last executing test programs: 8.461333743s ago: executing program 2 (id=5203): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x0, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000002000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8.362714306s ago: executing program 4 (id=5204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000001400)}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x52a61c4f452f4327, 0x0, 0x10000040, 0x10, 0x40000c, 0x7, 0x11}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, &(0x7f00000001c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x8c01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, 0xffffffffffffffff, 0x1b, 0x0, @void}, 0x10) 8.145297116s ago: executing program 2 (id=5206): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 7.269437437s ago: executing program 2 (id=5209): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001080)=@multiplanar_userptr={0x7, 0xe, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x29, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5, 0x0, r1}) 6.04322857s ago: executing program 3 (id=5212): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x77c}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x3ace, 0x0) sync_file_range(r2, 0x0, 0x9, 0x5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x9}) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9, 0x7, [0x7, 0xf, 0x8, 0x400, 0x2, 0x432e, 0x3]}, &(0x7f0000000180)=0x16) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x8001}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, {0x3, @local, 'ip6gretap0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={r3, 0xf1, "75a15db9cfeb3d2948cd62d5edfcdcf0e0bb326f25107956ce82ef6d2f804fc7cf748efd846d886f22f6f1b15648ed81f5cf2b0d2bf8e382fc1b89c8af811990ab9a5a8905fbf5f8c469eb91c4cdb2b7355ceb2632b7eed30b43778fe0e39dbb69140b537854eecb3ad3c03b340965a91f5a9055a8cd9bfdb150139045c225e87e2011751540d5149f933334cda4e0a29ce28726d35585d1217450bea1aee02507f1be6e3a1c6cb979dff6240bf7e0fc923082ba713884ed97cf466eab95e9024461c077edd3d90451e06fe501ab8b47c5790b519b85fca7a8058ae4ac2f80e828413b503ee8ec508936becc1f94cbc763"}, &(0x7f00000003c0)=0xf9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r4, 0xfff7, 0x1000, "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"}, 0x1008) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000001440)={0x1, 0x0, [{0x6, 0x7, 0x1, 0x4, 0x1, 0x1, 0x40}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000014c0)={0x800, 0x30, '\x00', 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fchdir(r2) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001500)={@remote, @broadcast, 0x0, 0x2, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001540)=@sack_info={r3, 0xfffff570, 0xd1}, &(0x7f0000001580)=0xc) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000015c0)=0xfffffffffffffff9) r5 = syz_io_uring_setup(0x76dc, &(0x7f0000001600)={0x0, 0x56c9, 0x1, 0x0, 0x55, 0x0, r1}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000001700)=0x3, 0x0, 0x4) poll(&(0x7f0000001740)=[{r0, 0x320}, {r5, 0x18a}, {r5, 0x10c}], 0x3, 0x769) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000001780)={0x1, 0x7b, 0x3f5c3aab9a842a50}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0), 0x4000, 0x0) close_range(r2, r7, 0x0) read$char_usb(r7, &(0x7f0000001800)=""/253, 0xfd) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000001900)={{0x8000000000000001, 0xe}, {0x29, 0x8}, 0xedfe, 0x1}) mq_timedreceive(r1, &(0x7f0000001940)=""/120, 0x78, 0x50fb, &(0x7f00000019c0)={0x77359400}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@generic={&(0x7f0000001a00)='./file0\x00', 0x0, 0x8}, 0x18) open_by_handle_at(r2, &(0x7f0000001a80)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x1ff, 0x62967cbf}, 0x8, 0x200}}, 0x507100) 5.948738403s ago: executing program 3 (id=5213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109e000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @sdr={0x38415262, 0x73ce}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x3, 0x71, "4055de77153ba77b7a21491493c9eab242e3fda52bee432e747a8a71a44df34c1f3a87a7f69efabbb2cb0a6b5e6bba7d5191be00f374022331f3a194a1fae6a43c934f37e49cff62757ad631ddb2a72137b022ad58a5ae47601094868f00bd0f26e1a6e96dd6199c1a58e854e25318ad81"}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109e000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @sdr={0x38415262, 0x73ce}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x3, 0x71, "4055de77153ba77b7a21491493c9eab242e3fda52bee432e747a8a71a44df34c1f3a87a7f69efabbb2cb0a6b5e6bba7d5191be00f374022331f3a194a1fae6a43c934f37e49cff62757ad631ddb2a72137b022ad58a5ae47601094868f00bd0f26e1a6e96dd6199c1a58e854e25318ad81"}) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) 5.557240377s ago: executing program 2 (id=5217): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000a0047"], 0x1c}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x4004551e, &(0x7f0000000140)={0x9fc, 0x0, "5a77bd038786aeb879ca62cdab2a03fa560186d85b25a5665a3247e5000f7a9b905da88235f8a5447dd2a2fd6e910c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b3210f472b1eaa007969d208ba7d34171113dc06726615380fe65a6a794220aa2b60bd6276fd8bb6363d10f70da60fd500b9fcbbd821b3000e4a62fb73c33424b437bb190300000000000000a60000f8ffffff0a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2eedbc1ddb94239b85a905ca147df97da00"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x71}, 0x20) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x3}) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) (async) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='dnOv:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) rt_sigsuspend(&(0x7f0000000000), 0x8) (async) tkill(r4, 0x16) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000600)={0x0, 0x3b, "662a6f651e39dc6a9574908a12f98c8e0f8fa45a9c4da02da8dee14fa0e789fe53f83c42a0ea3a8d09504da9947bebc233504207ed90c6cf7d2953"}, &(0x7f0000000380)=0x43) (async) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$instantiate(0xc, r7, &(0x7f0000000000)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:'}, 0x28, r3) 5.248265657s ago: executing program 4 (id=5218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004640)=@newtfilter={0x1e0c, 0x2c, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0xffff, 0xffe0}, {0x3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xc}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x27}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_SEL={0x6a4, 0x5, {0x10, 0x9, 0x9, 0x738, 0x5, 0xa85, 0xc1e, 0x1, [{0x8, 0xed2b, 0x400, 0x6}, {0x102e, 0xf4, 0x1000, 0x8001}, {0x8, 0x400, 0x5, 0x4}, {0xfffffffa, 0x3e, 0x5, 0x7}, {0x3, 0x0, 0x80000001, 0x1}, {0x8, 0x6, 0x4, 0x3}, {0x6, 0xfffffffc, 0xcb, 0xff}, {0x9, 0x10, 0x1, 0x8}, {0xc, 0x8, 0x80, 0x4}, {0x9, 0x8000000, 0x6, 0x8001}, {0x7fff, 0x5, 0x7ff, 0x3}, {0x3, 0x7fffffff, 0x1, 0x87}, {0xffff8001, 0x0, 0xe, 0x1000}, {0xfffffffb, 0xce, 0x2, 0x5}, {0x8, 0x8000, 0x5, 0x7ab}, {0x8, 0x0, 0x79, 0x10}, {0x0, 0x1f700000, 0x7, 0x80000001}, {0x8, 0xb, 0x401, 0x8}, {0x8, 0x0, 0x6fa3, 0x2}, {0x7fffffff, 0x400, 0xff, 0x8001}, {0x3, 0x401, 0x6, 0xffffffff}, {0x1, 0xffff, 0x1, 0x401}, {0xfb0, 0x7, 0x0, 0x5}, {0x2, 0x9, 0x827, 0x67}, {0x6, 0xe6d, 0x2, 0x4}, {0x1, 0xf063, 0x1, 0x101}, {0x4, 0x7, 0xfffffff7, 0x8001}, {0x34c2, 0x5, 0x0, 0x6}, {0x5, 0x80000000, 0x101, 0x1}, {0x48ab, 0xf22, 0x700, 0x1}, {0x3, 0x3, 0x1, 0x7}, {0x5, 0x4, 0x40, 0x9}, {0x8000, 0x5, 0x1ff, 0x8}, {0x80000000, 0x2, 0x9, 0x5}, {0x5, 0x1, 0x3, 0xd197}, {0x4, 0x81, 0x7fff}, {0x8, 0x1ff, 0x800, 0x3f}, {0x6, 0x7, 0x5, 0xc99}, {0x0, 0x101, 0x10001, 0x3}, {0xfffff461, 0x0, 0xfffffffe, 0x7}, {0xd, 0x0, 0xa03, 0xc}, {0x7, 0x7fff, 0x1, 0x2}, {0x3ff, 0x8000, 0x7, 0x4}, {0x6, 0xd80, 0x0, 0x2c}, {0x0, 0x7, 0x8, 0xd}, {0x25a7, 0x9, 0xd8, 0x2}, {0x3, 0x7f, 0xfffffffb, 0x5}, {0x2, 0x5, 0x5, 0x6}, {0x1, 0x9, 0x6bec8876, 0x9}, {0x1, 0xfffffffb, 0x7, 0x3}, {0xb37, 0xffff875f, 0x10, 0x9}, {0x77, 0x8, 0x4, 0x3}, {0xf, 0x3, 0x3, 0x3}, {0xffffffff, 0x0, 0x1, 0x8}, {0x4e2ac586, 0x10000, 0x800, 0x2}, {0x3, 0xfffffffb, 0x400, 0xfffffffd}, {0x8, 0x1, 0x89, 0x5}, {0xfffffffa, 0x800, 0x9, 0x4}, {0x10, 0x7, 0xffffffc0, 0x300}, {0xa, 0x8, 0x10, 0x3}, {0x7, 0x5, 0x9, 0xc}, {0x2, 0x6, 0x80}, {0x8, 0x3, 0x80000000, 0x8}, {0x8000, 0x7, 0xffffffff}, {0x9, 0x1, 0x0, 0xff}, {0x7, 0x9cf, 0x101, 0x3}, {0xc99, 0x8, 0xd, 0x2}, {0x8001, 0x3, 0x6e, 0xa}, {0x97, 0x0, 0x8, 0x4}, {0xfffff800, 0x15, 0xdf, 0x1}, {0x0, 0x7, 0xfff, 0x7}, {0x7, 0x8, 0xfffffffa, 0xfffffff7}, {0x101, 0xfff, 0x400, 0x40}, {0x64, 0x9, 0x0, 0x8}, {0x5a2, 0x6, 0x2, 0x6}, {0x2, 0xd, 0x9, 0xed}, {0x80000001, 0xa0ba, 0x1, 0x7}, {0x179, 0x5, 0x9, 0x7fffffff}, {0x400, 0x9, 0x5, 0x5}, {0x4, 0x8, 0x12, 0x5c6}, {0x3, 0x0, 0x9, 0x4}, {0x3293, 0x7, 0x6, 0x1ff}, {0xff, 0x287, 0x2, 0xa}, {0x3ff, 0xbd3, 0x1, 0x10}, {0x1, 0x1, 0x7, 0x7}, {0x8000, 0x0, 0x8, 0x7ff}, {0x80000001, 0x1, 0x2, 0x262}, {0x3, 0x2, 0x1, 0x4}, {0x4, 0x9, 0x101, 0x6405}, {0xa61, 0x5, 0xf, 0x4}, {0x0, 0x6, 0x7, 0x8}, {0x2, 0x200, 0x18109db9, 0xb43f}, {0xa0, 0x5, 0x5, 0x3}, {0x4, 0x200, 0x40, 0x8000}, {0x0, 0x840, 0xe, 0x40}, {0x5, 0x3, 0x3ff, 0x47}, {0x1, 0x6, 0x6}, {0x7dda, 0x7, 0x3ff, 0x7a6}, {0x80d, 0xd33, 0xfffffffa, 0x2}, {0xe, 0x80, 0x97f2, 0x2}, {0x3, 0x51, 0xcbf0, 0x1}, {0x4, 0x5, 0x8000, 0x3}, {0x2, 0x53241f27, 0xa7a}, {0x400, 0x91, 0x101, 0x80000000}, {0x80, 0x9}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf0}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x16fc, 0x2, [@TCA_BASIC_EMATCHES={0x29c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x2a4}}}, @TCF_EM_META={0xb4, 0x2, 0x0, 0x0, {{0x3ff, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0x19ca, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x0, 0x1}, {0x1000}}}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="434c61e4323e4db25d55"]}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="f685fb85f54934b287", @TCF_META_TYPE_VAR="3a1e2aede6", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="fc06df8fca2b0d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="e499a11e6068be", @TCF_META_TYPE_VAR="7d894d3129", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="eca4670ebdc8", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="87403ca20b"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0x5c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x26, 0x5, "676e5e1a2f8fb7fda73c1aa789405dcf52b1ef401743871dd10870b18f7758a6bab0"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x6}, {0x40, 0x5, 0x8, 0x8}}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffb, 0x7, 0x8}, {{0x4}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xb0, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "0b6aef123d9b07cad1d2d133425212a0b16a730adf1b329c2dd52b882c228c4b2ef1fc606728a01b18e000d1c6cf43cd3122f76fd1b239a72fc5ba7bdce2ddb93d9db8600f56880587b2197098988998806c8eb8e57e5c6e5b52c6f4207a7665c149e5732d9ed449b9aeb680b6fb0a40f4663414b2b9c72220afd56d68a92d4f31717e7551b40efe3ff396fd288cec1972cf6d62737b0263d7f978d081328e5361bc82"}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0xf7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7, 0x1}, {0x3, 0x96, 0x1}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="70ad996334"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x3}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xe}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0xc}, {0x1, 0xd1d1, 0x7fff, 0x100000}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_BASIC_ACT={0x144c, 0x3, [@m_sample={0x8c, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x5e, 0x6, "04e67f2cb17c67c3e0cb471989b2b767ed22f99c33e9846da72afa9d11a814fb1fa2fcdc0b57bbf7b5191c1d02eba024221ffb9fdc5b1593dcd6f9d3493f27834381293f6165ee191f05eeb908a5b0be3f375805defcd590686d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x38, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "0310264f93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_gact={0xa8, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0xd, 0xffffffffffffffff, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x6e2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x10000000, 0xffffffff, 0x8}}]}, {0x40, 0x6, "a6a14debdf0d35cef35ca99621e088f8f7e5c222382c7db1afeaa03d6ec9bbd59dcf447dcba9350cbfd16e9f98056c0e2bcae49d55eb046ec1b1f2e3"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xf8, 0x1e, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x95b, 0x2, 0x6, 0x2}, 0x6, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x5, 0x81, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xb, 0x3, 0x8, 0x2}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x0, 0x3, 0xc74}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xf, 0x10000000, 0x8, 0x1d019428}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x3, 0x3d22}, 0x1, r8}}]}, {0xa, 0x6, "ad9f531db543"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1090, 0x20, 0x0, 0x0, {{0xb}, {0x1030, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1ff, 0x1, 0x5c6, 0x10001, 0x7, 0x7, 0x7fff, 0x0, 0x0, 0x9, 0x3, 0x7fff, 0x1, 0x7, 0x9b1, 0x0, 0x344f529d, 0x100, 0xd, 0x2, 0x8, 0x9, 0x7, 0x7, 0x7e5, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x5, 0x6, 0xb1b, 0xe, 0x9, 0x17b4, 0x6, 0x7, 0xe875, 0x0, 0x9, 0x39, 0x46d, 0x1, 0x1, 0x2, 0xdd54, 0x8001, 0x5, 0x5, 0x8, 0x7, 0x8, 0x5, 0x3, 0x4b, 0x8, 0x0, 0x8, 0x1, 0x8, 0x6, 0x0, 0x7, 0x80000001, 0x7fff, 0x80, 0x4, 0x8, 0x7, 0xc47, 0x9, 0x2, 0x1268, 0x7, 0x6, 0x10001, 0x0, 0x6, 0xa8be, 0x5, 0x101, 0x3, 0x6, 0xf, 0x7, 0x8, 0xf7, 0x2, 0x5, 0x4, 0xa, 0x4, 0x3, 0x9, 0x5, 0xd5a, 0x8, 0x8, 0x3, 0x0, 0x400, 0x2, 0x8, 0xffffffff, 0x6, 0x7f, 0x582c7245, 0x3, 0xfff, 0xcd, 0xffff4869, 0x7f, 0x4, 0xb, 0x2, 0x7, 0xff, 0x7, 0x1075, 0x998a, 0x0, 0x69, 0x0, 0x9, 0x8, 0x9, 0x3, 0x8, 0x8, 0xc, 0x0, 0xffff, 0xff, 0xd, 0x4, 0x80, 0x7fffffff, 0x1, 0x9, 0x40, 0x9, 0x5, 0x101, 0x8, 0x1f07, 0x29a, 0x6, 0x5, 0x800, 0x7fffffff, 0x8, 0x8d97, 0x1, 0x3ff, 0x6ae0, 0x80, 0xfff, 0x8, 0x80000001, 0x4, 0xf1, 0x7, 0x7, 0x9d4, 0xd9, 0x5, 0xfffffffd, 0x3, 0x0, 0x80000000, 0x9, 0x989a, 0x1ff, 0x86, 0x6, 0x5a, 0x3, 0x0, 0x1000, 0x661, 0xe, 0x21e4ce89, 0x1, 0xd, 0xb2, 0xa00, 0x101, 0x8, 0x1, 0x6, 0xffffffce, 0x0, 0x80000000, 0xd7, 0x1, 0x257, 0xfffffffb, 0x200, 0xe51, 0x9, 0x63, 0x9, 0x3, 0x5, 0x6, 0x352, 0x2, 0xfffffffa, 0x1, 0x3, 0xb086, 0x67, 0x8000, 0xcdaa, 0x1, 0x2, 0x2, 0xf, 0x80000000, 0xfffffffc, 0x4, 0x6, 0x5, 0x101, 0x4, 0x400, 0x3, 0x5, 0x40, 0x7, 0x0, 0x2cd1, 0xf, 0x0, 0x6, 0x80000001, 0x2ea7, 0x8, 0x5, 0x6, 0xb8, 0x1, 0x7, 0x0, 0x4, 0x4, 0xa3d0000, 0x3, 0x9, 0x4, 0xffffffff, 0x80000001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa9d}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x80, 0x7, 0x6, 0x2, 0x7, 0x2, 0x4, 0x40, 0x3, 0x7f, 0xb6b1, 0xdded, 0x8, 0x9, 0x7fff, 0x6, 0x1, 0x67, 0x1fd, 0x0, 0x0, 0xaf0, 0x7f, 0x7f, 0x5, 0xe, 0xc521, 0x10, 0x4, 0x1, 0xfffffffe, 0x6, 0x1d, 0x7, 0x34f, 0x1, 0x7, 0x6, 0xca, 0x4, 0x7fffffff, 0x2, 0x4, 0xf, 0x1, 0x1, 0xd, 0xfffffff8, 0x3, 0x6, 0x100, 0xf8e8, 0x100, 0x9, 0x0, 0x2, 0xefc0, 0x2, 0x5, 0x6, 0x6, 0x0, 0x1c0000, 0x4, 0x400, 0x5, 0xf, 0x2, 0x6, 0xfff, 0x3b34b268, 0xaa, 0xfffffff9, 0xbc, 0x1, 0x3, 0xc, 0x1, 0x800, 0x81, 0x6, 0x9, 0x2, 0x31, 0x82a, 0x5, 0x4, 0xfffffffa, 0x93f4f397, 0xfffffffa, 0x7f, 0x8000, 0x9, 0x1, 0x8, 0x4, 0x7ff, 0x65, 0x7fffffff, 0x8000, 0x9, 0x2, 0x8fc, 0xfffffffa, 0x3, 0x5, 0x8, 0xa2cb, 0x10, 0x0, 0x100, 0x8000, 0x7, 0x1, 0x32a, 0x9, 0x785821e, 0x8, 0x5a9, 0xffff, 0xff, 0x2aa, 0x1, 0xfffffffd, 0xffff7b30, 0x69c17cf7, 0x0, 0x4, 0x1, 0x93df, 0x5, 0xff, 0x7, 0x1000, 0x48, 0x0, 0x6, 0xffffffff, 0x5, 0x10001, 0xf, 0x96, 0x7f, 0x1, 0x5, 0x3, 0x3, 0x5, 0x5, 0x4, 0x7ff, 0x10001, 0xa, 0x3, 0x7, 0x7, 0x4, 0x2, 0x3, 0x7, 0xfffffffb, 0xd, 0x0, 0x4, 0x4, 0xdf, 0x7fff, 0xfffffffb, 0x20002, 0x400, 0x1cfd96b2, 0x7, 0x82b5, 0x200, 0xe, 0x0, 0x6, 0x5, 0x8a, 0x3, 0x5, 0x8, 0xc2, 0x0, 0xffff7fff, 0x4b, 0x827, 0x9f, 0x3, 0xfffffff6, 0x3, 0xfff, 0x4, 0x2ac0, 0x80, 0xe4, 0x0, 0x4, 0x3ff, 0x8, 0x301, 0x81, 0x8, 0x54, 0xf77, 0x7, 0xc, 0x3, 0xa, 0x2, 0xffffffff, 0xffffffff, 0xffffff24, 0x4, 0x9, 0x0, 0x0, 0x9, 0x2, 0x1, 0x1c, 0x4, 0x0, 0x7fff, 0xecd7, 0x51, 0x7, 0x86, 0x2, 0x0, 0x0, 0x2, 0x1ac5551b, 0x38, 0x5, 0x126b, 0x0, 0x8, 0x4268000, 0x1, 0xf, 0x7fffffff, 0x858, 0x6, 0x855a, 0x1, 0x8, 0x8, 0x9, 0x101, 0x80000001, 0x0, 0x8, 0x5, 0x8107]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0xc99eb8c, 0x0, 0x7, 0x4, 0x7, 0xc, 0x9, 0xff, 0x8, 0x3, 0x1, 0x6, 0x3, 0x4, 0x3, 0x2, 0xdf68, 0x1, 0x8, 0x8001, 0x9, 0x80000, 0xcd5, 0x4, 0x4, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x6, 0x100, 0x9, 0x0, 0xc, 0x3, 0x4, 0x1, 0xf06, 0x1, 0x6, 0x3ff, 0x1000, 0x7, 0x2, 0x10, 0x10, 0x7fffffff, 0x7, 0xfff, 0x9, 0x6, 0x40, 0x3ff, 0x4, 0xcb, 0x10001, 0x306, 0xffff, 0x5, 0x5, 0xc, 0x10001, 0x9f7, 0x9, 0x7, 0x7fff, 0x4, 0x401, 0x9, 0x41, 0x5, 0x8, 0x2, 0xb5, 0x2, 0x6, 0x401, 0x1, 0x8000, 0x677, 0x10, 0x0, 0x4f, 0x9, 0x10000, 0x3, 0x101, 0xfffffff1, 0x2, 0x7, 0x3, 0x6, 0xf8a5, 0x0, 0x5, 0x0, 0x1, 0x1, 0x6, 0x935, 0x8, 0x4, 0x4, 0x9, 0x0, 0x551, 0x38743381, 0x6, 0x9, 0x2, 0x4, 0x5, 0x3, 0x1, 0x6, 0x7ff, 0x2, 0x6, 0x1000, 0xc1e, 0x800, 0x5, 0x80000001, 0xfffffff7, 0x1, 0x636b193c, 0x24d1, 0x7, 0xe, 0x36b, 0x0, 0x2, 0x2, 0x3ff, 0x3, 0x3, 0x7f, 0x8000, 0x6, 0x0, 0x2, 0x400, 0x9, 0x4, 0xaf, 0x1, 0x5, 0x4, 0x4, 0x7, 0x6, 0x8, 0x6, 0x7, 0xe053, 0x700, 0x4, 0x1, 0xebe6, 0x0, 0x8000, 0x1, 0xfffffffc, 0x5, 0x7f4, 0x7, 0x100, 0x1, 0x200, 0x1, 0x7fffffff, 0x8, 0x3, 0x0, 0x5, 0x1, 0x9, 0x8, 0x3, 0x5, 0x2, 0x6, 0x3, 0xb, 0x1ff, 0x4, 0x2, 0xffffffff, 0x7ae, 0x1, 0x8, 0x6, 0x3a76, 0x80000001, 0xffffffff, 0x2, 0x0, 0xfffffff9, 0xe8, 0xe8, 0x0, 0xdf, 0x784, 0x3, 0xdf88, 0x4f41, 0x9, 0x3, 0x9, 0x7, 0x5, 0x5, 0x7, 0x0, 0x6, 0x101, 0x3, 0xf, 0x9, 0xfffffffc, 0x80, 0x6207, 0x8, 0x4, 0x100, 0x217d1541, 0x7, 0x800, 0xffff0001, 0x76, 0x3fffc0, 0x6, 0x3, 0x4, 0x6, 0x6, 0x80000000, 0x9, 0x6, 0x8, 0x9, 0x2, 0x5, 0x5, 0x7, 0x1, 0xffffffff, 0x7a6, 0x8, 0x9, 0xd4c9, 0xfffff0e3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x4, 0x9, 0x7, 0x7fffffff, 0x9, 0x5, 0xdc, 0x60d, 0x1, 0x9, 0x4, 0xa, 0x7, 0x9, 0xe, 0x7, 0x6, 0x3, 0x4, 0x4, 0x3, 0x7, 0x10000, 0x775, 0x10001, 0xffffff61, 0x3, 0x5, 0x2, 0x8000, 0x9, 0x1, 0x800, 0x3, 0x9, 0x8, 0x6a, 0x9, 0x6, 0x10001, 0x3ff, 0x70f0, 0x0, 0x8001, 0x3ff, 0x2, 0x8, 0x3, 0x3, 0x1, 0xa, 0xf, 0x7fff, 0xfffffffd, 0x5, 0x6, 0x8, 0x73, 0x2156, 0x4, 0x800, 0x0, 0x487, 0x0, 0x8, 0x7, 0x4, 0x6, 0x4, 0xf19, 0x1, 0x9, 0x7, 0xfffffffe, 0x1, 0x7, 0xe, 0x3, 0x3, 0xc6, 0x1, 0x0, 0x2, 0x7, 0x100000, 0x101, 0x2, 0x6, 0x7fffffff, 0xeb5, 0x81, 0x8, 0xa5, 0x3, 0x20ce, 0x2, 0x7ff, 0x7403, 0x4, 0x0, 0x4, 0x1, 0x4, 0x5, 0x7fff, 0x7, 0x6, 0x3, 0x0, 0x2e, 0x10, 0x5, 0x9, 0x800, 0x4, 0x6, 0x6, 0xfffffffb, 0xfffffff9, 0x6, 0xe, 0x8, 0xcc, 0x5, 0x2, 0xffff0000, 0x3ff, 0xcda, 0xb, 0x1, 0x1000, 0x80000000, 0x7f, 0x7, 0xff, 0x1, 0x9, 0x6, 0x0, 0xc4ab2c6e, 0x245a, 0x3, 0x4, 0xfffffff7, 0x2, 0xfffffff8, 0x9, 0xfffffff7, 0x1, 0xfffffff0, 0x105fa345, 0x81, 0x9, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x1c, 0x7, 0x0, 0xc, 0x9, 0xfffffffe, 0x1, 0x80000000, 0x5, 0x5, 0x4, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0x100, 0x4, 0x2, 0x1, 0x0, 0x1, 0xffffffff, 0x3, 0x5, 0x5b, 0x9, 0x8, 0xffffffff, 0x4, 0x40, 0xa5, 0x9, 0x1000, 0x7, 0x379b, 0x5, 0x9, 0x8, 0x1f9, 0x0, 0xd, 0xd, 0x9, 0xc7, 0x800, 0x6, 0x34, 0x0, 0x98, 0x568c, 0x8, 0x6, 0x610c, 0x5, 0x0, 0x6, 0x9, 0x8, 0x1, 0x0, 0xfffffc6c, 0x9, 0x9, 0x3, 0x8, 0x30606367, 0x8, 0x2, 0x7, 0xc000000, 0x6, 0x9, 0x7, 0x80000001, 0x39, 0x145, 0x8, 0x7, 0x6, 0x5a, 0xc, 0x6, 0x7ff, 0x3, 0x3, 0x6, 0x9, 0x400, 0x9, 0x6, 0x1, 0x0, 0xd, 0x1, 0x0, 0xffffffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x37, 0x6, "5ea7b212c9e67f7426ea40556b2fff4e085297e9363b5dc47d122d10c26eda9c6d107ca636ea131d34f5971c71e63788703265"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x154, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x5, 0x4, 0x71d, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x8, 0x10001, 0xfffffffe}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc5c, 0x6, 0x7, 0x5, 0x5}, 0xfe00}}]}, {0xcd, 0x6, "cdd5160474033aae430e9c8703be90f9018165909e7f4a3e470f3f57d347aef51834066afcd4f1d578f501cfc06f6287f36c2de845e3c7d45bddab06078c07f24cad493580e8fce3d457caa633baf56138e0459122c91d8df86bd1d63d5973c1bde0a2ee58cd2ecf5bb7bfb5f310fd6a616fe6301d1e893c5126177040e873216f883cf4db2c69c036df83c21278e8fbaf5c1bd25b5f05707c0a40962cb492c1ca270f23b4a425970e559454a172a9d14c971263473c1abef67f7aadcf87c83acaefbf68b3e3aa6c32"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1e0c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="00a00000000000000c001a800800048004001f80"], 0x2c}}, 0x0) 4.891195356s ago: executing program 1 (id=5219): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 4.609366302s ago: executing program 3 (id=5220): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}], 0x1}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r2, 0x7, 0x1}, 0x8) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x5c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc36}]}, 0x20) 3.762037026s ago: executing program 3 (id=5221): socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000003f6000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.703219628s ago: executing program 1 (id=5222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0xf0, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xbc, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}]}, @AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0xc3d33000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4040080) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="c7", 0x1, r7) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) 3.417372972s ago: executing program 1 (id=5223): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006a0000000000954a0d0a8bd71fdedbc3c098cb7f560071000000000085e047fafe8c0fdf1030a99387af1e9d218dadfb456f8c37fa7bac2df5ead7285aaad1345988"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 3.376987462s ago: executing program 1 (id=5224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000ffff010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x24040000) 3.315179387s ago: executing program 1 (id=5225): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x33, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000040)="5aee41dea43e63a3", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={r4, 0x10, 0x3ff, 0x34325241, 0x3, [r5, 0x0, 0x0, r5], [0x2b8, 0x0, 0x1000], [0x35b], [0x1a7a]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x0, 0x1a, "0f565053facfc9659336111f4517f275598a7a77d30165c2f115"}, 0x0, 0x0, 0x0, 0x0}) 2.401724743s ago: executing program 2 (id=5227): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/40, 0x28) getdents(r2, 0xfffffffffffffffd, 0x58) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0xf, 0x1f, 0x7, 0x7, "060045fc8aea4eb75941fa3a60e23307c07c380687b206000000073f687fb2b2"}) (async) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x5386, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000000100)={0x47, [0xb, 0xb, 0x9], [{0xffffffff, 0xd47a, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x5, 0x0, 0x1}, {0xa68, 0xd, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8d, 0x9e6, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x4e, 0x1, 0x1, 0x1}, {0x10, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x5, 0x0, 0x1, 0x1}, {0x2c, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x400, 0x6, 0x1, 0x0, 0x0, 0x1}], 0x2}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) fanotify_mark(0xffffffffffffffff, 0x94, 0x40000000, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000340)={'ip6gre0\x00', 0x9}) (async) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r11, 0x540b, 0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000500)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x800, 0x5, {0x0, 0xea60}, {0x2, 0x1, 0x0, 0xe, 0x10, 0x3, "d18fa9bd"}, 0x2, 0x1, {&(0x7f00000002c0)=[{0xbb0, 0xc, {0x99e}, 0xff}, {0xc5, 0x7fff, {0x5}, 0x10000}]}, 0x1, 0x0, r8}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10001}, 0x0) 2.341989476s ago: executing program 0 (id=5228): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000004000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.262917531s ago: executing program 2 (id=5229): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x0, 0x30}, 0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.097287931s ago: executing program 0 (id=5230): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000200000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r0], 0x68}, 0x0) 2.008260024s ago: executing program 0 (id=5231): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}], 0x1}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r2, 0x7, 0x1}, 0x8) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x5c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc36}]}, 0x20) 1.697093564s ago: executing program 4 (id=5232): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000063c0)={0x2020}, 0x2020) 1.593489409s ago: executing program 4 (id=5233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="010000003f000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac210080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) 1.495186885s ago: executing program 4 (id=5234): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x64}}, 0x0) 1.359257349s ago: executing program 4 (id=5235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r8, r8, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="050000e29c0060fea6409ec07ee3980897a70100004200000040000000f0580600cc42eae7e3e75ffd86fd1b61dd7f754053494b5a46c4a8347d6b5865aeabd4df12fd9b7d9fbe6754ada36d727a163a373a4750120125396d5d5bd6c7d5780d189b7dba00e064f4e1b1df0b7a767e2f1975d3cc385ed27fffea64dc367233fab5789880bc563a28783e0dd00d61946121db1e075417d9d2782a9cea3e59ec8b1effa0a92fe39a834cdfcaf45b114042dca17b86ab5b3494f2248131eb0ce49146939900"/209, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r9 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) 934.03889ms ago: executing program 0 (id=5236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x4e22, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x3000000000000000}, {0x1, 0x0, 0x80}, 0x10000}}, 0xb8}}, 0x0) 857.388673ms ago: executing program 0 (id=5237): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000030404000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002800128009000100766c616e000000001800028006000100000000000c000200100012001f00000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0xba01}, 0x0) 772.132828ms ago: executing program 0 (id=5238): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa3e, 0x1, 0x80, 0x80000001, 0x3, {0x16, 0x1, 0xe5b, 0x5, 0x9, 0x2}, {0x7, 0x0, 0xb3d, 0x0, 0xfffe, 0xfffff976}, 0x0, 0x200, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0xa4, 0x7, 0x101, 0x7, 0x8, 0xfffff000, 0x3, 0x0, 0x1, 0x1, 0x3932685, 0x4, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfffffffd, 0x9, 0x0, 0x4, 0x1000, 0x8, 0x9, 0x66c, 0x3b8f5929, 0x3, 0x9, 0xa, 0x101, 0x3, 0x4, 0x8, 0xf0a, 0x800, 0x1, 0x1, 0x47905ebf, 0xfffffffe, 0x1, 0x1, 0xa, 0xf7f0, 0x3, 0x401, 0x7, 0xc, 0x8, 0xf, 0x7, 0xff0b882, 0x7ff, 0x55, 0xd, 0x2, 0xad, 0x2, 0x80000001, 0x0, 0x7fffffff, 0x6, 0x4, 0x2, 0x6c, 0x0, 0x5, 0x5, 0x57, 0x200, 0x14, 0x2d9, 0x0, 0x3, 0x0, 0x5, 0xab7, 0x9abb, 0x48, 0xfff, 0x8, 0x1, 0x4, 0x40, 0x8d23, 0xffff, 0x3, 0x31b, 0x8, 0x1, 0x9, 0x1, 0x5, 0x3, 0x7, 0x5, 0x8, 0x9, 0x53, 0xffffffff, 0x10000, 0x8, 0x7, 0x892, 0xb, 0x4bfbd968, 0x401, 0x2, 0x6, 0xa2c7, 0x3, 0xfffffffb, 0x16eae2cc, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x0, 0x9, 0x20, 0x8, 0x1, 0x6, 0x10000, 0x6, 0x3, 0x6, 0xfffffffd, 0x0, 0x2000006, 0x4, 0x3, 0x2, 0xffffffee, 0x10001, 0xba87, 0x1000, 0xb, 0x4000000, 0x10001, 0x9, 0x4, 0x2, 0x8, 0x5, 0x5, 0xffffffc1, 0x200, 0x5, 0x80, 0x1800, 0x3ff, 0x7ff, 0xb245, 0x4, 0x5, 0x401, 0xb, 0x9, 0x4, 0x790, 0xb, 0x400, 0xedd1, 0x6, 0x7ff, 0x8, 0x1ff, 0x4, 0xfffffffa, 0x0, 0x0, 0x7, 0x3, 0x5, 0x3, 0x6f2d, 0x3, 0x9, 0x6, 0x5, 0x40, 0x28, 0xd23b, 0x1, 0x5, 0x9, 0xd5, 0x905f, 0x2, 0x1, 0xffff, 0x8, 0x80, 0x6fd, 0x65dd, 0x8, 0x3272, 0x4, 0x497, 0x6, 0x7fffffff, 0x8, 0x3, 0x6, 0x101, 0xa, 0xfee6, 0xff, 0x7, 0x2, 0x7, 0x5406, 0x7, 0x1, 0x6, 0x0, 0x5, 0x2, 0x81, 0x80000000, 0x7, 0xf, 0x1000, 0x0, 0x75, 0x6, 0x9, 0x200, 0x4, 0xff, 0xe7, 0x40, 0x0, 0x401, 0x47ac2596, 0x39, 0xffffffff, 0x6, 0x1ff, 0x2, 0x2, 0x2, 0xffffe9e6, 0x3, 0x5, 0x8, 0x1, 0x3, 0xfffffffe, 0x3, 0xaf79, 0x101]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfff, 0x8, 0x9, 0x4, 0x8000800, 0x3, 0x8, 0x5, 0x0, 0xfffffff7, 0x0, 0x6, 0x3, 0xfffffff9, 0xfffffffa, 0x8, 0x40, 0x2, 0xd, 0x6, 0x8, 0x1de, 0x0, 0x3, 0x2800, 0x4, 0xffffffff, 0x6, 0x6, 0x0, 0x2, 0x58f3, 0x10001, 0x6, 0x4, 0x5, 0x2, 0x6, 0x51ec, 0x4, 0x8, 0x15c, 0x2, 0x1ff, 0x2, 0xfffff58a, 0x10, 0xc, 0x9, 0x7, 0x2, 0x7, 0x6, 0x2, 0x2, 0x204, 0x942, 0x6, 0x400, 0x1, 0x3, 0x2, 0xfffffff7, 0x1, 0x8, 0x1, 0x3, 0xb33, 0xe, 0x7, 0x5, 0x6b, 0x1ff, 0x3, 0x6, 0x1, 0x1, 0xfffffe01, 0xdc, 0x9, 0x1, 0x7, 0x0, 0x8, 0x10001, 0xc, 0x3, 0xe, 0x1ff, 0x80, 0x401, 0x3, 0x7ae4e9d, 0x3, 0x12b0, 0x5, 0x0, 0x101, 0x8, 0xee3, 0x3, 0x7, 0x7, 0x6, 0x6, 0x2, 0x6, 0x5, 0xf, 0x4, 0x3, 0x7, 0x2, 0x3e1, 0x1, 0x10001, 0xffff, 0x10, 0x401, 0x3, 0xe7a1, 0x401, 0x7, 0x6, 0x57, 0x1, 0x3, 0x1000, 0x0, 0x28, 0xc6, 0x3, 0x6, 0x1, 0x9, 0x7, 0x0, 0x400000ae, 0x3a81, 0x1, 0x8, 0x9, 0x1, 0xfff, 0x3999, 0x0, 0x7, 0x14, 0x1, 0x5, 0xce, 0xf0000000, 0x5, 0x7, 0x7, 0x3, 0x6, 0x1, 0xb, 0x9, 0x7, 0x9, 0x5, 0x6, 0x2, 0x3, 0x0, 0x7, 0x7, 0x3, 0x7, 0x2, 0x8, 0x31f8, 0x3, 0x2, 0xb, 0x8, 0x5, 0x8000, 0x5, 0x6, 0x80000000, 0x96c0, 0xfffffeff, 0x9, 0x9, 0x80, 0xfffffffd, 0xc8, 0x2, 0x2, 0x81, 0x10001, 0xde8, 0x3ff, 0x4, 0x6, 0xd, 0x8, 0xa, 0x81, 0xde, 0x8, 0x2, 0x2, 0xa, 0x5, 0x9a62295, 0x8, 0x401, 0x7f, 0x8, 0x1, 0x4, 0x7b02, 0xffffffff, 0x80000001, 0x5, 0xf, 0x7, 0xffffffff, 0xa, 0x9, 0x2, 0xe, 0xd, 0xfffffff6, 0x4, 0x5, 0x804e, 0xeb, 0x800, 0xcb8, 0x6, 0x9, 0x86b2, 0x3ff, 0xfffffff8, 0x6, 0xf1e7, 0x8, 0x79d2, 0x4d4, 0x7, 0x2, 0x7, 0x7fffffff, 0x4, 0x7, 0x9, 0x7fff, 0x1, 0xa00, 0x4]}]}]}}]}, 0x87c}}, 0x0) 243.342854ms ago: executing program 1 (id=5239): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x1, 0x0}) 141.344866ms ago: executing program 3 (id=5240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000700000a4c000000090a010200000000000000000100000008000340000400a408000a40000000000900020073797a32000000000900010073798e30000000480800044000000001080005400000002c"], 0x74}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) 0s ago: executing program 3 (id=5241): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001001200bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): xpacket 50121, setting to 1024 [ 1260.685254][T23063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1260.724300][T12581] usb 3-1: config 5 interface 87 altsetting 5 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 1260.769086][T23063] vlan2: entered allmulticast mode [ 1260.777402][T23063] macsec0: entered allmulticast mode [ 1260.792478][T23063] veth1_macvtap: entered allmulticast mode [ 1260.792513][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1260.861049][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1260.895754][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1260.953613][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1260.996247][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1261.014269][T12581] usb 3-1: config 5 interface 63 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1261.044389][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1261.064416][T14977] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1261.075350][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1261.147493][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1261.177005][T12581] usb 3-1: config 5 interface 63 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1261.228514][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0x9, skipping [ 1261.236577][T14977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.239782][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0x8, skipping [ 1261.269683][T23077] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1261.274469][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0x5, skipping [ 1261.290963][T12581] usb 3-1: config 5 interface 146 altsetting 242 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1261.303072][T12581] usb 3-1: config 5 interface 146 altsetting 242 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1261.303812][T14977] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1261.343554][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0x83, skipping [ 1261.362514][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 1261.379185][T14977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.386587][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 1261.387549][T19913] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1261.429236][T14977] usb 5-1: config 0 descriptor?? [ 1261.440289][T12581] usb 3-1: config 5 interface 146 altsetting 242 has an invalid descriptor for endpoint zero, skipping [ 1261.466558][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0xA, skipping [ 1261.493192][T12581] usb 3-1: config 5 interface 146 altsetting 242 has an invalid descriptor for endpoint zero, skipping [ 1261.512693][T12581] usb 3-1: config 5 interface 146 altsetting 242 has a duplicate endpoint with address 0xF, skipping [ 1261.556578][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1261.568053][T12581] usb 3-1: config 5 interface 217 altsetting 6 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 1261.584818][T12581] usb 3-1: config 5 interface 217 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 1261.600000][T12581] usb 3-1: config 5 interface 217 altsetting 6 endpoint 0x81 has invalid maxpacket 41713, setting to 1024 [ 1261.604596][T19913] usb 1-1: Using ep0 maxpacket: 16 [ 1261.612674][T12581] usb 3-1: config 5 interface 217 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1261.631463][T12581] usb 3-1: config 5 interface 217 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1261.646219][T23071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.662343][T23071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.679077][T14977] usbhid 5-1:0.0: can't add hid device: -71 [ 1261.707592][T23071] vlan3: entered promiscuous mode [ 1261.709874][T14977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1261.721564][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 1261.747975][T12581] usb 3-1: config 5 interface 217 altsetting 6 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 1261.761935][T14977] usb 5-1: USB disconnect, device number 99 [ 1261.807541][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0x8F, skipping [ 1261.821784][T12581] usb 3-1: config 5 interface 217 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1261.841031][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1261.857590][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1261.868756][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1261.881246][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1261.892875][T12581] usb 3-1: config 5 interface 217 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1261.898887][T23089] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.904756][T12581] usb 3-1: config 5 interface 217 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 1261.912934][T23089] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.935161][T23089] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.943914][T23089] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.965652][T19913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1261.977883][T19913] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1261.986716][T19913] usb 1-1: can't read configurations, error -71 [ 1261.999627][T12581] usb 3-1: config 5 interface 87 has no altsetting 0 [ 1262.018332][T12581] usb 3-1: config 5 interface 63 has no altsetting 0 [ 1262.025366][T12588] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1262.038370][T12581] usb 3-1: config 5 interface 146 has no altsetting 0 [ 1262.047439][T12581] usb 3-1: config 5 interface 217 has no altsetting 0 [ 1262.057796][T12581] usb 3-1: string descriptor 0 read error: -71 [ 1262.070847][T12581] usb 3-1: New USB device found, idVendor=7392, idProduct=d822, bcdDevice=85.a1 [ 1262.102096][T12581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.159593][T12581] usb 3-1: can't set config #5, error -71 [ 1262.165710][T12588] usb 4-1: device descriptor read/64, error -71 [ 1262.214731][T12581] usb 3-1: USB disconnect, device number 96 [ 1262.404448][T12588] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1262.534378][T12588] usb 4-1: device descriptor read/64, error -71 [ 1262.668099][T12588] usb usb4-port1: attempt power cycle [ 1263.025177][T19913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1263.035498][T12588] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1263.067357][T12588] usb 4-1: device descriptor read/8, error -71 [ 1263.175466][T19913] usb 1-1: device descriptor read/64, error -71 [ 1263.285693][T19913] usb usb1-port1: attempt power cycle [ 1263.324315][T12588] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1263.355733][T12588] usb 4-1: device descriptor read/8, error -71 [ 1263.466173][T12588] usb usb4-port1: unable to enumerate USB device [ 1263.484365][T12581] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1263.634332][T12581] usb 2-1: Using ep0 maxpacket: 32 [ 1263.636818][T19913] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1263.641663][T12581] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1263.655307][T12581] usb 2-1: config 0 has no interface number 0 [ 1263.663445][T12581] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1263.672994][T12581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.674187][T19913] usb 1-1: device descriptor read/8, error -71 [ 1263.681104][T12581] usb 2-1: Product: syz [ 1263.681126][T12581] usb 2-1: Manufacturer: syz [ 1263.681141][T12581] usb 2-1: SerialNumber: syz [ 1263.702057][T12581] usb 2-1: config 0 descriptor?? [ 1263.716216][T12581] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1263.725326][T12581] usb 2-1: selecting invalid altsetting 1 [ 1263.731070][T12581] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1263.740639][T12581] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1263.751391][T12581] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1263.759761][T12581] usb 2-1: media controller created [ 1263.797857][T12581] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1263.935723][T19913] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1263.970634][T19913] usb 1-1: device descriptor read/8, error -71 [ 1264.085844][T19913] usb usb1-port1: unable to enumerate USB device [ 1264.886208][T12581] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1265.194608][T19913] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1265.279071][T12581] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1265.309401][T23125] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1265.383594][T19913] usb 3-1: Using ep0 maxpacket: 16 [ 1265.423888][T19913] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1265.433212][T19913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.452046][T19913] usb 3-1: Product: syz [ 1265.459890][T19913] usb 3-1: Manufacturer: syz [ 1265.469378][T19913] usb 3-1: SerialNumber: syz [ 1265.504393][ T8306] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1265.512102][T14977] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1265.531850][T19913] usb 3-1: config 0 descriptor?? [ 1265.681817][T14977] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1265.694491][T14977] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.709248][T14977] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1265.722248][ T8306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1265.733571][ T8306] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1265.756594][T14977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.768784][ T8306] usb 5-1: can't read configurations, error -71 [ 1265.787015][T14977] hub 4-1:4.0: USB hub found [ 1265.974133][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1266.008060][T19913] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1266.024421][T19913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1266.038708][T19913] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1266.049146][T19913] usb 3-1: media controller created [ 1266.100791][T23149] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 1266.131743][T19913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1266.142597][T14977] hub 4-1:4.0: 13 ports detected [ 1266.154340][T14977] usb 4-1: selecting invalid altsetting 1 [ 1266.162518][T14977] hub 4-1:4.0: Using single TT (err -22) [ 1266.169726][T14977] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1266.209007][T19913] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1266.217508][T19913] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1266.347386][T14977] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1266.361439][T14977] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1266.374318][ T5927] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1266.397085][T14977] usb 4-1: USB disconnect, device number 107 [ 1266.558709][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.572539][ T5927] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1266.587935][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.630704][ T5927] usb 1-1: config 0 descriptor?? [ 1266.850380][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 1266.859201][T12581] usb 2-1: USB disconnect, device number 111 [ 1266.871974][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1266.913643][ T5927] usb 1-1: USB disconnect, device number 21 [ 1267.604304][T12581] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1267.691350][ T8306] usb 3-1: USB disconnect, device number 97 [ 1267.737958][ T8306] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1267.789538][T12581] usb 4-1: device descriptor read/64, error -71 [ 1268.047125][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 1268.077047][T12581] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1268.224521][T12588] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1268.234389][T12581] usb 4-1: device descriptor read/64, error -71 [ 1268.244385][ T8306] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1268.354612][T12581] usb usb4-port1: attempt power cycle [ 1268.386206][T12588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.401016][T12588] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1268.411095][ T8306] usb 5-1: Using ep0 maxpacket: 16 [ 1268.435768][T23194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.444798][T23194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.463962][T23194] vlan3: entered promiscuous mode [ 1268.473131][T12588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.516824][T12588] usb 3-1: config 0 descriptor?? [ 1268.572073][ T8306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1268.586694][ T8306] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1268.595973][ T8306] usb 5-1: can't read configurations, error -71 [ 1268.704361][T12581] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1268.725024][T12581] usb 4-1: device descriptor read/8, error -71 [ 1268.958355][T12588] lenovo 0003:17EF:60A3.0028: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 1268.985106][T12581] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1268.999372][T12588] usb 3-1: USB disconnect, device number 98 [ 1269.035438][T12581] usb 4-1: device descriptor read/8, error -71 [ 1269.164760][T12581] usb usb4-port1: unable to enumerate USB device [ 1269.189996][T23209] fido_id[23209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1269.226007][T23211] vlan3: entered promiscuous mode [ 1269.297693][T23213] QAT: Invalid ioctl -1006595043 [ 1269.414438][T12588] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1269.594328][T12588] usb 3-1: Using ep0 maxpacket: 32 [ 1269.600793][T12588] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1269.609177][T12588] usb 3-1: config 0 has no interface number 0 [ 1269.617355][T12588] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1269.627003][T12588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.637114][T12588] usb 3-1: Product: syz [ 1269.641281][T12588] usb 3-1: Manufacturer: syz [ 1269.649507][T12588] usb 3-1: SerialNumber: syz [ 1269.661661][T12588] usb 3-1: config 0 descriptor?? [ 1269.707329][T12588] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1269.739271][T12588] usb 3-1: selecting invalid altsetting 1 [ 1269.751657][T12588] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1269.766448][T12588] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1269.777865][T12588] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1269.786755][T12588] usb 3-1: media controller created [ 1269.824872][T12588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1269.844652][T12581] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1269.934544][ T8306] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1270.036814][T12581] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1270.045061][T12581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.055623][T12581] usb 2-1: config 0 has no interface number 0 [ 1270.083205][T12581] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 1270.096917][T12581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.171555][T12581] usb 2-1: config 0 descriptor?? [ 1270.181485][ T8306] usb 5-1: config 0 has no interfaces? [ 1270.184753][T12581] usb 2-1: bad CDC descriptors [ 1270.214021][ T8306] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1270.243262][ T8306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.303223][ T8306] usb 5-1: Product: syz [ 1270.357160][ T8306] usb 5-1: Manufacturer: syz [ 1270.387377][ T8306] usb 5-1: SerialNumber: syz [ 1270.429893][ T8306] usb 5-1: config 0 descriptor?? [ 1270.594733][T12581] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1270.634592][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1270.662646][T23227] netlink: 2608 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1270.759384][T12581] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1270.768880][T12581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.780458][T12581] usb 4-1: config 0 descriptor?? [ 1270.793894][T12581] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1270.803253][ T43] usb 1-1: config 0 has no interfaces? [ 1270.814762][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1270.828310][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.837287][ T43] usb 1-1: Product: syz [ 1270.841646][ T43] usb 1-1: Manufacturer: syz [ 1270.849400][ T43] usb 1-1: SerialNumber: syz [ 1270.871222][ T43] usb 1-1: config 0 descriptor?? [ 1270.886600][T12588] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1270.893940][T12588] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1270.953796][T23208] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1270.995190][T23236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.009116][T23236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.098980][T23238] netlink: 'syz.0.4870': attribute type 1 has an invalid length. [ 1271.107170][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1271.227380][T12581] gspca_cpia1: usb_control_msg 03, error -71 [ 1271.239231][T12581] gspca_cpia1: usb_control_msg 01, error -71 [ 1271.249607][T12581] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1271.268410][T23236] input: syz0 as /devices/virtual/input/input68 [ 1271.415310][T12581] usb 4-1: USB disconnect, device number 112 [ 1271.714613][T12581] usb 1-1: USB disconnect, device number 22 [ 1272.424307][T12581] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1272.500212][T12588] usb 3-1: USB disconnect, device number 99 [ 1272.594470][T12581] usb 4-1: Using ep0 maxpacket: 8 [ 1272.673036][ T5927] usb 5-1: USB disconnect, device number 104 [ 1272.693331][T12581] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1272.723667][T12581] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.739101][T12581] usb 4-1: config 0 has no interface number 0 [ 1272.785228][T12581] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1272.802536][T12581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.811295][T12581] usb 4-1: Product: syz [ 1272.831047][T12581] usb 4-1: Manufacturer: syz [ 1272.840291][T12581] usb 4-1: SerialNumber: syz [ 1272.904434][T12588] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1272.925449][T12581] usb 4-1: config 0 descriptor?? [ 1272.950041][ T5927] usb 2-1: USB disconnect, device number 112 [ 1273.091785][T23261] FAULT_INJECTION: forcing a failure. [ 1273.091785][T23261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.111499][T12588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.128319][T23261] CPU: 1 UID: 0 PID: 23261 Comm: syz.1.4877 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 1273.128346][T23261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1273.128358][T23261] Call Trace: [ 1273.128366][T23261] [ 1273.128376][T23261] dump_stack_lvl+0x189/0x250 [ 1273.128409][T23261] ? __pfx____ratelimit+0x10/0x10 [ 1273.128435][T23261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.128460][T23261] ? __pfx__printk+0x10/0x10 [ 1273.128480][T23261] ? __might_fault+0xb0/0x130 [ 1273.128510][T23261] should_fail_ex+0x414/0x560 [ 1273.128539][T23261] _copy_from_user+0x2d/0xb0 [ 1273.128559][T23261] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 1273.128604][T23261] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1273.128638][T23261] ? trace_kmalloc+0x1f/0xd0 [ 1273.128658][T23261] ip_generic_getfrag+0x12f/0x2b0 [ 1273.128687][T23261] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1273.128715][T23261] ? skb_put+0x11b/0x210 [ 1273.128740][T23261] __ip6_append_data+0x3846/0x3de0 [ 1273.128784][T23261] ? __lock_acquire+0xab9/0xd20 [ 1273.128811][T23261] ? __pfx_raw6_getfrag+0x10/0x10 [ 1273.128851][T23261] ? ip6_mtu+0x7d/0x3f0 [ 1273.128876][T23261] ? __pfx___ip6_append_data+0x10/0x10 [ 1273.128896][T23261] ? __pfx_ip6_mtu+0x10/0x10 [ 1273.128925][T23261] ip6_append_data+0x1c4/0x380 [ 1273.128950][T23261] ? __pfx_raw6_getfrag+0x10/0x10 [ 1273.128977][T23261] rawv6_sendmsg+0x124b/0x17f0 [ 1273.129016][T23261] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1273.129038][T23261] ? __lock_acquire+0xab9/0xd20 [ 1273.129086][T23261] ? __pfx_aa_sk_perm+0x10/0x10 [ 1273.129110][T23261] ? sock_rps_record_flow+0x19/0x410 [ 1273.129132][T23261] ? inet_sendmsg+0x2f4/0x370 [ 1273.129148][T23261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1273.129174][T23261] __sock_sendmsg+0x19c/0x270 [ 1273.129203][T23261] ____sys_sendmsg+0x505/0x830 [ 1273.129231][T23261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.129263][T23261] ? import_iovec+0x74/0xa0 [ 1273.129285][T23261] ___sys_sendmsg+0x21f/0x2a0 [ 1273.129310][T23261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.129369][T23261] ? __fget_files+0x2a/0x420 [ 1273.129388][T23261] ? __fget_files+0x3a0/0x420 [ 1273.129418][T23261] __x64_sys_sendmsg+0x19b/0x260 [ 1273.129443][T23261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.129490][T23261] do_syscall_64+0xfa/0x3b0 [ 1273.129507][T23261] ? lockdep_hardirqs_on+0x9c/0x150 [ 1273.129531][T23261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.129549][T23261] ? clear_bhb_loop+0x60/0xb0 [ 1273.129570][T23261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.129588][T23261] RIP: 0033:0x7fe237f8e929 [ 1273.129606][T23261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.129622][T23261] RSP: 002b:00007fe235df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.129642][T23261] RAX: ffffffffffffffda RBX: 00007fe2381b5fa0 RCX: 00007fe237f8e929 [ 1273.129656][T23261] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1273.129668][T23261] RBP: 00007fe235df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.129680][T23261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.129692][T23261] R13: 0000000000000000 R14: 00007fe2381b5fa0 R15: 00007fe2382dfa28 [ 1273.129721][T23261] [ 1273.451645][T12588] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1273.451861][T19913] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1273.464948][T12588] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1273.481554][T12588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.493116][T12588] usb 3-1: config 0 descriptor?? [ 1273.502500][T12588] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1273.509017][T12588] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1273.524748][ T8306] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1273.542946][T12581] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1273.549601][T12581] usb 4-1: No valid video chain found. [ 1273.758709][T19913] usb 5-1: Using ep0 maxpacket: 8 [ 1273.794337][T19913] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1273.803324][T19913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1273.856285][T19913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1273.887183][T19913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1273.934449][ T8306] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.950658][ T8306] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.031205][T19913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.062803][ T8306] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.086380][T19913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1274.108841][ T8306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.124317][T19913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.159800][ T8306] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1274.199487][ T8306] usb 1-1: invalid MIDI out EP 0 [ 1274.408060][T19913] usb 5-1: GET_CAPABILITIES returned 0 [ 1274.474554][T19913] usbtmc 5-1:16.0: can't read capabilities [ 1274.591704][ T8306] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1274.624876][T23259] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 1274.638443][T19913] usb 5-1: USB disconnect, device number 105 [ 1274.718238][T12581] usb 4-1: USB disconnect, device number 113 [ 1274.900216][T23268] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1275.244466][T12581] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1275.509011][T12581] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.685420][T12581] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1275.778634][T12581] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1275.894837][ T8306] usb 1-1: USB disconnect, device number 23 [ 1275.898299][T12581] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1275.985895][T12581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.089298][T12581] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.125018][T23288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4881'. [ 1276.127182][T12581] usb 5-1: invalid MIDI out EP 0 [ 1276.150641][ T30] audit: type=1326 audit(1749578351.650:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23285 comm="syz.0.4882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b4b58e929 code=0x0 [ 1276.326858][T12581] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1276.571527][ T30] audit: type=1800 audit(1749578352.070:1139): pid=23289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4882" name="bus" dev="ramfs" ino=110375 res=0 errno=0 [ 1276.834519][ T5927] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1276.949245][T12581] usb 3-1: USB disconnect, device number 100 [ 1277.004473][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1277.013226][ T5927] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.033319][ T5927] usb 4-1: config 0 has no interface number 0 [ 1277.043749][ T5927] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1277.063163][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.076473][ T5927] usb 4-1: Product: syz [ 1277.080670][ T5927] usb 4-1: Manufacturer: syz [ 1277.086404][ T5927] usb 4-1: SerialNumber: syz [ 1277.096107][ T5927] usb 4-1: config 0 descriptor?? [ 1277.108467][ T5927] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1277.118157][ T5927] usb 4-1: selecting invalid altsetting 1 [ 1277.124469][ T5927] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1277.149575][ T5927] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1277.164657][ T5927] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1277.173094][ T5927] usb 4-1: media controller created [ 1277.203993][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1277.534836][ T8306] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1277.709468][ T8306] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.733980][ T8306] usb 1-1: config 0 has no interface number 0 [ 1277.788108][ T8306] usb 1-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1277.914381][ T8306] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1277.975594][ T8306] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.995806][ T8306] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1278.026251][ T8306] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1278.027722][T12584] usb 5-1: USB disconnect, device number 106 [ 1278.043131][ T8306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.053583][T23280] delete_channel: no stack [ 1278.144092][ T8306] usb 1-1: config 0 descriptor?? [ 1278.198316][T23317] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1278.404792][T23292] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1278.437421][ T5927] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1278.458325][ T5927] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1278.504308][T12581] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1278.597074][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1278.618776][ T8306] uclogic 0003:28BD:0935.0029: interface is invalid, ignoring [ 1278.629924][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1278.714177][T12581] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1278.770400][T12581] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1278.796805][T12581] usb 3-1: can't read configurations, error -71 [ 1278.823113][ T8306] usb 1-1: USB disconnect, device number 24 [ 1279.616705][ T5927] usb 4-1: USB disconnect, device number 114 [ 1279.890763][T12581] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1280.117363][T12581] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 529 [ 1280.130319][T12581] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1280.130339][T12581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.130350][T12581] usb 3-1: Product: syz [ 1280.130358][T12581] usb 3-1: Manufacturer: syz [ 1280.130366][T12581] usb 3-1: SerialNumber: syz [ 1280.134458][ T5927] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1280.180997][T23338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1280.325489][T12581] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1280.545542][T12588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1280.747239][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.778332][T12581] usb 3-1: USB disconnect, device number 102 [ 1280.841410][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.871368][ T5927] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1280.890893][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.950915][ T5927] usb 2-1: config 0 descriptor?? [ 1281.484459][ T8306] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1281.548609][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.594771][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.630827][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.650806][ T8306] usb 4-1: Using ep0 maxpacket: 32 [ 1281.678652][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.689497][T12588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1281.722483][ T8306] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1281.724121][T12588] ath9k_htc: Failed to initialize the device [ 1281.744901][ T8306] usb 4-1: config 0 has no interface number 0 [ 1281.752327][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.783328][ T8306] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1281.793854][ T8306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.814954][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.829455][ T8306] usb 4-1: Product: syz [ 1281.833035][T12581] usb 3-1: ath9k_htc: USB layer deinitialized [ 1281.833764][ T8306] usb 4-1: Manufacturer: syz [ 1281.854840][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.869395][ T8306] usb 4-1: SerialNumber: syz [ 1281.878100][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.903399][ T8306] usb 4-1: config 0 descriptor?? [ 1281.916505][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.944193][ T8306] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1281.965051][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.974084][ T8306] usb 4-1: selecting invalid altsetting 1 [ 1281.997380][ T8306] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1282.040084][ T8306] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1282.102195][ T8306] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1282.123207][ T8306] usb 4-1: media controller created [ 1282.193294][ T8306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.206995][T12581] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1282.335076][ T43] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1282.633273][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1282.647214][ T43] usb 1-1: config 0 has no interface number 0 [ 1282.666283][ T43] usb 1-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1282.724034][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1282.745083][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.767947][ T43] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1282.839615][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1282.917894][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.939456][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 1282.947808][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1282.996615][ T43] usb 1-1: config 0 descriptor?? [ 1283.033211][ T5927] usb 2-1: USB disconnect, device number 113 [ 1283.209563][T23368] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1283.235063][ T8306] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1283.248750][ T8306] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1283.452942][ T43] uclogic 0003:28BD:0935.002A: interface is invalid, ignoring [ 1283.653681][ T43] usb 1-1: USB disconnect, device number 25 [ 1283.903371][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1284.686391][ T5927] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1285.169355][ T5927] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1285.223138][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.262170][ T5927] usb 3-1: Product: syz [ 1285.282479][ T5927] usb 3-1: Manufacturer: syz [ 1285.304297][ T5927] usb 3-1: SerialNumber: syz [ 1285.373431][ T43] usb 4-1: USB disconnect, device number 115 [ 1285.390422][ T5927] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1285.437277][T12588] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1285.504377][T14977] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1285.704491][T14977] usb 2-1: Using ep0 maxpacket: 32 [ 1285.719366][T14977] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 1285.719891][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1285.729021][T14977] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.751316][T14977] usb 2-1: config 8 has no interface number 0 [ 1285.768838][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1285.769706][T14977] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1285.906284][T14977] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1285.934924][T14977] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 1023 [ 1285.945414][T14977] usb 2-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.960104][T23408] netlink: 'syz.2.4916': attribute type 12 has an invalid length. [ 1285.981659][T14977] usb 2-1: config 8 interface 203 has no altsetting 0 [ 1286.004726][T14977] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1286.014857][T14977] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 1286.043800][T14977] usb 2-1: Product: syz [ 1286.053859][T14977] usb 2-1: Manufacturer: syz [ 1286.064631][T14977] usb 2-1: SerialNumber: syz [ 1286.094360][ T8306] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1286.120526][T23416] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1286.128509][T23416] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1286.284406][ T8306] usb 5-1: Using ep0 maxpacket: 16 [ 1286.343965][ T8306] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1286.353492][ T30] audit: type=1326 audit(1749578361.830:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1286.353710][ T8306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.403073][ T30] audit: type=1326 audit(1749578361.830:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1286.500687][ T8306] usb 5-1: Product: syz [ 1286.508133][T12588] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1286.520546][ T8306] usb 5-1: Manufacturer: syz [ 1286.531476][ T30] audit: type=1326 audit(1749578361.830:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1286.558248][ T8306] usb 5-1: SerialNumber: syz [ 1286.600185][T12588] ath9k_htc: Failed to initialize the device [ 1286.612989][ T8306] usb 5-1: config 0 descriptor?? [ 1286.678500][T12588] usb 3-1: ath9k_htc: USB layer deinitialized [ 1286.697266][ T30] audit: type=1326 audit(1749578361.830:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1286.767699][ T30] audit: type=1326 audit(1749578361.830:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1286.955173][ T30] audit: type=1326 audit(1749578361.830:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1287.041199][ T30] audit: type=1326 audit(1749578361.840:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1287.110244][ T30] audit: type=1326 audit(1749578361.840:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23429 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e2f8e929 code=0x7ffc0000 [ 1287.205197][ T8306] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1287.220100][ T8306] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1287.242110][ T8306] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1287.292953][ T8306] usb 5-1: media controller created [ 1287.426896][ T8306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1287.475339][ T8306] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1287.483764][ T8306] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1287.604369][T12602] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1287.786841][T12602] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.232984][T12602] usb 1-1: config 0 has no interface number 0 [ 1288.240258][T12602] usb 1-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1288.255259][T12602] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1288.267585][T12602] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.278796][T12602] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1288.295431][T12602] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1288.364691][T12602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.385386][T12588] usb 3-1: USB disconnect, device number 104 [ 1288.466315][T12602] usb 1-1: config 0 descriptor?? [ 1288.497473][T23445] binder: 23444:23445 ioctl c0306201 0 returned -14 [ 1288.508127][T23445] binder: 23444:23445 ioctl c018aec0 0 returned -22 [ 1288.529302][T14977] port100 2-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1288.589552][T14977] usb 2-1: USB disconnect, device number 114 [ 1288.755771][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 1288.844333][ T5927] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1288.929267][T12602] uclogic 0003:28BD:0935.002B: interface is invalid, ignoring [ 1289.004435][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1289.017721][ T5927] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1289.026601][ T5927] usb 4-1: config 0 has no interface number 0 [ 1289.033178][ T5927] usb 4-1: config 0 interface 106 has no altsetting 0 [ 1289.082824][ T5927] usb 4-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 1289.097114][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.109027][ T5927] usb 4-1: Product: syz [ 1289.113468][ T5927] usb 4-1: Manufacturer: syz [ 1289.119748][ T5927] usb 4-1: SerialNumber: syz [ 1289.129999][T14977] usb 1-1: USB disconnect, device number 26 [ 1289.130133][ T5927] usb 4-1: config 0 descriptor?? [ 1289.169159][ T5927] cdc_phonet 4-1:0.106: probe with driver cdc_phonet failed with error -22 [ 1289.248166][ T5927] usb 5-1: USB disconnect, device number 107 [ 1289.287648][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1289.445306][T23470] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4936' sets config #0 [ 1289.460512][T23470] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4936' sets config #1 [ 1289.482815][T23469] netlink: 'syz.3.4929': attribute type 27 has an invalid length. [ 1290.128328][T23492] netlink: 'syz.2.4938': attribute type 2 has an invalid length. [ 1290.217815][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4938'. [ 1290.626248][T23497] FAULT_INJECTION: forcing a failure. [ 1290.626248][T23497] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.639079][T23497] CPU: 0 UID: 0 PID: 23497 Comm: syz.1.4939 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 1290.639105][T23497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1290.639117][T23497] Call Trace: [ 1290.639125][T23497] [ 1290.639133][T23497] dump_stack_lvl+0x189/0x250 [ 1290.639165][T23497] ? __pfx____ratelimit+0x10/0x10 [ 1290.639192][T23497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.639217][T23497] ? __pfx__printk+0x10/0x10 [ 1290.639243][T23497] ? __pfx___might_resched+0x10/0x10 [ 1290.639274][T23497] should_fail_ex+0x414/0x560 [ 1290.639299][T23497] ? create_io_worker+0x27/0x5d0 [ 1290.639321][T23497] should_failslab+0xa8/0x100 [ 1290.639342][T23497] __kmalloc_cache_noprof+0x70/0x3d0 [ 1290.639361][T23497] ? create_io_worker+0xac/0x5d0 [ 1290.639382][T23497] ? create_io_worker+0x27/0x5d0 [ 1290.639402][T23497] create_io_worker+0xac/0x5d0 [ 1290.639433][T23497] io_wq_enqueue+0x62c/0x850 [ 1290.639454][T23497] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1290.639479][T23497] io_poll_task_func+0xc08/0xff0 [ 1290.639513][T23497] ? __pfx_io_poll_task_func+0x10/0x10 [ 1290.639543][T23497] ? percpu_ref_get_many+0x18c/0x1e0 [ 1290.639562][T23497] ? __pfx_io_poll_task_func+0x10/0x10 [ 1290.639585][T23497] io_handle_tw_list+0x1f5/0x4c0 [ 1290.639612][T23497] tctx_task_work_run+0x99/0x370 [ 1290.639634][T23497] tctx_task_work+0x3f/0x90 [ 1290.639654][T23497] task_work_run+0x1d1/0x260 [ 1290.639679][T23497] ? __pfx_task_work_run+0x10/0x10 [ 1290.639713][T23497] get_signal+0x11ed/0x1340 [ 1290.639737][T23497] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.639780][T23497] arch_do_signal_or_restart+0x9a/0x750 [ 1290.639810][T23497] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1290.639848][T23497] ? exit_to_user_mode_loop+0x40/0x110 [ 1290.639876][T23497] exit_to_user_mode_loop+0x75/0x110 [ 1290.639900][T23497] do_syscall_64+0x2bd/0x3b0 [ 1290.639919][T23497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.639936][T23497] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1290.639954][T23497] ? clear_bhb_loop+0x60/0xb0 [ 1290.639975][T23497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.639994][T23497] RIP: 0033:0x7fe237f8e929 [ 1290.640011][T23497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1290.640026][T23497] RSP: 002b:00007fe235dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1290.640045][T23497] RAX: fffffffffffffe00 RBX: 00007fe2381b6080 RCX: 00007fe237f8e929 [ 1290.640059][T23497] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000006 [ 1290.640070][T23497] RBP: 00007fe235dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.640082][T23497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.640093][T23497] R13: 0000000000000000 R14: 00007fe2381b6080 R15: 00007fe2382dfa28 [ 1290.640122][T23497] [ 1290.921042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.330786][T23469] veth1_macvtap: left allmulticast mode [ 1291.365686][T23469] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.384754][T23469] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.396828][T23469] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.504525][T23469] vlan2: left allmulticast mode [ 1291.531726][T23469] macsec0: left allmulticast mode [ 1291.578858][T23469] vlan3: left promiscuous mode [ 1291.586386][T23469] ip6gretap0: left promiscuous mode [ 1291.620569][T23469] bridge1: left promiscuous mode [ 1291.694356][T12584] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1291.728840][T23479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.814140][T23479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.851340][T23479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1291.971388][T12584] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1292.000287][T12584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.023121][T23501] ip6erspan0: entered promiscuous mode [ 1292.046073][T12584] usb 2-1: Product: syz [ 1292.059680][T12584] usb 2-1: Manufacturer: syz [ 1292.068841][T12584] usb 2-1: SerialNumber: syz [ 1292.110397][T12584] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1292.192447][T12579] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1292.845211][T23528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4944' sets config #0 [ 1292.856712][T23528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4944' sets config #1 [ 1292.899659][T23506] random: crng reseeded on system resumption [ 1292.913025][T12584] usb 4-1: USB disconnect, device number 116 [ 1293.299834][T12579] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1293.409915][T12579] ath9k_htc: Failed to initialize the device [ 1293.437181][T12579] usb 2-1: ath9k_htc: USB layer deinitialized [ 1293.586018][T12584] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1293.794348][T12584] usb 1-1: Using ep0 maxpacket: 16 [ 1293.883708][T12584] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1293.895704][T12584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.918929][T12584] usb 1-1: Product: syz [ 1293.931238][T12584] usb 1-1: Manufacturer: syz [ 1293.940906][T12584] usb 1-1: SerialNumber: syz [ 1293.955221][T12584] usb 1-1: config 0 descriptor?? [ 1294.277019][T12602] usb 2-1: USB disconnect, device number 115 [ 1294.374332][T12584] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1294.435923][T12584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1294.507080][T12584] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1294.537514][T23547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4950'. [ 1294.672168][T12584] usb 1-1: media controller created [ 1294.833498][T23550] TCP: TCP_TX_DELAY enabled [ 1294.970595][T12584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1295.034687][T12602] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1295.217077][T12584] zl10353_read_register: readreg error (reg=127, ret==0) [ 1295.224335][T12584] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1295.232359][T12584] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1295.384457][T23553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1295.428697][T23553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1295.497899][T12602] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1295.510568][T12602] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1295.550598][T12602] usb 5-1: can't read configurations, error -71 [ 1295.814417][T12584] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1295.984752][T12584] usb 4-1: Using ep0 maxpacket: 32 [ 1295.991490][T12584] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1296.002572][T12584] usb 4-1: config 0 has no interface number 0 [ 1296.018821][T12584] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1296.028775][T12584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.051927][T12584] usb 4-1: Product: syz [ 1296.084095][T12584] usb 4-1: Manufacturer: syz [ 1296.089001][T12584] usb 4-1: SerialNumber: syz [ 1296.121780][T12584] usb 4-1: config 0 descriptor?? [ 1296.222166][T12584] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1296.263106][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4955'. [ 1296.431715][T12584] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1296.459832][T12584] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1296.567021][T12602] usb 1-1: USB disconnect, device number 27 [ 1296.625395][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1296.748906][T12602] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1296.826322][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1296.828362][T23511] usb 4-1: USB disconnect, device number 117 [ 1296.857616][T23511] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1296.912188][T23511] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1296.944559][T23511] quatech2 4-1:0.51: device disconnected [ 1297.505499][T23595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4964'. [ 1297.564458][T12602] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1297.574510][T23511] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1297.724368][T12602] usb 2-1: Using ep0 maxpacket: 8 [ 1297.732373][T12602] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1297.745713][T12602] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.757610][T23511] usb 5-1: config index 0 descriptor too short (expected 58223, got 36) [ 1297.773568][T23511] usb 5-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 1297.794363][T12602] usb 2-1: config 0 has no interface number 0 [ 1297.800633][T12602] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1297.814727][T23511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.829986][T23511] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 1297.844570][T12584] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1297.853721][T12602] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1297.868069][T12602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.889331][T23511] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1297.899165][T23511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.910174][T12602] usb 2-1: config 0 descriptor?? [ 1297.925086][T23511] usb 5-1: Product: syz [ 1297.929510][T23511] usb 5-1: Manufacturer: syz [ 1297.934139][T23511] usb 5-1: SerialNumber: syz [ 1297.960286][T23511] usb 5-1: config 0 descriptor?? [ 1298.018965][T12584] usb 4-1: Using ep0 maxpacket: 16 [ 1298.039919][T12584] usb 4-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 1298.056310][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1298.060808][T12584] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.095853][T12584] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1298.111244][T12584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1298.136624][T12584] usb 4-1: SerialNumber: syz [ 1298.152264][T23584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.179960][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1298.193713][T12584] usb 4-1: 0:2 : does not exist [ 1298.194811][T23511] usb 5-1: USB disconnect, device number 110 [ 1298.222134][T23584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.301547][T23474] usb 2-1: USB disconnect, device number 116 [ 1298.494353][T12602] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1298.666619][T12602] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1298.674912][T12602] usb 1-1: config 0 has no interface number 0 [ 1298.683636][T12602] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1298.709070][T12602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.719574][T12602] usb 1-1: Product: syz [ 1298.724625][T12602] usb 1-1: Manufacturer: syz [ 1298.729771][T12602] usb 1-1: SerialNumber: syz [ 1298.738919][T12602] usb 1-1: config 0 descriptor?? [ 1298.753627][T12602] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=1 [ 1298.962636][T12602] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1299.096509][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1299.182164][T23604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.221980][T23604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.334103][T23511] usb 1-1: USB disconnect, device number 28 [ 1299.345411][T12602] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1299.494708][T12602] usb 3-1: device descriptor read/64, error -71 [ 1299.515002][T23513] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1299.644478][T23474] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1299.685574][T23513] usb 2-1: Using ep0 maxpacket: 16 [ 1299.693521][T23513] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.708036][T23513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1299.721659][T23513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1299.736188][T23513] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1299.746494][T12602] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1299.761253][T23513] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1299.781303][T23513] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1299.791069][T23513] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1299.803562][T23513] usb 2-1: Manufacturer: syz [ 1299.814510][T23474] usb 5-1: Using ep0 maxpacket: 32 [ 1299.820234][T23513] usb 2-1: config 0 descriptor?? [ 1299.844084][T23474] usb 5-1: config 0 has no interfaces? [ 1299.856168][T23474] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1299.873689][T23474] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1299.883318][T23474] usb 5-1: Product: syz [ 1299.889658][T23474] usb 5-1: Manufacturer: syz [ 1299.904772][T12602] usb 3-1: device descriptor read/64, error -71 [ 1299.912180][T23474] usb 5-1: config 0 descriptor?? [ 1300.014778][T12602] usb usb3-port1: attempt power cycle [ 1300.136043][T23620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.152946][T23620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.167915][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.174449][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.184329][T23513] rc_core: IR keymap rc-hauppauge not found [ 1300.190445][T23513] Registered IR keymap rc-empty [ 1300.204930][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.215646][T23621] netlink: 'syz.4.4975': attribute type 27 has an invalid length. [ 1300.224943][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.279236][T23513] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1300.303297][T23513] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70 [ 1300.305895][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1300.319571][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.345248][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.375999][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.383614][T12602] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1300.405024][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.428919][T12602] usb 3-1: device descriptor read/8, error -71 [ 1300.465041][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.494554][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.514510][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.549955][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.595307][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.628701][T23513] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1300.673618][T23513] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1300.683426][T12602] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1300.712281][T23513] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1300.720494][T23621] veth1_macvtap: left allmulticast mode [ 1300.731080][T12602] usb 3-1: device descriptor read/8, error -71 [ 1300.759557][T23621] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.768910][T23621] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.785047][T23621] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.832113][T23621] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.864593][T12602] usb usb3-port1: unable to enumerate USB device [ 1300.964906][T23621] vlan1: left promiscuous mode [ 1300.969881][T23621] ip6gretap0: left promiscuous mode [ 1300.993529][T23621] veth2: left promiscuous mode [ 1301.019930][T23621] veth6: left promiscuous mode [ 1301.049044][T23621] vlan2: left allmulticast mode [ 1301.067142][T23621] macsec0: left allmulticast mode [ 1301.128701][T23620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1301.232103][T23477] usb 5-1: USB disconnect, device number 111 [ 1301.354627][T12602] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1301.534497][T12602] usb 1-1: Using ep0 maxpacket: 32 [ 1301.542531][T12602] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1301.561429][T12602] usb 1-1: config 0 has no interface number 0 [ 1301.571591][T12602] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1301.594490][T12602] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1301.604789][T12602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.612837][T12602] usb 1-1: Product: syz [ 1301.628208][T12602] usb 1-1: Manufacturer: syz [ 1301.632885][T12602] usb 1-1: SerialNumber: syz [ 1301.641802][T12602] usb 1-1: config 0 descriptor?? [ 1302.114611][T12579] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1302.252098][T23632] usb 2-1: USB disconnect, device number 117 [ 1302.298063][T23640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1302.345409][T23640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1302.374904][T12579] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1302.401434][T12579] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1302.417226][T12579] usb 5-1: can't read configurations, error -71 [ 1303.383962][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1303.392983][T23659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1303.411775][T23659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1303.425922][T23659] ip6gretap1: entered allmulticast mode [ 1304.320569][T12602] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1304.328985][T12602] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1304.340997][T12602] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1304.359561][T12602] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1304.390030][T12602] usb 1-1: USB disconnect, device number 29 [ 1304.424894][T23632] usb 4-1: USB disconnect, device number 118 [ 1304.532240][T23670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.712859][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4990'. [ 1304.964446][T12602] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1305.040748][T23685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1305.128219][T12602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.164667][T12602] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1305.183868][T12602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.201670][T12602] usb 3-1: config 0 descriptor?? [ 1305.412213][T12602] usbhid 3-1:0.0: can't add hid device: -71 [ 1305.419643][T12602] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1305.430587][T12602] usb 3-1: USB disconnect, device number 109 [ 1305.444850][T12579] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1305.504372][T23477] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1305.604485][T12579] usb 4-1: Using ep0 maxpacket: 32 [ 1305.611415][T12579] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.619664][T12579] usb 4-1: config 0 has no interface number 0 [ 1305.631771][T12579] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1305.641528][T12579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.651510][T12579] usb 4-1: Product: syz [ 1305.660736][T12579] usb 4-1: Manufacturer: syz [ 1305.667418][T12579] usb 4-1: SerialNumber: syz [ 1305.676720][T12579] usb 4-1: config 0 descriptor?? [ 1305.684525][T23477] usb 2-1: Using ep0 maxpacket: 16 [ 1305.699370][T12579] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1305.711339][T12579] usb 4-1: selecting invalid altsetting 1 [ 1305.717532][T12579] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1305.728289][T23477] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.745273][T12579] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1305.756320][T23477] usb 2-1: config 0 has no interface number 0 [ 1305.774926][T23477] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1305.787225][T12579] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1305.805844][T23477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.826365][T12579] usb 4-1: media controller created [ 1305.838346][T23477] usb 2-1: Product: syz [ 1305.850606][T23477] usb 2-1: Manufacturer: syz [ 1305.873955][T23477] usb 2-1: SerialNumber: syz [ 1305.908946][T23477] usb 2-1: config 0 descriptor?? [ 1305.920047][T12579] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1305.922677][T23477] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1306.844701][T23632] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1306.926966][T23477] gspca_spca1528: reg_w err -110 [ 1306.956555][T23477] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1306.967378][T23692] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1306.995166][T12579] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1307.016537][T12579] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1307.061493][T23632] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.095911][T23632] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1307.128500][T23632] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1307.183675][T23632] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1307.285570][T23713] overlayfs: missing 'lowerdir' [ 1307.321376][T23632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.443559][T23632] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1307.453087][T23632] usb 5-1: invalid MIDI out EP 0 [ 1307.672757][T23632] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1308.041790][T12602] usb 2-1: USB disconnect, device number 118 [ 1309.040297][ T30] audit: type=1326 audit(1749578384.520:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.091682][T12579] usb 4-1: USB disconnect, device number 119 [ 1309.155650][ T30] audit: type=1326 audit(1749578384.520:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.179419][ T30] audit: type=1326 audit(1749578384.520:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.201883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.209545][ T30] audit: type=1326 audit(1749578384.540:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.231955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.311327][T23732] program syz.3.5004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.343377][ T30] audit: type=1326 audit(1749578384.540:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.365897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.442245][ T30] audit: type=1326 audit(1749578384.540:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.464670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.482354][ T30] audit: type=1326 audit(1749578384.540:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.506961][ T30] audit: type=1326 audit(1749578384.540:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.530028][ T30] audit: type=1326 audit(1749578384.570:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.552540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.603614][ T30] audit: type=1326 audit(1749578384.570:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d13d8e929 code=0x7ffc0000 [ 1309.605997][T23736] dlm: non-version read from control device 36 [ 1310.174314][T12579] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1310.213070][T23708] delete_channel: no stack [ 1310.226558][T23632] usb 5-1: USB disconnect, device number 114 [ 1310.364421][T12602] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1310.396992][T12579] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.414948][T12579] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1310.480190][T12579] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1310.509176][T12579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.524559][T12602] usb 1-1: Using ep0 maxpacket: 32 [ 1310.541320][T12579] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1310.556076][T12602] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.590560][T12579] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1310.672037][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.737077][T12602] usb 1-1: config 0 has no interface number 0 [ 1310.784317][ T43] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1310.840015][T12602] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1310.862566][T12602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.888024][T12602] usb 1-1: Product: syz [ 1310.904269][T12602] usb 1-1: Manufacturer: syz [ 1310.914902][T12602] usb 1-1: SerialNumber: syz [ 1310.941541][T12602] usb 1-1: config 0 descriptor?? [ 1310.950941][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.966627][ T43] usb 5-1: config 0 has no interface number 0 [ 1310.976907][T12602] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1310.981763][ T43] usb 5-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1311.003499][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.014296][T12602] usb 1-1: selecting invalid altsetting 1 [ 1311.019142][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.030943][T12602] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1311.031201][ T43] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1311.058278][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1311.068799][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.083940][T12602] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1311.091221][ T43] usb 5-1: config 0 descriptor?? [ 1311.117752][T12602] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1311.140155][T12602] usb 1-1: media controller created [ 1311.230520][T12602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.547758][ T43] uclogic 0003:28BD:0935.002C: interface is invalid, ignoring [ 1311.786122][ T43] usb 5-1: USB disconnect, device number 115 [ 1312.244977][T23757] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1312.337621][T12602] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1312.351377][T12602] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1312.698640][T23632] usb 2-1: USB disconnect, device number 119 [ 1312.704456][T23791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5026'. [ 1312.714527][T23747] delete_channel: no stack [ 1312.798855][T23797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.807138][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.829144][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1312.850639][T23799] batadv_slave_1: entered promiscuous mode [ 1312.923303][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1313.491318][T12602] usb 1-1: USB disconnect, device number 30 [ 1313.524360][T12587] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1313.548894][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.549091][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.559514][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.569116][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.578319][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.588048][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.597377][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.607909][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.616071][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.623494][T22478] Bluetooth: hci1: unexpected event 0x36 length: 13 > 7 [ 1313.718017][T12587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.735774][T12587] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1313.748947][T12587] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1313.760396][T12587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.775659][T12587] usb 5-1: config 0 descriptor?? [ 1313.798288][T12587] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 1313.805114][T12587] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1314.159447][T12587] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1314.334113][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1314.416926][T12587] usb 1-1: Using ep0 maxpacket: 32 [ 1314.433764][T12587] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1314.445131][T12587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.497997][T12587] usb 1-1: config 0 descriptor?? [ 1314.505427][T23844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 1314.697742][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1314.739531][T12587] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1314.749146][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1314.763044][T12587] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1314.773688][T12587] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1314.781092][T12587] usb 1-1: media controller created [ 1314.839501][T12587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1314.943648][T12587] az6027: usb out operation failed. (-71) [ 1314.956332][T12587] az6027: usb out operation failed. (-71) [ 1314.968815][T12587] stb0899_attach: Driver disabled by Kconfig [ 1314.988122][T12587] az6027: no front-end attached [ 1314.988122][T12587] [ 1315.040485][T12587] az6027: usb out operation failed. (-71) [ 1315.046678][T12587] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1315.101781][T12587] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 1315.314902][T12587] dvb-usb: schedule remote query interval to 400 msecs. [ 1315.322385][T12587] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1315.345763][T12587] usb 1-1: USB disconnect, device number 31 [ 1315.370260][T23834] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1315.559931][T12587] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1315.794355][T23632] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1315.974516][T23632] usb 4-1: Using ep0 maxpacket: 32 [ 1315.988901][T23632] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1316.005003][T23632] usb 4-1: config 0 has no interface number 0 [ 1316.027816][T23632] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1316.040613][T23632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.068965][T23632] usb 4-1: Product: syz [ 1316.101389][T23632] usb 4-1: Manufacturer: syz [ 1316.155344][T23632] usb 4-1: SerialNumber: syz [ 1316.166337][T23632] usb 4-1: config 0 descriptor?? [ 1316.190490][T23632] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1316.256084][T23632] usb 4-1: selecting invalid altsetting 1 [ 1316.271520][T23632] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1316.282894][T23632] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1316.355224][T23632] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1316.379600][T23632] usb 4-1: media controller created [ 1316.401511][T23632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.290476][ T43] usb 5-1: USB disconnect, device number 116 [ 1317.452731][T23861] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1317.471744][T23632] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1317.471826][T23632] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1317.795298][T23881] ptrace attach of "./syz-executor exec"[17206] was attempted by "./syz-executor exec"[23881] [ 1317.826455][T23881] dns_resolver: Unsupported server list version (0) [ 1317.948866][T12579] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1318.152589][T12579] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.161890][T12579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.178038][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1318.185667][T12579] usb 3-1: Product: syz [ 1318.192081][T12579] usb 3-1: Manufacturer: syz [ 1318.201403][T12579] usb 3-1: SerialNumber: syz [ 1318.222815][T12579] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.240670][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.246438][T12602] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1318.466273][T12602] usb 2-1: Using ep0 maxpacket: 16 [ 1318.481568][T23901] random: crng reseeded on system resumption [ 1318.576022][T23906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.624941][T23906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.654574][T12587] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1318.690246][T23906] dummy0: entered promiscuous mode [ 1318.695950][T23906] vlan2: entered promiscuous mode [ 1318.783096][T12602] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1318.803792][T12602] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1318.813678][T12602] usb 2-1: can't read configurations, error -71 [ 1318.839148][T12587] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.852218][T12587] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1318.871092][T12587] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1318.882236][T12587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.894897][T12587] usb 1-1: Product: syz [ 1318.899362][T12587] usb 1-1: Manufacturer: syz [ 1318.905074][T12587] usb 1-1: SerialNumber: syz [ 1318.923658][T12587] usb 1-1: selecting invalid altsetting 1 [ 1319.395665][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1319.477058][ T43] ath9k_htc: Failed to initialize the device [ 1319.626648][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1319.641047][T23926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1319.705576][T23632] usb 4-1: USB disconnect, device number 120 [ 1319.865778][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 1319.909262][T12587] cdc_ncm 1-1:1.0: bind() failure [ 1319.948402][T12587] usb 1-1: USB disconnect, device number 32 [ 1320.164405][T12602] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1320.333343][T12602] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1320.537579][T12579] usb 3-1: USB disconnect, device number 110 [ 1320.610996][T12602] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1320.740342][T12602] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1320.747923][T23942] syzkaller1: entered promiscuous mode [ 1320.762200][T23942] syzkaller1: entered allmulticast mode [ 1320.872154][T12602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.071493][T23930] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1321.140863][T12602] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1321.545853][T12602] usb 2-1: USB disconnect, device number 121 [ 1321.895551][T23953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5072'. [ 1322.414536][T23632] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1322.605936][T23632] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1322.655938][T23632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.675792][ T43] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1322.702472][T23632] usb 1-1: config 0 descriptor?? [ 1322.870262][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1322.900625][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.920190][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.933856][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1322.950645][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1322.960258][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.990986][ T43] usb 2-1: config 0 descriptor?? [ 1323.061226][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1323.087021][T23979] : entered promiscuous mode [ 1323.461402][ T43] hid-picolcd 0003:04D8:C002.002D: item fetching failed at offset 5/7 [ 1323.478954][ T43] hid-picolcd 0003:04D8:C002.002D: device report parse failed [ 1323.510354][ T43] hid-picolcd 0003:04D8:C002.002D: probe with driver hid-picolcd failed with error -22 [ 1323.557477][T23632] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 1323.709877][ T43] usb 2-1: USB disconnect, device number 122 [ 1323.778946][T23995] syz_tun: entered allmulticast mode [ 1323.859961][T23999] syz_tun: left allmulticast mode [ 1323.867381][T23999] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1323.877649][T23999] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1324.495299][ T43] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1324.574542][T23632] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1324.645261][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1324.661240][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.704370][T12579] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1324.733934][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.762657][T23632] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1324.784310][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1324.798966][T23632] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1324.803993][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.842991][T23477] usb 1-1: USB disconnect, device number 33 [ 1324.844406][T23632] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1324.875306][T12579] usb 4-1: Using ep0 maxpacket: 16 [ 1324.878470][T23632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.941717][T12579] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1324.960402][T23632] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1324.979846][ T43] usb 3-1: config 0 descriptor?? [ 1324.994979][T23632] usb 5-1: invalid MIDI out EP 0 [ 1325.005676][T12579] usb 4-1: config 255 has an invalid interface number: 28 but max is 1 [ 1325.014004][T12579] usb 4-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 1325.165780][T12579] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 1325.206385][T23632] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1325.285665][T12579] usb 4-1: config 255 has no interface number 0 [ 1325.403795][T12579] usb 4-1: config 255 interface 28 altsetting 14 bulk endpoint 0xA has invalid maxpacket 64 [ 1325.427645][T12579] usb 4-1: config 255 interface 28 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 1325.481919][T12579] usb 4-1: config 255 interface 28 has no altsetting 0 [ 1325.498829][T12579] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=b3.9b [ 1325.509518][T12579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.517859][T12579] usb 4-1: Product: syz [ 1325.553370][T12579] usb 4-1: Manufacturer: syz [ 1325.568504][T12579] usb 4-1: SerialNumber: syz [ 1325.630829][T24020] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1325.774360][T23632] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1325.870507][T12579] usb 4-1: USB disconnect, device number 121 [ 1325.944616][T23632] usb 2-1: Using ep0 maxpacket: 16 [ 1325.970823][T23632] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.002334][T23632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1326.083052][T23632] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1326.102640][T23632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.121110][T23632] usb 2-1: Product: syz [ 1326.131239][T23632] usb 2-1: Manufacturer: syz [ 1326.141350][T23632] usb 2-1: SerialNumber: syz [ 1326.390147][T23632] usb 2-1: 0:2 : does not exist [ 1326.408500][T23632] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.472328][T23632] usb 2-1: USB disconnect, device number 123 [ 1326.804820][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1326.825389][T24056] netlink: 'syz.3.5105': attribute type 10 has an invalid length. [ 1326.873724][T24056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.051443][T24056] team0: Port device bond0 added [ 1327.225463][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 1327.241930][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1327.277899][ T43] usb 3-1: USB disconnect, device number 111 [ 1327.297104][T24061] vlan1: entered allmulticast mode [ 1327.328802][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5107'. [ 1327.701362][T23477] usb 5-1: USB disconnect, device number 117 [ 1327.861747][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1327.874356][T24073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1327.964523][ T43] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1328.125396][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1328.150120][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.209924][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1328.241270][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1328.257917][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.270498][ T43] usb 2-1: Product: syz [ 1328.275029][ T43] usb 2-1: Manufacturer: syz [ 1328.310397][ T43] usb 2-1: SerialNumber: syz [ 1330.553702][ T43] usb 2-1: 0:2 : does not exist [ 1330.587529][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1330.664875][T23632] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1330.707305][ T43] usb 2-1: USB disconnect, device number 124 [ 1330.841005][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.854387][T23632] usb 1-1: Using ep0 maxpacket: 16 [ 1331.316225][T23632] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1331.330602][T23632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.356751][T23632] usb 1-1: Product: syz [ 1331.361084][T23632] usb 1-1: Manufacturer: syz [ 1331.370368][T23632] usb 1-1: SerialNumber: syz [ 1331.399386][T23632] usb 1-1: config 0 descriptor?? [ 1331.419353][ T43] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1331.544336][T12579] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1331.649644][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.664701][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1331.678373][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.707093][T12579] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.717481][T12579] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.765175][ T43] usb 2-1: config 0 descriptor?? [ 1331.791175][T12579] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1331.805552][T12579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1331.847114][T12579] usb 5-1: SerialNumber: syz [ 1331.865879][T23632] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1331.934358][T23477] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1331.948909][T23632] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1332.003907][T23632] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1332.028253][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1332.040877][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5138'. [ 1332.051815][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1332.062112][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5138'. [ 1332.081215][ T43] usb 2-1: USB disconnect, device number 125 [ 1332.104979][T23477] usb 4-1: Using ep0 maxpacket: 32 [ 1332.112059][T23477] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1332.122449][T23477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.146662][T23477] usb 4-1: config 0 descriptor?? [ 1332.177155][T23632] usb 1-1: media controller created [ 1332.270381][T23632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1332.356078][T23477] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1332.386540][T23477] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1332.431890][T23477] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1332.618095][T23632] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1332.622899][T23477] usb 4-1: media controller created [ 1332.664472][T23632] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1332.819771][T23477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1333.208592][T23477] az6027: usb out operation failed. (-71) [ 1333.221051][T23477] az6027: usb out operation failed. (-71) [ 1333.228793][T23477] stb0899_attach: Driver disabled by Kconfig [ 1333.240237][T23477] az6027: no front-end attached [ 1333.240237][T23477] [ 1333.258189][T23477] az6027: usb out operation failed. (-71) [ 1333.264033][T23477] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1333.271773][ T5927] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1333.282267][T23477] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 1333.458281][ T5927] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 1333.481387][ T5927] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1333.496400][T23477] dvb-usb: schedule remote query interval to 400 msecs. [ 1333.513318][T23477] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1333.535353][ T5927] usb 3-1: config 16 interface 0 has no altsetting 0 [ 1333.560240][ T5927] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1333.572468][T23477] usb 4-1: USB disconnect, device number 122 [ 1333.594565][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.686858][T24164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1333.712872][T23477] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1333.840831][T12579] usb 5-1: 0:2 : does not exist [ 1333.903143][T12579] usb 5-1: USB disconnect, device number 118 [ 1333.909760][ T5927] usb 3-1: string descriptor 0 read error: -71 [ 1333.939661][ T5927] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1333.990964][ T5927] imon 3-1:16.0: unable to initialize intf0, err -19 [ 1334.014124][T24171] fuse: Bad value for 'fd' [ 1334.040115][ T5927] imon:imon_probe: failed to initialize context! [ 1334.091825][ T5927] imon 3-1:16.0: unable to register, err -19 [ 1334.139886][ T5927] usb 3-1: USB disconnect, device number 112 [ 1334.856669][T12602] usb 1-1: USB disconnect, device number 34 [ 1334.953259][T24189] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1334.967844][T12602] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1335.514369][T12602] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1335.521617][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1335.549639][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1335.638490][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1335.644166][T24202] vlan2: entered promiscuous mode [ 1335.644182][T24202] ip6gretap0: entered promiscuous mode [ 1335.647414][T24202] bridge0: port 3(vlan2) entered blocking state [ 1335.647574][T24202] bridge0: port 3(vlan2) entered disabled state [ 1335.647717][T24202] vlan2: entered allmulticast mode [ 1335.647734][T24202] ip6gretap0: entered allmulticast mode [ 1335.686480][T12602] usb 4-1: Using ep0 maxpacket: 8 [ 1335.691408][T12602] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1335.691429][T12602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.691440][T12602] usb 4-1: Product: syz [ 1335.691448][T12602] usb 4-1: Manufacturer: syz [ 1335.691456][T12602] usb 4-1: SerialNumber: syz [ 1335.693982][T12602] usb 4-1: config 0 descriptor?? [ 1335.706047][T12602] usb 4-1: bad CDC descriptors [ 1335.706456][T12602] usb 4-1: unsupported MDLM descriptors [ 1335.897172][T24197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.897443][T24197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.898570][ T5927] usb 4-1: USB disconnect, device number 123 [ 1336.544354][ T5927] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1336.623967][T24219] netlink: 'syz.1.5155': attribute type 1 has an invalid length. [ 1336.717504][ T5927] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.728546][ T5927] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1336.791285][ T5927] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.850280][ T5927] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1336.877733][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.919169][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5159'. [ 1336.933568][ T5927] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.944053][ T5927] usb 1-1: invalid MIDI out EP 0 [ 1337.084522][T12602] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1337.155489][T19150] udevd[19150]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.156082][ T5927] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1337.260530][T12602] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1337.273663][T12602] usb 4-1: config 0 has no interface number 0 [ 1337.293632][T12602] usb 4-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1337.330142][T24240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5163'. [ 1337.340380][T12602] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.358148][T12602] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.391398][T12602] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1337.434296][T12602] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1337.463562][T12602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.500998][T12602] usb 4-1: config 0 descriptor?? [ 1337.928923][T12602] uclogic 0003:28BD:0935.002E: interface is invalid, ignoring [ 1338.145279][T12602] usb 4-1: USB disconnect, device number 124 [ 1338.283462][T24246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5165'. [ 1338.584461][T23632] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1338.694478][T12587] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1338.748160][T23632] usb 5-1: Using ep0 maxpacket: 8 [ 1338.757050][T23632] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1338.757078][T23632] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.757103][T23632] usb 5-1: config 0 has no interface number 0 [ 1338.757145][T23632] usb 5-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1338.757187][T23632] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1338.757209][T23632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.783575][T23632] usb 5-1: config 0 descriptor?? [ 1338.858181][T12587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.858214][T12587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.858236][T12587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.858281][T12587] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.858303][T12587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.874093][T12587] usb 3-1: config 0 descriptor?? [ 1338.998184][T24246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.014800][T24246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.026428][T24263] veth0: entered promiscuous mode [ 1339.037292][T24263] veth0: entered allmulticast mode [ 1339.043462][ T5927] usb 5-1: USB disconnect, device number 119 [ 1339.334026][T12587] usbhid 3-1:0.0: can't add hid device: -71 [ 1339.346377][T12587] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1339.376564][ T5927] usb 1-1: USB disconnect, device number 35 [ 1339.389176][T12587] usb 3-1: USB disconnect, device number 113 [ 1339.417813][T24210] delete_channel: no stack [ 1339.684860][T23632] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1339.866673][T23632] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1339.909079][T24290] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 1339.963413][T23632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.975390][T23632] usb 4-1: Product: syz [ 1339.979599][T23632] usb 4-1: Manufacturer: syz [ 1339.984468][T23632] usb 4-1: SerialNumber: syz [ 1340.027144][T24288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1340.138883][T23632] usb 4-1: config 0 descriptor?? [ 1340.884315][ T5927] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1340.904893][T24308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5185'. [ 1340.967927][T24309] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5181' sets config #0 [ 1340.978667][T24309] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5181' sets config #1 [ 1341.105386][ T5927] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1341.113625][ T5927] usb 3-1: config 0 has no interface number 0 [ 1341.166846][ T5927] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1341.222439][ T5927] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1341.338466][ T5927] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.408783][ T5927] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1341.458477][ T5927] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1341.500765][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.677057][ T5927] usb 3-1: config 0 descriptor?? [ 1341.762446][T12602] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1341.876477][T23632] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1341.932868][T12602] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.943656][T12602] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1341.960971][T12602] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.978660][T12602] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1341.989502][T12602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.010848][T12602] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.020227][T12602] usb 2-1: invalid MIDI out EP 0 [ 1342.096201][T24274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.123149][T24274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.146847][T24294] vlan1: entered promiscuous mode [ 1342.182249][T24274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.201647][T12602] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1342.249640][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1342.271918][T24274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.347121][ T5927] usbhid 3-1:0.1: can't add hid device: -71 [ 1342.378056][ T5927] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1342.429777][ T5927] usb 3-1: USB disconnect, device number 114 [ 1342.532763][T23632] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1342.614565][T23632] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1342.634840][T23632] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1342.671151][T23632] usb 4-1: USB disconnect, device number 125 [ 1342.778436][T24337] netlink: 'syz.0.5190': attribute type 1 has an invalid length. [ 1342.825712][T24337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.032305][T24346] kvm: pic: non byte read [ 1343.037635][T24346] kvm: pic: non byte read [ 1343.042539][T24346] kvm: pic: single mode not supported [ 1343.042611][T24346] kvm: pic: non byte read [ 1343.064747][T24346] kvm: pic: single mode not supported [ 1343.064796][T24346] kvm: pic: non byte read [ 1343.101478][T24346] kvm: pic: non byte read [ 1343.118905][T24346] kvm: pic: level sensitive irq not supported [ 1343.118962][T24346] kvm: pic: non byte read [ 1343.136341][T24346] kvm: pic: single mode not supported [ 1343.136365][T24346] kvm: pic: level sensitive irq not supported [ 1343.150500][T24346] kvm: pic: non byte read [ 1343.166240][T24346] kvm: pic: non byte read [ 1343.170762][T24346] kvm: pic: single mode not supported [ 1343.170806][T24346] kvm: pic: non byte read [ 1343.387853][T24352] FAULT_INJECTION: forcing a failure. [ 1343.387853][T24352] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.443549][T24352] CPU: 0 UID: 0 PID: 24352 Comm: syz.2.5194 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 1343.443577][T24352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1343.443588][T24352] Call Trace: [ 1343.443596][T24352] [ 1343.443606][T24352] dump_stack_lvl+0x189/0x250 [ 1343.443637][T24352] ? __pfx____ratelimit+0x10/0x10 [ 1343.443662][T24352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1343.443687][T24352] ? __pfx__printk+0x10/0x10 [ 1343.443722][T24352] should_fail_ex+0x414/0x560 [ 1343.443751][T24352] should_failslab+0xa8/0x100 [ 1343.443772][T24352] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1343.443797][T24352] ? skb_clone+0x212/0x3a0 [ 1343.443824][T24352] skb_clone+0x212/0x3a0 [ 1343.443850][T24352] __netlink_deliver_tap+0x404/0x850 [ 1343.443881][T24352] ? netlink_deliver_tap+0x2e/0x1b0 [ 1343.443900][T24352] netlink_deliver_tap+0x19c/0x1b0 [ 1343.443916][T24352] netlink_sendskb+0x68/0x140 [ 1343.443928][T24352] netlink_rcv_skb+0x28c/0x470 [ 1343.443940][T24352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1343.443955][T24352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1343.443975][T24352] ? down_read+0x1ad/0x2e0 [ 1343.443991][T24352] genl_rcv+0x28/0x40 [ 1343.444003][T24352] netlink_unicast+0x75b/0x8d0 [ 1343.444020][T24352] netlink_sendmsg+0x805/0xb30 [ 1343.444037][T24352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1343.444050][T24352] ? aa_sock_msg_perm+0x94/0x160 [ 1343.444065][T24352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1343.444083][T24352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1343.444102][T24352] __sock_sendmsg+0x219/0x270 [ 1343.444130][T24352] ____sys_sendmsg+0x505/0x830 [ 1343.444158][T24352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1343.444183][T24352] ? import_iovec+0x74/0xa0 [ 1343.444196][T24352] ___sys_sendmsg+0x21f/0x2a0 [ 1343.444210][T24352] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.444263][T24352] ? __fget_files+0x2a/0x420 [ 1343.444281][T24352] ? __fget_files+0x3a0/0x420 [ 1343.444298][T24352] __x64_sys_sendmsg+0x19b/0x260 [ 1343.444312][T24352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1343.444329][T24352] ? __pfx_ksys_write+0x10/0x10 [ 1343.444342][T24352] ? do_syscall_64+0xbe/0x3b0 [ 1343.444354][T24352] do_syscall_64+0xfa/0x3b0 [ 1343.444363][T24352] ? lockdep_hardirqs_on+0x9c/0x150 [ 1343.444377][T24352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.444387][T24352] ? clear_bhb_loop+0x60/0xb0 [ 1343.444398][T24352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.444408][T24352] RIP: 0033:0x7f4d13d8e929 [ 1343.444424][T24352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1343.444434][T24352] RSP: 002b:00007f4d14b98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1343.444446][T24352] RAX: ffffffffffffffda RBX: 00007f4d13fb5fa0 RCX: 00007f4d13d8e929 [ 1343.444454][T24352] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1343.444460][T24352] RBP: 00007f4d14b98090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.444466][T24352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1343.444472][T24352] R13: 0000000000000000 R14: 00007f4d13fb5fa0 R15: 00007f4d140dfa28 [ 1343.444488][T24352] [ 1344.134367][T23632] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1344.205331][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1344.205344][ T30] audit: type=1400 audit(1749578419.700:1203): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=24368 comm="syz.0.5201" [ 1344.288654][T23632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.304458][T23632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.376020][T23632] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1344.455256][T23632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.556362][T23632] usb 4-1: config 0 descriptor?? [ 1344.880334][ T5927] usb 2-1: USB disconnect, device number 126 [ 1344.987078][T24322] delete_channel: no stack [ 1345.000517][T23632] sony 0003:054C:024B.002F: unexpected long global item [ 1345.010122][T23632] sony 0003:054C:024B.002F: parse failed [ 1345.017019][T23632] sony 0003:054C:024B.002F: probe with driver sony failed with error -22 [ 1345.197987][T24361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.207145][T12602] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1345.224874][T24361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.368630][T12602] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1345.380184][T12602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.398761][T12602] usb 5-1: Product: syz [ 1345.404203][T12602] usb 5-1: Manufacturer: syz [ 1345.409487][T12602] usb 5-1: SerialNumber: syz [ 1345.439553][T12602] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1345.467072][T23632] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1345.485274][ T5927] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1345.698287][ T5927] usb 2-1: config 0 has no interfaces? [ 1345.704821][T24377] random: crng reseeded on system resumption [ 1345.719692][ T5927] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1345.728915][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.739562][ T5927] usb 2-1: Product: syz [ 1345.747120][ T5927] usb 2-1: Manufacturer: syz [ 1345.751897][ T5927] usb 2-1: SerialNumber: syz [ 1345.763534][ T5927] usb 2-1: config 0 descriptor?? [ 1346.423873][T24402] netlink: 'syz.0.5210': attribute type 10 has an invalid length. [ 1346.434065][ T5927] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1346.568475][T23632] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1346.581876][T23632] ath9k_htc: Failed to initialize the device [ 1346.612084][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 1346.633186][T23632] usb 5-1: ath9k_htc: USB layer deinitialized [ 1346.641144][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1346.655625][ T5927] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1346.666885][ T5927] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1346.738605][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1346.749606][ T5927] usb 3-1: SerialNumber: syz [ 1346.762560][ T5927] usb 3-1: config 0 descriptor?? [ 1346.777342][ T5927] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1346.795912][ T5927] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1346.928042][ T5927] usb 4-1: USB disconnect, device number 126 [ 1346.990174][T12602] usb 3-1: USB disconnect, device number 115 [ 1347.358781][T24415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5215'. [ 1347.412980][T24415] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1347.474480][T12602] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1347.555969][T24420] netlink: 'syz.2.5217': attribute type 71 has an invalid length. [ 1347.636085][T12602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.646507][T12602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.659875][T12602] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1347.669032][T12602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.680187][T12602] usb 4-1: config 0 descriptor?? [ 1347.764413][ T5927] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1347.804333][T23477] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1347.859510][T12579] usb 5-1: USB disconnect, device number 120 [ 1347.892144][T24421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.913673][T24421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.928250][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 1347.932202][T12602] usb 4-1: string descriptor 0 read error: -71 [ 1347.936126][ T5927] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1347.946505][T12602] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input76 [ 1347.951746][T23477] usb 3-1: device descriptor read/64, error -71 [ 1347.959225][ T5192] bcm5974 4-1:0.0: could not read from device [ 1347.978401][ T5927] usb 1-1: config 0 has no interface number 0 [ 1347.985624][ T5927] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.997185][ T5927] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1348.011511][ T5927] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1348.022879][ T5927] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1348.168659][T12602] usb 4-1: USB disconnect, device number 127 [ 1348.170023][T19150] bcm5974 4-1:0.0: could not read from device [ 1348.189606][ T5927] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1348.202347][ T43] usb 2-1: USB disconnect, device number 127 [ 1348.238800][ T5192] bcm5974 4-1:0.0: could not read from device [ 1348.245646][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.265485][T23477] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1348.306610][ T5927] usb 1-1: config 0 descriptor?? [ 1348.322250][ T5927] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1348.406403][T23477] usb 3-1: device descriptor read/64, error -71 [ 1348.457909][T12579] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1348.514774][T23477] usb usb3-port1: attempt power cycle [ 1348.655752][T12579] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.691565][T12579] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1348.721240][T12579] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1348.752505][T12579] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1348.774370][T12579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.834309][T12579] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1348.843666][T12579] usb 5-1: invalid MIDI out EP 0 [ 1348.934390][T23477] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1348.965608][T23477] usb 3-1: device descriptor read/8, error -71 [ 1349.203316][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.224871][T23477] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1349.275648][T23477] usb 3-1: device descriptor read/8, error -71 [ 1349.290944][T12579] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1349.405033][T23477] usb usb3-port1: unable to enumerate USB device [ 1349.724371][T12602] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1349.864779][T12602] usb 4-1: device descriptor read/64, error -71 [ 1350.094545][T23477] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1350.104917][T12602] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1350.234512][T12602] usb 4-1: device descriptor read/64, error -71 [ 1350.277575][T23477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1350.288900][T23477] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1350.300784][T23477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1350.314188][T23477] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1350.323696][T23477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.331866][T23477] usb 2-1: Product: syz [ 1350.336263][T23477] usb 2-1: Manufacturer: syz [ 1350.341306][T23477] usb 2-1: SerialNumber: syz [ 1350.345294][T12602] usb usb4-port1: attempt power cycle [ 1350.353419][T23477] usb 2-1: config 0 descriptor?? [ 1350.360098][T24444] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1350.367655][T24444] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1350.378608][T23477] usb 2-1: ucan: probing device on interface #0 [ 1350.558376][T12587] usb 1-1: USB disconnect, device number 36 [ 1350.558527][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1350.581871][T12587] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1350.612779][T23477] usb 2-1: ucan: device protocol version 3342339 is not supported [ 1350.632296][T23477] usb 2-1: ucan: probe failed; try to update the device firmware [ 1350.714746][T12602] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1350.746786][T12602] usb 4-1: device descriptor read/8, error -71 [ 1350.832753][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5228'. [ 1350.845986][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5228'. [ 1350.994753][T12602] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1351.035455][T12602] usb 4-1: device descriptor read/8, error -71 [ 1351.156595][T12602] usb usb4-port1: unable to enumerate USB device [ 1351.334734][T12587] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1351.388150][ T5927] usb 5-1: USB disconnect, device number 121 [ 1351.408103][T24426] delete_channel: no stack [ 1351.504446][T12587] usb 3-1: Using ep0 maxpacket: 16 [ 1351.521588][T12587] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1351.533619][T12587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.541926][T12587] usb 3-1: Product: syz [ 1351.548815][T12587] usb 3-1: Manufacturer: syz [ 1351.553551][T12587] usb 3-1: SerialNumber: syz [ 1351.560308][T12587] usb 3-1: config 0 descriptor?? [ 1351.706498][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5234'. [ 1352.013953][T24476] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5235' sets config #0 [ 1352.034094][T24476] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5235' sets config #1 [ 1352.046618][T12587] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1352.056235][T12587] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1352.067273][T12587] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1352.088285][T12587] usb 3-1: media controller created [ 1352.140511][T12587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.245837][T24481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5237'. [ 1352.257748][T12587] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1352.268865][T12587] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1352.873649][T12587] usb 2-1: USB disconnect, device number 2 [ 1353.047771][T24490] ------------[ cut here ]------------ [ 1353.053587][T24490] usb 3-1: BOGUS control dir, pipe 80007880 doesn't match bRequestType c0 [ 1353.097641][T24490] WARNING: CPU: 0 PID: 24490 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 1353.107722][T24490] Modules linked in: [ 1353.111911][T24490] CPU: 0 UID: 0 PID: 24490 Comm: syz.1.5239 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 1353.124835][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1353.135926][T24490] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1353.141575][T24490] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 1b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 e4 69 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1353.161345][T24490] RSP: 0018:ffffc90003067570 EFLAGS: 00010246 [ 1353.167624][T24490] RAX: e2411b7b14a90100 RBX: ffff88802fa39200 RCX: 0000000000080000 [ 1353.175982][T24490] RDX: ffffc900109c2000 RSI: 0000000000005ac0 RDI: 0000000000005ac1 [ 1353.184018][T24490] RBP: 1ffff11028afde24 R08: 0000000000000003 R09: 0000000000000004 [ 1353.192113][T24490] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff8881457ef120 [ 1353.200410][T24490] R13: dffffc0000000000 R14: 0000000080007880 R15: ffff888056d773e0 [ 1353.208696][T24490] FS: 00007fe235df66c0(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 1353.218179][T24490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.224977][T24490] CR2: 000000110c33fb68 CR3: 000000006a7c4000 CR4: 00000000003526f0 [ 1353.232962][T24490] Call Trace: [ 1353.236296][T24490] [ 1353.239222][T24490] usb_start_wait_urb+0x114/0x4c0 [ 1353.244345][T24490] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1353.249913][T24490] usb_control_msg+0x232/0x3e0 [ 1353.254760][T24490] dtv5100_i2c_msg+0x250/0x330 [ 1353.259538][T24490] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1353.264448][T24490] __i2c_transfer+0x874/0x2170 [ 1353.269220][T24490] ? stack_depot_save_flags+0x40/0x900 [ 1353.274750][T24490] ? __pfx___i2c_transfer+0x10/0x10 [ 1353.279938][T24490] ? kasan_save_free_info+0x46/0x50 [ 1353.285346][T24490] ? __kasan_slab_free+0x62/0x70 [ 1353.290271][T24490] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1353.295955][T24490] ? security_file_ioctl+0xcb/0x2d0 [ 1353.301165][T24490] __i2c_smbus_xfer+0xfb0/0x1e50 [ 1353.306155][T24490] ? __lock_acquire+0xab9/0xd20 [ 1353.311129][T24490] ? do_raw_spin_lock+0x121/0x290 [ 1353.316330][T24490] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 1353.321700][T24490] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1353.327633][T24490] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1353.333537][T24490] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1353.340028][T24490] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1353.345432][T24490] i2c_smbus_xfer+0x275/0x3c0 [ 1353.350121][T24490] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 1353.355366][T24490] ? __lock_acquire+0xab9/0xd20 [ 1353.360214][T24490] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 1353.365339][T24490] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1353.370900][T24490] i2cdev_ioctl+0x5d3/0x7f0 [ 1353.375438][T24490] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1353.380450][T24490] ? __fget_files+0x2a/0x420 [ 1353.385085][T24490] ? __fget_files+0x3a0/0x420 [ 1353.389749][T24490] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1353.394757][T24490] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1353.399787][T24490] __se_sys_ioctl+0xf9/0x170 [ 1353.404403][T24490] do_syscall_64+0xfa/0x3b0 [ 1353.408891][T24490] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.414413][T24490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.420498][T24490] ? clear_bhb_loop+0x60/0xb0 [ 1353.425232][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.431111][T24490] RIP: 0033:0x7fe237f8e929 [ 1353.435586][T24490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.455255][T24490] RSP: 002b:00007fe235df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.463657][T24490] RAX: ffffffffffffffda RBX: 00007fe2381b5fa0 RCX: 00007fe237f8e929 [ 1353.471679][T24490] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000003 [ 1353.479711][T24490] RBP: 00007fe238010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1353.487735][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.495789][T24490] R13: 0000000000000000 R14: 00007fe2381b5fa0 R15: 00007fe2382dfa28 [ 1353.503784][T24490] [ 1353.506837][T24490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1353.514104][T24490] CPU: 0 UID: 0 PID: 24490 Comm: syz.1.5239 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 1353.526154][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1353.536199][T24490] Call Trace: [ 1353.539461][T24490] [ 1353.542389][T24490] dump_stack_lvl+0x99/0x250 [ 1353.546969][T24490] ? __asan_memcpy+0x40/0x70 [ 1353.551543][T24490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.556727][T24490] ? __pfx__printk+0x10/0x10 [ 1353.561307][T24490] panic+0x2db/0x790 [ 1353.565195][T24490] ? __pfx_panic+0x10/0x10 [ 1353.569616][T24490] __warn+0x31b/0x4b0 [ 1353.573581][T24490] ? usb_submit_urb+0x115d/0x1890 [ 1353.578596][T24490] ? usb_submit_urb+0x115d/0x1890 [ 1353.583603][T24490] report_bug+0x2be/0x4f0 [ 1353.587921][T24490] ? usb_submit_urb+0x115d/0x1890 [ 1353.592931][T24490] ? usb_submit_urb+0x115d/0x1890 [ 1353.597938][T24490] ? usb_submit_urb+0x115f/0x1890 [ 1353.602947][T24490] handle_bug+0x84/0x160 [ 1353.607175][T24490] exc_invalid_op+0x1a/0x50 [ 1353.611660][T24490] asm_exc_invalid_op+0x1a/0x20 [ 1353.616489][T24490] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1353.622115][T24490] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 1b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 e4 69 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1353.641707][T24490] RSP: 0018:ffffc90003067570 EFLAGS: 00010246 [ 1353.647764][T24490] RAX: e2411b7b14a90100 RBX: ffff88802fa39200 RCX: 0000000000080000 [ 1353.655720][T24490] RDX: ffffc900109c2000 RSI: 0000000000005ac0 RDI: 0000000000005ac1 [ 1353.663677][T24490] RBP: 1ffff11028afde24 R08: 0000000000000003 R09: 0000000000000004 [ 1353.671630][T24490] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff8881457ef120 [ 1353.679585][T24490] R13: dffffc0000000000 R14: 0000000080007880 R15: ffff888056d773e0 [ 1353.687557][T24490] usb_start_wait_urb+0x114/0x4c0 [ 1353.692577][T24490] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1353.698120][T24490] usb_control_msg+0x232/0x3e0 [ 1353.702873][T24490] dtv5100_i2c_msg+0x250/0x330 [ 1353.707626][T24490] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1353.712462][T24490] __i2c_transfer+0x874/0x2170 [ 1353.717214][T24490] ? stack_depot_save_flags+0x40/0x900 [ 1353.722673][T24490] ? __pfx___i2c_transfer+0x10/0x10 [ 1353.727862][T24490] ? kasan_save_free_info+0x46/0x50 [ 1353.733043][T24490] ? __kasan_slab_free+0x62/0x70 [ 1353.737958][T24490] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1353.743574][T24490] ? security_file_ioctl+0xcb/0x2d0 [ 1353.748758][T24490] __i2c_smbus_xfer+0xfb0/0x1e50 [ 1353.753686][T24490] ? __lock_acquire+0xab9/0xd20 [ 1353.758529][T24490] ? do_raw_spin_lock+0x121/0x290 [ 1353.763538][T24490] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 1353.768901][T24490] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1353.774785][T24490] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1353.780665][T24490] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1353.786982][T24490] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1353.792337][T24490] i2c_smbus_xfer+0x275/0x3c0 [ 1353.797003][T24490] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 1353.802186][T24490] ? __lock_acquire+0xab9/0xd20 [ 1353.807027][T24490] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 1353.812043][T24490] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1353.817581][T24490] i2cdev_ioctl+0x5d3/0x7f0 [ 1353.822158][T24490] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1353.827187][T24490] ? __fget_files+0x2a/0x420 [ 1353.831767][T24490] ? __fget_files+0x3a0/0x420 [ 1353.836435][T24490] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1353.841363][T24490] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1353.846374][T24490] __se_sys_ioctl+0xf9/0x170 [ 1353.850961][T24490] do_syscall_64+0xfa/0x3b0 [ 1353.855449][T24490] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.860636][T24490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.866686][T24490] ? clear_bhb_loop+0x60/0xb0 [ 1353.871350][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.877224][T24490] RIP: 0033:0x7fe237f8e929 [ 1353.881627][T24490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.901220][T24490] RSP: 002b:00007fe235df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.909621][T24490] RAX: ffffffffffffffda RBX: 00007fe2381b5fa0 RCX: 00007fe237f8e929 [ 1353.917578][T24490] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000003 [ 1353.925538][T24490] RBP: 00007fe238010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1353.933498][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.941450][T24490] R13: 0000000000000000 R14: 00007fe2381b5fa0 R15: 00007fe2382dfa28 [ 1353.949414][T24490] [ 1353.952693][T24490] Kernel Offset: disabled [ 1353.957014][T24490] Rebooting in 86400 seconds..