158] usb 6-1: USB disconnect, device number 11 [ 548.612895][ T9704] usb 7-1: 0:2 : does not exist [ 548.679330][ T188] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 548.690582][ T188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 548.702168][ T188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 548.728155][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 548.736288][ T188] usb 5-1: Product: syz [ 548.741638][ T188] usb 5-1: Manufacturer: syz [ 548.761821][ T188] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input56 [ 548.996770][ T188] usb 5-1: USB disconnect, device number 37 [ 549.037911][ T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 549.204001][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 549.242674][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 549.252284][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.274264][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.295193][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.312080][ T9] usb 3-1: string descriptor 0 read error: -22 [ 549.318675][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.435850][ T9704] usb 7-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 549.448826][ T9704] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 549.463202][ T9704] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 549.474135][ T9704] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 549.479723][ T5683] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 549.511019][ T9704] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 549.547522][ T188] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 549.555435][ T9] usb 3-1: 0:2 : does not exist [ 549.555435][ T9704] usb 7-1: USB disconnect, device number 10 [ 549.588451][ T5792] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 549.658719][ T5683] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 549.668959][ T5683] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.680030][ T5683] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.692470][ T5683] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 549.701102][ T5683] usb 6-1: Product: syz [ 549.705518][ T5683] usb 6-1: Manufacturer: syz [ 549.719072][ T188] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 549.728514][ T5683] hub 6-1:4.0: USB hub found [ 549.735792][ T188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 549.747166][ T188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 549.752458][ T5792] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 549.766916][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 549.776939][ T188] usb 5-1: Product: syz [ 549.781162][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.792487][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.792911][ T188] usb 5-1: Manufacturer: syz [ 549.808200][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.820075][ T5792] usb 1-1: config 0 descriptor?? [ 549.844338][ T188] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input57 [ 549.925711][T11247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.938013][T11247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.007768][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 550.021380][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 550.044483][ T5683] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 550.064646][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 550.141959][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 550.232558][ T9] usb 3-1: USB disconnect, device number 47 [ 550.317899][ T188] usb 5-1: USB disconnect, device number 38 [ 550.451827][ T5792] usbhid 1-1:0.0: can't add hid device: -71 [ 550.469227][ T5792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 550.480615][ T5708] usb 6-1: USB disconnect, device number 12 [ 550.503169][ T5792] usb 1-1: USB disconnect, device number 52 [ 550.757461][ T9704] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 550.850365][T11258] syzkaller1: entered promiscuous mode [ 550.855892][T11258] syzkaller1: entered allmulticast mode [ 550.897487][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 551.037530][ T9] usb 3-1: device descriptor read/64, error -71 [ 551.187763][ T188] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 551.267564][ T5705] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 551.288837][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 551.372399][ T188] usb 6-1: Using ep0 maxpacket: 32 [ 551.383256][ T188] usb 6-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 551.383689][ T9704] usb 7-1: unable to get BOS descriptor or descriptor too short [ 551.401552][ T188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.417648][ T9704] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 551.422661][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.435797][ T9704] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 551.438030][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 551.448734][ T9] usb 3-1: device descriptor read/64, error -71 [ 551.451479][ T9704] usb 7-1: can't read configurations, error -71 [ 551.460653][ T188] usb 6-1: Product: syz [ 551.469238][ T5705] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 551.480898][ T188] usb 6-1: Manufacturer: syz [ 551.488675][ T188] usb 6-1: SerialNumber: syz [ 551.495965][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.508412][ T5705] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.518531][ T188] usb 6-1: config 0 descriptor?? [ 551.529387][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.537692][ T5705] usb 1-1: Product: syz [ 551.542315][ T5705] usb 1-1: Manufacturer: syz [ 551.549254][ T5705] usb 1-1: SerialNumber: syz [ 551.567200][ T5705] usb 1-1: config 0 descriptor?? [ 551.573462][ T9] usb usb3-port1: attempt power cycle [ 551.717571][ T5792] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 551.750549][ T188] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 551.763580][ T188] usb 6-1: USB disconnect, device number 13 [ 551.791269][ T5708] usb 1-1: USB disconnect, device number 53 [ 551.889409][ T5792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.897819][ T5792] usb 5-1: not running at top speed; connect to a high speed hub [ 551.905727][ T5792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.916429][ T5792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.927067][ T5792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.936320][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 551.942873][ T5792] usb 5-1: string descriptor 0 read error: -22 [ 551.950772][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.971129][ T5792] usb 5-1: 0:2 : does not exist [ 551.984267][ T9] usb 3-1: device descriptor read/8, error -71 [ 552.237480][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 552.258118][ T9] usb 3-1: device descriptor read/8, error -71 [ 552.368269][ T9] usb usb3-port1: unable to enumerate USB device [ 552.557548][ T9704] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 552.628697][T10158] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 552.718833][ T9704] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 552.731027][ T9704] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 552.742364][ T9704] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 552.753627][ T5708] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 552.763068][ T9704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 552.771441][ T9704] usb 7-1: Product: syz [ 552.775645][ T9704] usb 7-1: Manufacturer: syz [ 552.795383][ T9704] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input58 [ 552.807764][T10158] usb 1-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 552.821235][T10158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.838400][T10158] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 552.853069][T10158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.866048][ T5792] usb 5-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 552.875760][T10158] usb 1-1: config 0 descriptor?? [ 552.888210][T10158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 552.897587][ T5792] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 552.918011][ T5792] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 552.930024][ T5792] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 552.940859][ T5708] usb 6-1: unable to get BOS descriptor or descriptor too short [ 552.950231][ T5708] usb 6-1: not running at top speed; connect to a high speed hub [ 552.958416][ T5708] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.971173][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.981788][ T5708] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.017706][ T5792] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 553.037833][ T5708] usb 6-1: string descriptor 0 read error: -22 [ 553.045855][ T9704] usb 7-1: USB disconnect, device number 12 [ 553.058668][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.097433][T11281] bond1: option mode: unable to set because the bond device has slaves [ 553.125471][ T5792] usb 5-1: USB disconnect, device number 39 [ 553.144106][ T5708] usb 6-1: 0:2 : does not exist [ 553.237988][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.257201][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.537689][ T9704] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 553.698236][ T9704] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 553.710041][ T9704] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 553.732763][ T9704] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 553.746811][ T9704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 553.755122][ T9704] usb 7-1: Product: syz [ 553.759611][ T9704] usb 7-1: Manufacturer: syz [ 553.785736][ T9704] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input59 [ 553.953698][ T5708] usb 6-1: 5:0: bogus dB values (-12433/-12301), disabling dB reporting [ 553.967447][ T5708] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 553.987737][ T5708] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 554.005943][ T5708] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 554.016356][ T9704] usb 7-1: USB disconnect, device number 13 [ 554.050909][ T5708] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 554.077430][T10158] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 554.155664][ T5708] usb 6-1: USB disconnect, device number 14 [ 554.248517][T10158] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 554.259159][T10158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 554.271184][T10158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 554.283778][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 554.292714][T10158] usb 3-1: Product: syz [ 554.296958][T10158] usb 3-1: Manufacturer: syz [ 554.314971][T10158] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input60 [ 554.478203][ T5792] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 554.553358][T10158] usb 3-1: USB disconnect, device number 52 [ 554.642548][T11292] syzkaller1: entered promiscuous mode [ 554.650336][ T5792] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 554.662475][T11292] syzkaller1: entered allmulticast mode [ 554.680580][ T5792] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 554.699980][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.713017][ T5792] usb 5-1: Product: syz [ 554.726751][ T5792] usb 5-1: Manufacturer: syz [ 554.737946][ T5792] usb 5-1: SerialNumber: syz [ 554.772528][ T5792] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 554.966310][ T5792] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 555.037509][T10158] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 555.063833][ T5792] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 555.105275][ T5792] usb 5-1: USB disconnect, device number 40 [ 555.124186][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.218512][T10158] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 555.229377][T10158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 555.240960][T10158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 555.254082][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 555.264209][T10158] usb 3-1: Product: syz [ 555.268807][T10158] usb 3-1: Manufacturer: syz [ 555.290266][T10158] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input61 [ 555.311312][ T188] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 555.389521][ T5697] usb 1-1: USB disconnect, device number 54 [ 555.468225][ T188] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 555.478720][ T188] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 153, changing to 11 [ 555.491468][ T188] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8871, setting to 1024 [ 555.504836][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 555.513536][ T188] usb 7-1: Product: syz [ 555.518412][ T188] usb 7-1: Manufacturer: syz [ 555.548768][ T188] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input62 [ 555.608287][ T5792] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 555.727432][ T5697] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 555.750645][T10158] usb 3-1: USB disconnect, device number 53 [ 555.760247][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 555.766150][ T188] videodev: could not get a free minor [ 555.774256][ T188] sur40 7-1:1.0: Unable to register video subdevice. [ 555.781969][ T188] sur40 7-1:1.0: probe with driver sur40 failed with error -23 [ 555.784943][ T5792] usb 6-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 555.801869][ T5792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 555.810278][ T188] usb 7-1: USB disconnect, device number 14 [ 555.827976][ T5708] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 555.841797][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.851911][ T5792] usb 6-1: Product: syz [ 555.863183][ T5792] usb 6-1: Manufacturer: syz [ 555.870858][ T5792] usb 6-1: SerialNumber: syz [ 555.879430][ T5697] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 555.890724][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.902890][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.920611][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.936030][ T5792] usb 6-1: config 0 descriptor?? [ 555.960230][ T5818] ================================================================== [ 555.968341][ T5818] BUG: KASAN: slab-use-after-free in sur40_open+0xa1/0x470 [ 555.975721][ T5818] Read of size 8 at addr ffff88802bb34000 by task udevd/5818 [ 555.983121][ T5818] [ 555.985491][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 555.985520][ T5818] Tainted: [L]=SOFTLOCKUP [ 555.985528][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.985545][ T5818] Call Trace: [ 555.985555][ T5818] [ 555.985563][ T5818] dump_stack_lvl+0xe8/0x150 [ 555.985710][ T5818] print_address_description+0x55/0x1e0 [ 555.985748][ T5818] ? sur40_open+0xa1/0x470 [ 555.985767][ T5818] print_report+0x58/0x70 [ 555.985790][ T5818] kasan_report+0x117/0x150 [ 555.985847][ T5818] ? sur40_open+0xa1/0x470 [ 555.985870][ T5818] sur40_open+0xa1/0x470 [ 555.985890][ T5818] input_open_device+0x1f9/0x3b0 [ 555.985981][ T5818] evdev_open+0x4a1/0x5d0 [ 555.986112][ T5818] chrdev_open+0x4d9/0x600 [ 555.986150][ T5818] ? __pfx_chrdev_open+0x10/0x10 [ 555.986171][ T5818] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 555.986223][ T5818] ? __pfx_chrdev_open+0x10/0x10 [ 555.986243][ T5818] do_dentry_open+0x816/0x1380 [ 555.986275][ T5818] vfs_open+0x3b/0x340 [ 555.986296][ T5818] ? path_openat+0x2e2d/0x3830 [ 555.986327][ T5818] path_openat+0x2e44/0x3830 [ 555.986358][ T5818] ? kasan_save_track+0x3e/0x80 [ 555.986383][ T5818] ? do_sys_openat2+0xcc/0x200 [ 555.986406][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.986456][ T5818] do_file_open+0x23e/0x4a0 [ 555.986489][ T5818] ? __pfx_do_file_open+0x10/0x10 [ 555.986530][ T5818] ? _raw_spin_unlock+0x28/0x50 [ 555.986627][ T5818] ? alloc_fd+0x651/0x6c0 [ 555.986658][ T5818] do_sys_openat2+0x115/0x200 [ 555.986684][ T5818] ? __pfx_do_sys_openat2+0x10/0x10 [ 555.986714][ T5818] __x64_sys_openat+0x138/0x170 [ 555.986740][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.986762][ T5818] do_syscall_64+0x174/0x580 [ 555.986819][ T5818] ? clear_bhb_loop+0x70/0xc0 [ 555.986843][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.986862][ T5818] RIP: 0033:0x7f003fea7407 [ 555.986893][ T5818] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 555.986909][ T5818] RSP: 002b:00007fffa128e0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 555.986928][ T5818] RAX: ffffffffffffffda RBX: 00007f00405d7880 RCX: 00007f003fea7407 [ 555.986942][ T5818] RDX: 0000000000080000 RSI: 000055f3ee06f280 RDI: ffffffffffffff9c [ 555.986963][ T5818] RBP: 000055f3ee086e00 R08: 0000000000000000 R09: 0000000000000000 [ 555.986974][ T5818] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f3d538a0c8 [ 555.986986][ T5818] R13: 000055f3d538a0ce R14: 00007fffa128e6d0 R15: 000055f3d5390bcc [ 555.987006][ T5818] [ 555.987012][ T5818] [ 555.989093][ T5708] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 555.997439][ T5818] Allocated by task 188: [ 555.997453][ T5818] kasan_save_track+0x3e/0x80 [ 555.997478][ T5818] __kasan_kmalloc+0x93/0xb0 [ 555.997500][ T5818] __kmalloc_cache_noprof+0x32d/0x660 [ 555.997544][ T5818] sur40_probe+0x16d/0xfa0 [ 555.997561][ T5818] usb_probe_interface+0x653/0xc60 [ 556.006049][ T5697] usb 1-1: config 0 descriptor?? [ 556.012040][ T5818] really_probe+0x254/0xae0 [ 556.012150][ T5818] __driver_probe_device+0x1e8/0x360 [ 556.298649][ T5818] driver_probe_device+0x4f/0x240 [ 556.303699][ T5818] __device_attach_driver+0x270/0x410 [ 556.309091][ T5818] bus_for_each_drv+0x258/0x2f0 [ 556.314043][ T5818] __device_attach+0x2c4/0x450 [ 556.318821][ T5818] device_initial_probe+0xa1/0xd0 [ 556.323856][ T5818] bus_probe_device+0x12a/0x220 [ 556.328732][ T5818] device_add+0x7d7/0xb80 [ 556.333069][ T5818] usb_set_configuration+0x1ad8/0x2180 [ 556.338607][ T5818] usb_generic_driver_probe+0x8d/0x150 [ 556.344167][ T5818] usb_probe_device+0x1c3/0x3b0 [ 556.349181][ T5818] really_probe+0x254/0xae0 [ 556.353723][ T5818] __driver_probe_device+0x1e8/0x360 [ 556.359029][ T5818] driver_probe_device+0x4f/0x240 [ 556.364072][ T5818] __device_attach_driver+0x270/0x410 [ 556.369502][ T5818] bus_for_each_drv+0x258/0x2f0 [ 556.374377][ T5818] __device_attach+0x2c4/0x450 [ 556.379157][ T5818] device_initial_probe+0xa1/0xd0 [ 556.384198][ T5818] bus_probe_device+0x12a/0x220 [ 556.389093][ T5818] device_add+0x7d7/0xb80 [ 556.393463][ T5818] usb_new_device+0x9aa/0x1690 [ 556.398250][ T5818] hub_event+0x28e8/0x4d30 [ 556.402703][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 556.408295][ T5818] worker_thread+0xa47/0xfb0 [ 556.412922][ T5818] kthread+0x388/0x470 [ 556.417052][ T5818] ret_from_fork+0x514/0xb70 [ 556.421678][ T5818] ret_from_fork_asm+0x1a/0x30 [ 556.426492][ T5818] [ 556.428825][ T5818] Freed by task 188: [ 556.432767][ T5818] kasan_save_track+0x3e/0x80 [ 556.437464][ T5818] kasan_save_free_info+0x40/0x50 [ 556.442503][ T5818] __kasan_slab_free+0x5c/0x80 [ 556.447290][ T5818] kfree+0x1c5/0x640 [ 556.451199][ T5818] sur40_probe+0x918/0xfa0 [ 556.455622][ T5818] usb_probe_interface+0x653/0xc60 [ 556.460754][ T5818] really_probe+0x254/0xae0 [ 556.465274][ T5818] __driver_probe_device+0x1e8/0x360 [ 556.470577][ T5818] driver_probe_device+0x4f/0x240 [ 556.475619][ T5818] __device_attach_driver+0x270/0x410 [ 556.481005][ T5818] bus_for_each_drv+0x258/0x2f0 [ 556.485873][ T5818] __device_attach+0x2c4/0x450 [ 556.490669][ T5818] device_initial_probe+0xa1/0xd0 [ 556.495710][ T5818] bus_probe_device+0x12a/0x220 [ 556.500573][ T5818] device_add+0x7d7/0xb80 [ 556.504921][ T5818] usb_set_configuration+0x1ad8/0x2180 [ 556.510403][ T5818] usb_generic_driver_probe+0x8d/0x150 [ 556.515927][ T5818] usb_probe_device+0x1c3/0x3b0 [ 556.520784][ T5818] really_probe+0x254/0xae0 [ 556.525296][ T5818] __driver_probe_device+0x1e8/0x360 [ 556.530591][ T5818] driver_probe_device+0x4f/0x240 [ 556.535627][ T5818] __device_attach_driver+0x270/0x410 [ 556.541040][ T5818] bus_for_each_drv+0x258/0x2f0 [ 556.545912][ T5818] __device_attach+0x2c4/0x450 [ 556.550686][ T5818] device_initial_probe+0xa1/0xd0 [ 556.555721][ T5818] bus_probe_device+0x12a/0x220 [ 556.560603][ T5818] device_add+0x7d7/0xb80 [ 556.564953][ T5818] usb_new_device+0x9aa/0x1690 [ 556.569747][ T5818] hub_event+0x28e8/0x4d30 [ 556.574201][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 556.579765][ T5818] worker_thread+0xa47/0xfb0 [ 556.584370][ T5818] kthread+0x388/0x470 [ 556.588458][ T5818] ret_from_fork+0x514/0xb70 [ 556.593065][ T5818] ret_from_fork_asm+0x1a/0x30 [ 556.597869][ T5818] [ 556.600235][ T5818] The buggy address belongs to the object at ffff88802bb34000 [ 556.600235][ T5818] which belongs to the cache kmalloc-4k of size 4096 [ 556.614300][ T5818] The buggy address is located 0 bytes inside of [ 556.614300][ T5818] freed 4096-byte region [ffff88802bb34000, ffff88802bb35000) [ 556.628026][ T5818] [ 556.630357][ T5818] The buggy address belongs to the physical page: [ 556.636799][ T5818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bb30 [ 556.645579][ T5818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 556.654133][ T5818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 556.661698][ T5818] page_type: f5(slab) [ 556.665706][ T5818] raw: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 556.674311][ T5818] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 556.682998][ T5818] head: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 556.691685][ T5818] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 556.700371][ T5818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 556.709056][ T5818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 556.717769][ T5818] page dumped because: kasan: bad access detected [ 556.724210][ T5818] page_owner tracks the page as allocated [ 556.729954][ T5818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 43254231884, free_ts 43166455553 [ 556.750720][ T5818] post_alloc_hook+0x1f9/0x250 [ 556.755524][ T5818] get_page_from_freelist+0x21fa/0x2270 [ 556.761077][ T5818] __alloc_frozen_pages_noprof+0x18d/0x380 [ 556.766895][ T5818] allocate_slab+0x79/0x5e0 [ 556.771431][ T5818] refill_objects+0x2d5/0x350 [ 556.776116][ T5818] __pcs_replace_empty_main+0x2bf/0x6b0 [ 556.781680][ T5818] __kmalloc_cache_noprof+0x3a7/0x660 [ 556.787073][ T5818] kernfs_iop_get_link+0x66/0x6c0 [ 556.792135][ T5818] vfs_readlink+0x24a/0x540 [ 556.796654][ T5818] do_readlinkat+0x218/0x510 [ 556.801271][ T5818] __x64_sys_readlink+0x7f/0x90 [ 556.806183][ T5818] do_syscall_64+0x174/0x580 [ 556.810792][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.816717][ T5818] page last free pid 5163 tgid 5163 stack trace: [ 556.823050][ T5818] __free_frozen_pages+0xc1e/0xd10 [ 556.828205][ T5818] __slab_free+0x274/0x2c0 [ 556.832641][ T5818] qlist_free_all+0x99/0x100 [ 556.837238][ T5818] kasan_quarantine_reduce+0x148/0x160 [ 556.842716][ T5818] __kasan_slab_alloc+0x22/0x80 [ 556.847585][ T5818] __kmalloc_cache_noprof+0x2ab/0x660 [ 556.853009][ T5818] v4l2_fh_open+0x62/0x410 [ 556.857515][ T5818] v4l2_open+0x1bc/0x3a0 [ 556.861808][ T5818] chrdev_open+0x4d9/0x600 [ 556.866245][ T5818] do_dentry_open+0x816/0x1380 [ 556.871026][ T5818] vfs_open+0x3b/0x340 [ 556.875104][ T5818] path_openat+0x2e44/0x3830 [ 556.879706][ T5818] do_file_open+0x23e/0x4a0 [ 556.884227][ T5818] do_sys_openat2+0x115/0x200 [ 556.888920][ T5818] __x64_sys_openat+0x138/0x170 [ 556.893788][ T5818] do_syscall_64+0x174/0x580 [ 556.898404][ T5818] [ 556.900735][ T5818] Memory state around the buggy address: [ 556.906381][ T5818] ffff88802bb33f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.914460][ T5818] ffff88802bb33f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 556.922536][ T5818] >ffff88802bb34000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 556.930596][ T5818] ^ [ 556.934677][ T5818] ffff88802bb34080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 556.942762][ T5818] ffff88802bb34100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 556.950836][ T5818] ================================================================== [ 556.964691][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.976066][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.986227][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.999253][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.049921][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 557.057183][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 557.067656][ T5818] Tainted: [L]=SOFTLOCKUP [ 557.071996][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.082076][ T5818] Call Trace: [ 557.085406][ T5818] [ 557.088397][ T5818] vpanic+0x56c/0xa60 [ 557.092420][ T5818] ? __pfx_vpanic+0x10/0x10 [ 557.096980][ T5818] panic+0xc5/0xd0 [ 557.100756][ T5818] ? __pfx_panic+0x10/0x10 [ 557.105241][ T5818] ? preempt_schedule_thunk+0x16/0x40 [ 557.110645][ T5818] ? preempt_schedule_thunk+0x16/0x40 [ 557.116051][ T5818] ? sur40_open+0xa1/0x470 [ 557.120495][ T5818] check_panic_on_warn+0x89/0xb0 [ 557.125499][ T5818] ? sur40_open+0xa1/0x470 [ 557.129944][ T5818] end_report+0x73/0x170 [ 557.134239][ T5818] ? sur40_open+0xa1/0x470 [ 557.138685][ T5818] kasan_report+0x128/0x150 [ 557.143229][ T5818] ? sur40_open+0xa1/0x470 [ 557.147731][ T5818] sur40_open+0xa1/0x470 [ 557.152012][ T5818] input_open_device+0x1f9/0x3b0 [ 557.156986][ T5818] evdev_open+0x4a1/0x5d0 [ 557.161343][ T5818] chrdev_open+0x4d9/0x600 [ 557.165781][ T5818] ? __pfx_chrdev_open+0x10/0x10 [ 557.170749][ T5818] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 557.177111][ T5818] ? __pfx_chrdev_open+0x10/0x10 [ 557.182055][ T5818] do_dentry_open+0x816/0x1380 [ 557.186840][ T5818] vfs_open+0x3b/0x340 [ 557.190948][ T5818] ? path_openat+0x2e2d/0x3830 [ 557.195727][ T5818] path_openat+0x2e44/0x3830 [ 557.200334][ T5818] ? kasan_save_track+0x3e/0x80 [ 557.205200][ T5818] ? do_sys_openat2+0xcc/0x200 [ 557.209981][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.216084][ T5818] do_file_open+0x23e/0x4a0 [ 557.220630][ T5818] ? __pfx_do_file_open+0x10/0x10 [ 557.225702][ T5818] ? _raw_spin_unlock+0x28/0x50 [ 557.230596][ T5818] ? alloc_fd+0x651/0x6c0 [ 557.234947][ T5818] do_sys_openat2+0x115/0x200 [ 557.239657][ T5818] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.244882][ T5818] __x64_sys_openat+0x138/0x170 [ 557.249760][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.255849][ T5818] do_syscall_64+0x174/0x580 [ 557.260468][ T5818] ? clear_bhb_loop+0x70/0xc0 [ 557.265162][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.271076][ T5818] RIP: 0033:0x7f003fea7407 [ 557.275521][ T5818] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 557.295166][ T5818] RSP: 002b:00007fffa128e0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 557.303602][ T5818] RAX: ffffffffffffffda RBX: 00007f00405d7880 RCX: 00007f003fea7407 [ 557.311600][ T5818] RDX: 0000000000080000 RSI: 000055f3ee06f280 RDI: ffffffffffffff9c [ 557.319588][ T5818] RBP: 000055f3ee086e00 R08: 0000000000000000 R09: 0000000000000000 [ 557.327581][ T5818] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f3d538a0c8 [ 557.335592][ T5818] R13: 000055f3d538a0ce R14: 00007fffa128e6d0 R15: 000055f3d5390bcc [ 557.343588][ T5818] [ 557.347227][ T5818] Kernel Offset: disabled [ 557.351574][ T5818] Rebooting in 86400 seconds..