last executing test programs: 1m21.428170436s ago: executing program 2 (id=699): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x5, 0x10010, 0xffffffffffffffff, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400e09"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 6.499749453s ago: executing program 4 (id=717): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x66666666666635e, 0x0, [{0x6, 0x80000000, 0xb510714bc41899ed, 0x9, 0x401, 0x10000, 0x2}]}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0xc02c2, 0x1e) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xa9612, 0x17e5e9, 0x100000000000000}) (async) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d9607fc350000000000009db600e60080b8785d960001000000000000000000000700", "2809e80000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 6.497247752s ago: executing program 2 (id=721): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read(0x0, &(0x7f0000000080)=""/99, 0x63) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 6.49372593s ago: executing program 3 (id=722): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000015c0)=""/4096, &(0x7f0000000040)=0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x98, 0x10, 0x401, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xf}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3ff}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x4}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x7}]}}}]}, 0x98}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r9, &(0x7f0000000340)=[{&(0x7f0000000440)="84", 0x1}], 0x1, 0x1ffffff, 0x0, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) 6.491569489s ago: executing program 4 (id=723): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000000440)="9641a3", 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) userfaultfd(0x80001) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x88) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) open(&(0x7f0000000040)='./file0\x00', 0x105000, 0xc0) fadvise64(r2, 0x9, 0x10, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x6, @empty}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 6.24395482s ago: executing program 2 (id=726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.042042691s ago: executing program 3 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "6325caaf162757a99e965ecefff1a6ded533cbfb7f053d300d45ff895725b13ff8d3473857e1882088432dac395f394a310f6f1d2d1bd0c666fe4887c947507c", 0x17}, 0x48, 0xfffffffffffffffb) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r3, &(0x7f00000012c0)=[{&(0x7f0000000280)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a060023920700240092800b000100697036746e6c0000140002800600100097dc0f0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) 5.956201877s ago: executing program 0 (id=729): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x5, 0x10010, 0xffffffffffffffff, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400e09"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 5.940396926s ago: executing program 3 (id=730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="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", 0x13a}], 0x1}}], 0x1, 0x400d5) read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020) 5.840620952s ago: executing program 3 (id=731): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a05000000000000000000010000000900010073797a30000000000c000440000000000000000340000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000003c010000160a0101000b000000000000010000060900020073797a30000000000900010073797a3000000000040003800c010380080002"], 0x1d0}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x3, 0x1, {{0x18, 0x4, 0x2, 0x1, 0x60, 0x68, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, {[@cipso={0x86, 0x40, 0x1, [{0x0, 0xb, "213b23bf655c808e92"}, {0x1, 0xa, "db560e389768803a"}, {0x6, 0xd, "503b8be3227089196c342d"}, {0x2, 0x4, "5d1a"}, {0x1, 0xf, "c9af8394f49ea0f7d9b1c6fb71"}, {0x0, 0x15, "19d074"}]}, @end, @rr={0x7, 0xb, 0x6a}]}}}}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x20, 0x5, 0x85, {0x85, 0x31, "ce014336bbd6ebad0e9992c0392d1ed686ec7c2f3aa5819040613d49761489bffa03531791e7c027ab84ad156319ef098f4cbcd9142e5e0486e42bd939be1fd237327ede5837809eb3ac7fd5cf6f00327be85702405daddd697eb2488e1dec0e72f62fc7ccbf46e00b40935441b2338342cc7952ba740b81d5a4ed19c5b444eca9ca05"}}, &(0x7f0000000240)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "166a3561a2539f19da54fa3161835de3ba8ce72fa607b1e4ee08d36a22f2597c986f85b20c5d7c99df344a03bd55fdd8f1a1c20663647b60b81c90bbcb970b4eff238ba3c6a243273e15ebd765b18136256987cb1b7077f675908f4e7993fe574e056022c31f0dbc400f96a87cc15fd18b89aae52ba3849bcbc91a723e54f8a43b7bc9284f60723e4633c350e7b461bcaacecdf2b3d917a945db5b5dab2a435e83fcf4889c2c9d4beca255aa3de6fe01d706a6ac1e771f3d1b100b440e38a73841b441d91eb70e7f15c2eb3a20082b63defe6a72fedd670dd0ada54e0a31ad28c1537ce62efed652ccab9ccce01de9d2083426039059"}}, &(0x7f0000000040)={0x0, 0x22, 0x24, {[@global=@item_4={0x3, 0x1, 0x9, "850132af"}, @local=@item_4={0x3, 0x2, 0x1, "3d91c4f2"}, @main=@item_012={0x2, 0x0, 0x9, 'yn'}, @global=@item_4={0x3, 0x1, 0x6, "b2244362"}, @global=@item_4={0x3, 0x1, 0x4, "79fd74e2"}, @main=@item_012={0x2, 0x0, 0x9, "fe6c"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x8, "14efa347"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x2, 0x0, 0xb, "6bed"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2d, 0x6, 0x1, {0x22, 0x848}}}}, &(0x7f0000000480)={0x2c, 0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000400)={0x20, 0x1, 0x16, "4c297a788d8318328d9a581135958cf78a179e68f09b"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}}) syz_usb_disconnect(r0) open(&(0x7f0000000c80)='./file0\x00', 0x408600, 0xa0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000001200)={0x20, 0x7, 0x4c, "aa0cee88c7a36bd484560c07c29030f5e24605ba53d46a064e338a61667a6bba024e7a583e000000000000a397b1d581f20e76cfb66cf4b3bbfa3b352df8733131308ed13a6e76afceec035e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000880)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) r5 = syz_usb_connect$cdc_ncm(0x2, 0xe3, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x2, 0x1, 0x8, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "fe9df3fab7bd"}, {0x5, 0x24, 0x0, 0xd83a}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xffc0, 0x80, 0x1}, {0x6, 0x24, 0x1a, 0xcbd, 0x1c}, [@network_terminal={0x7, 0x24, 0xa, 0xb4, 0xf, 0x6, 0x9}, @mdlm_detail={0x57, 0x24, 0x13, 0x9, "803f6b8ecd179760ec852b152f1816f06c1c658b7415340a39c63c30b3087e9b1c8df38af6b7bbf98d1f3113d2919887979f5c8d52532c1ca272043671de6418566eaa098a6bf2ddc678b6f0d7bac59e3c50bf"}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x1ff, 0x3, 0x7, 0x1, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xa4, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x8, 0x4, 0x5, 0xff, 0x4}, 0x127, &(0x7f00000008c0)={0x5, 0xf, 0x127, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x7, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0x0, 0x5, [0xc000, 0xc0, 0xffc000, 0xc00f, 0xc030, 0x0]}, @generic={0xf7, 0x10, 0xa, "d4fb985308501d57540cb71b6f7819f4e451c9703140cb466a5e442763e15dfc210d403a62dc997029bdc40349dd85f95ad642b1f2bb6ed062b3194ff8201342e42543b8cb6859380e670f6fad959b7ce049653bd006fafccca4da9283acb7b17a53d6adc36d0cc3768aec4c95725efbd01d91018a66fa98856d60c2b09cf730547ce088372263481fdb76761251be00f3456ae32bf7bbb1fe60c2040d9bf4556b0bf607e770f57320697318175047dbd0a45f3e50c92e745c71af4c57e3bb9a965b11733c3f3272ce42e0c221e780cb8ba793e5f4ac41f9d99119f4b54499b91ffaa137562cba620f8e7b9d0f04c42456a2707a"}]}, 0x6, [{0xf5, &(0x7f0000000a80)=@string={0xf5, 0x3, "1fee9055e385c2a7a4cdd96d171aff1c8775f5b7f999eb11482676ceb823b89be8409447a0703e42649135feff5862a757e4703d92f974ed8d2aa6c6d6f2cd7b63830133fde504957763353ce8732acaf0d24b62cbb1acc97cc49f461ebc8654b1d913a61f73ff9436b80f455b72ecd9921d90825b667d4fb7a49529949464ee9dbfda2d47abd9ac7b767870ee21be27c845d42b74bce739714e724dc3150a5fb593c78daa259c787a88dddceabfed38058814ae3c69b338330b8cbaa44ced372e91d43b7762e4eb154e3f9ac3928f7c27d422c90eaab462ec06997d7329785c4dca1ae2b9ea2b3f367194f9a74e5e94d6f382"}}, {0xfd, &(0x7f0000000b80)=@string={0xfd, 0x3, "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"}}, {0xdd, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1009}}, {0x2, &(0x7f00000006c0)=@string={0x2}}, {0x68, &(0x7f0000000800)=@string={0x68, 0x3, "575f38fea76ef27320ae77f587c7c75483e042b115f97ba8787080b6c300d0eb1bfee79b5188913d3259f987f6874ba19153466b893e879c7f9f2fdc89ab98512c58200bb948acbad4380229c7f58ab27f79507b023c43080003f6a02b9ce9f5c2776c3d908a"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000a00)={0x14, &(0x7f0000000e00)={0x0, 0x22, 0xbb, {0xbb, 0x4, "4a7d850aa33322104ea7db71ddf3369470d26d7f1be866b54da2f20cc3990acb3a6227992278536ed3478ebbefb9a8ed12e3d09c57004bd0c113a4177bd76b880c88b4d2f5fc5a59e53ef353ab488cb64e039d3ce778c547b9338561947dfe43bd2ee0058b73f3b50460a784f92db5a3cb2c94e4ec9f0cd3afa9c05ba2950e8b73287a1ae3893d0d57330edfd82f14fabfaf6fce8db117cc684d4b0a0041b65baff8220fdbe02867864cc6c3f881a654b11cb5f49a9b926afc"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f00)={0x0, 0x8, 0x85, "cd6ed633a3eb522bf02c6ba38e80fed750135bca4fd2475254bcdebc514fdbcf5c52a1af5c62d53bc37b423a4478345c0c583249953c49a9314456d5650cd7705c7e7ad117c68641d86fb7a1d4daaa7f8605783612efae3d0d7e948657ab4de089b99f1e4b45f1325e6850522e474b38d0d3fde9b169bf47e269ceac204ad5dffffcd6a446"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0xffff, 0x4, 0x6, 0xf, 0x8, 0x7, 0x5, 0xbb22, 0x8001, 0xe130, 0x0, 0x9}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0xb68}, &(0x7f00000010c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001140)={0x20, 0x89, 0x2, 0x1}}) 5.130567335s ago: executing program 2 (id=734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e2678dcf5fd3a443da152"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) 3.712081871s ago: executing program 1 (id=739): syz_emit_ethernet(0x0, 0x0, 0x0) 3.648679972s ago: executing program 1 (id=740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0xd8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)='dW'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x108, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x1, &(0x7f0000000b40)=""/4096, 0x1000, 0x1, 0x35}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/96, 0x60, 0x2, 0x15}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000780)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r7}, @release, @clear_death, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x11, 0x4000, @fd_index, 0x9, 0x0, 0x0, 0x15, 0x0, {0x2}}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0xb4, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x120, 0x79e7aa17}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x305}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff76, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x8}}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) 3.032712422s ago: executing program 4 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="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", 0x13a}], 0x1}}], 0x1, 0x400d5) read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020) 2.948638793s ago: executing program 4 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x45, 0x5, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc1, 0xe6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x9, 0x4, 0x8, 0x9}, 0x39, &(0x7f0000000180)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x0, 0x9, 0xe, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0xf0, "e25fe8474dcd968f72d7db85399dbb06"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9, 0x8001}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x9, 0x4, 0x2, 0x9}]}, 0x5, [{0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "4ade879e2755f15cafa8712f93693f606ee8b8e2b6a5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x18, &(0x7f0000000240)=@string={0x18, 0x3, "c319f30cf0e4954c567847a89ede86ad20d3f15d24e4"}}, {0x94, &(0x7f0000000280)=@string={0x94, 0x3, "6b4531c52b9bd700f64b409e3aac215ef07861355849ce45b96e32bd6b071a9524a180609d05a79552a5e87114e454d5ca985b112e5a9934b658d2ca44351ecb6bddf1ecb6cbe8b8dceca2d11a74a4c531177e93aad1cc220b6279d3ce7b74a4ae2fcb96b6282793c2473f6c1e4a6ca3103b25bbfae20ff74bfce7caa2bb788ce2a1ac7108b54f9ec746432cc5c8ad4f4a82"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000400)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x45, {0x45, 0x8, "f55c10de9b8300ffd08a25211254aa82c9d5bd4018f0f6150b15fd369b1265c4130e98e3b392ae53bfa88113c38f63a6aed73f85631c02ba5017b036a150f1c2a748d1"}}, 0x0}, 0x0) 2.893883489s ago: executing program 0 (id=743): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) r3 = syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x1, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "75133395"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x7a, 0x3, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0x8001, 0x25}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0xdf18, [0x9]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @acm={0x4, 0x24, 0x2, 0xd}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x60}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x81, 0x6a, 0x7f, 0x20, 0x3}, 0x2b, &(0x7f00000001c0)={0x5, 0xf, 0x2b, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7f, 0x10, 0xb}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x4, 0xf00f, 0xfff, [0xc030, 0x30, 0x3f00]}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x423}}, {0x26, &(0x7f0000000280)=@string={0x26, 0x3, "254eb7af69c0f2e14f7fc41902e1a13362d83bb02157c751329bb88507d78bcd4977314e"}}, {0x7b, &(0x7f00000002c0)=@string={0x7b, 0x3, "755b664bdcaf0633298ad1549a1fad9d9d9745bb6e4f2a05aaa330aff7fb530f3111d07316808d94e0c41a0a61095753213c946f78f4e52cc8e0fac2ba925f606f11ce6f0b073c44eb79e7636f598551380c08368fd2999cbd95970cb29fabcb76ecbea62e0a5c5564fc9073d32b35f179b43e07b0e5b0de52"}}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "c42824eb3b061091dbebe70cdb2ca73f4842df67c08e92f7cc5e494e6a31f7e28acc2edc03207794a07e3b6561f93c3e4e56175f631ed0e64a496a0c41bb15053c290b78d65b1daed3b52cfe29ece7a8c215fb637ffa6bd0e415f1703b919843e4b3970a83228efa0211663858e48a86cde9351daacfa9c0dcf39863ec1a8be78992e232353640e547171adefb1875a4fbdca06e941ceffd4906afce97f982e6880d192862de99d78c33e39a93218704d0fc8533eeb9d4407e3267d72c7d2f2c5fe164f2dc05f25693b4f1c283"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c4a}}]}) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.775308532s ago: executing program 1 (id=744): r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x71}, 0x20) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.236201256s ago: executing program 0 (id=745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 1.849028286s ago: executing program 2 (id=746): pipe(0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) close(r1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000180)=""/60, 0x3c}], 0x2, &(0x7f0000000280)=""/156, 0x9c}, 0x12020) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000380)) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x2100, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.844697889s ago: executing program 1 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) unshare(0x28000080) syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x4, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1}, [@CTA_EXPECT_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r8, @ANYRES16=r8], 0x2c}}, 0xc0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x165}]}, 0x1c}, 0x1, 0x0, 0x0, 0x73d7ec33dff5fa0b}, 0x5) syz_clone(0x88106000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) 1.41640532s ago: executing program 2 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x5d, 0x4) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x39) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0x0, 0x5a, {0x5a, 0xd, "d31274fded4bf5d7c0357ea47b2f99836c03f4c5a9b6547b61048c39dab069f10c46d7c53e1553c44dd5721ee4d964f5e411c737c6351670046c80dec52cd147415764fe03dd09d0173a7ca529172e7ad38b4aebf3917d6e"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="00065600000078290b16d8ee92d1bf31796949e3b471707b12f56d05ca1e304f598330b1a50b42f64f31b71bfe6a5aee7f45221c0b0a4025d4596bbfdc3cb66aee174e3339189ce36eb361108f6ee843c413c13e75f21cf948dcd017f5eb7f7ba5b3288b77a3256b95575a7cbd3e"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x880) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$KVM_GET_PIT(r9, 0xc048ae65, &(0x7f0000000280)) close(r8) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="0f01caf36fb8cb008ec80fc72e6c0066b86c402ba20f23d00f21f86635300000090f23f80f08660fc7b004000f2021b805008ee80fc76905", 0x38}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 1.335507389s ago: executing program 4 (id=749): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x50000000, r1, 0x4}, 0x38) r2 = socket$pppoe(0x18, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000003c0)=""/146, &(0x7f0000000100)=0x92) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5a8}], 0x1, 0x0, 0x0, 0x2c}, 0x4) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000140)) connect$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x41, @remote, 'ip_vti0\x00'}}, 0x1e) 1.060346326s ago: executing program 0 (id=750): syz_emit_ethernet(0x0, 0x0, 0x0) 904.276264ms ago: executing program 0 (id=751): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) pipe2(&(0x7f00000006c0), 0x0) (async) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/652], 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r8) (async) dup(r8) 663.816123ms ago: executing program 3 (id=752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x1, 0x1000000}, {0x81, 0xda41}}, [@tmpl={0xc4, 0x5, [{{@in6=@local, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x9}, {{@in=@multicast1, 0x4d5, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x1, 0x3, 0x3, 0x4, 0x2, 0x8}, {{@in=@private=0xa010101, 0x4d5, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3507, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}]}]}, 0x17c}}, 0x4894) 601.426746ms ago: executing program 4 (id=753): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x5, 0x10010, 0xffffffffffffffff, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400e09"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, 0x0}) 340.072406ms ago: executing program 1 (id=754): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xb) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000100000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) recvmmsg$unix(r2, 0x0, 0x0, 0x26022, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r5, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) 292.26232ms ago: executing program 3 (id=755): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163013110ff"}) io_setup(0x1, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001880)=""/134, 0x86}], 0x5}, 0x20) sendto$packet(r7, &(0x7f0000000f80)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x50, r9, 0x91b, 0x0, 0x2000000, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x24008884) 213.164942ms ago: executing program 1 (id=756): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) close_range(r0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0xfffffffffffffffe) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680040008800c00018e00000200000000003f232eeb161d1e6e6f8fcb37f83ecf0abd4afda99dc19f1240866b78888ba664953a3b854ab18c5269460474bccf8eb65812aadb386825201e895eeb8ccd149d5285ac96fb93fd1bd4815be43e98948637e45ac3773a77bcab8bce511ff4eadd43827b32dca2fd82aa50d36c725fa96cb04066bfce5ed356b733bc5435519b38a17933d14e4c09c153bc9ef579939157054bb647436cb9d89029c04016c749b8821fa81d72d94c7ebffe52246e8c9b2622"], 0x38}}, 0x0) 0s ago: executing program 0 (id=757): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000fbdbdf25140000001c0007800c0004000800000000edffff0b000300"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18800018}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0xf4, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xcc}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x24, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) syz_open_dev$sg(0x0, 0xffff0000, 0x40) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x81000000000000, 0x400040) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)) kernel console output (not intermixed with test programs): DI: 0000000000000003 [ 123.724714][ T6574] RBP: 00007f56d74e5090 R08: 0000000000000000 R09: 0000000000000000 [ 123.724724][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.724733][ T6574] R13: 00007f56d67e6038 R14: 00007f56d67e5fa0 R15: 00007f56d690fa28 [ 123.724762][ T6574] [ 124.500410][ T6596] netlink: 'syz.4.176': attribute type 2 has an invalid length. [ 124.528929][ T5922] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.713220][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 124.721203][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.738859][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.752340][ T5922] usb 4-1: New USB device found, idVendor=00fc, idProduct=05d8, bcdDevice= 0.00 [ 124.761461][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.773198][ T5922] usb 4-1: config 0 descriptor?? [ 124.786696][ T5922] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 125.241369][ T6604] syzkaller0: entered promiscuous mode [ 125.266282][ T6604] syzkaller0: entered allmulticast mode [ 125.308926][ T5922] usb 3-1: USB disconnect, device number 20 [ 125.675644][ T6618] tc_dump_action: action bad kind [ 125.692806][ T5922] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.790820][ T6619] : renamed from bridge_slave_0 (while UP) [ 125.803082][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.892805][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 125.901455][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.915283][ T5922] usb 5-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 125.929536][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.945661][ T5922] usb 5-1: config 0 descriptor?? [ 125.972809][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 125.981215][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.994689][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.007309][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.024746][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.044534][ T9] usb 2-1: config 0 descriptor?? [ 126.064515][ T9] hub 2-1:0.0: USB hub found [ 126.165439][ T5922] wacom 0003:056A:0100.0004: unknown main item tag 0x0 [ 126.180577][ T5922] wacom 0003:056A:0100.0004: unknown main item tag 0x0 [ 126.201963][ T5922] wacom 0003:056A:0100.0004: hidraw0: USB HID v0.00 Device [HID 056a:0100] on usb-dummy_hcd.4-1/input0 [ 126.260210][ T9] hub 2-1:0.0: 1 port detected [ 126.510720][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.577211][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.589245][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 126.597145][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 126.609360][ T45] usb 5-1: USB disconnect, device number 11 [ 126.610723][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 126.637479][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.674524][ T9] usb 2-1: USB disconnect, device number 10 [ 127.281789][ T9] usb 4-1: USB disconnect, device number 10 [ 127.552933][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.734676][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 127.752466][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.798565][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.822386][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.844080][ T45] usb 2-1: Product: syz [ 127.848300][ T45] usb 2-1: Manufacturer: syz [ 127.872798][ T45] usb 2-1: SerialNumber: syz [ 127.883757][ T45] usb 2-1: config 0 descriptor?? [ 127.904995][ T45] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.932779][ T45] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 128.012854][ T5933] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 128.172815][ T5933] usb 5-1: device descriptor read/64, error -71 [ 128.305594][ T45] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 128.414392][ T5933] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 128.550680][ T45] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 128.581186][ T45] em28xx 2-1:0.0: board has no eeprom [ 128.588073][ T5933] usb 5-1: device descriptor read/64, error -71 [ 128.662968][ T45] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 128.680442][ T45] em28xx 2-1:0.0: dvb set to bulk mode. [ 128.695928][ T5931] em28xx 2-1:0.0: Binding DVB extension [ 128.704257][ T5933] usb usb5-port1: attempt power cycle [ 128.733404][ T45] usb 2-1: USB disconnect, device number 11 [ 128.748504][ T45] em28xx 2-1:0.0: Disconnecting em28xx [ 128.841635][ T5931] em28xx 2-1:0.0: Registering input extension [ 128.875345][ T45] em28xx 2-1:0.0: Closing input extension [ 128.948563][ T45] em28xx 2-1:0.0: Freeing device [ 128.981169][ T6675] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 129.010158][ T6675] macsec1: entered promiscuous mode [ 129.031502][ T6675] macsec1: entered allmulticast mode [ 129.050571][ T6675] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 129.078868][ T6675] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 129.097083][ T5933] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 129.115212][ T6675] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 129.153808][ T5933] usb 5-1: device descriptor read/8, error -71 [ 129.425530][ T6680] binder: 6679:6680 unknown command 0 [ 129.432324][ T6680] binder: 6679:6680 ioctl c0306201 200000000080 returned -22 [ 129.439957][ T5933] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 129.454564][ T6680] binder: BINDER_SET_CONTEXT_MGR already set [ 129.460830][ T6680] binder: 6679:6680 ioctl 4018620d 200000000040 returned -16 [ 129.491009][ T6682] dvmrp8: entered allmulticast mode [ 129.523651][ T5933] usb 5-1: device descriptor read/8, error -71 [ 129.638976][ T5933] usb usb5-port1: unable to enumerate USB device [ 129.952828][ T5933] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.102931][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 130.120312][ T5933] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.130212][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.138699][ T5933] usb 2-1: Product: syz [ 130.143298][ T5933] usb 2-1: Manufacturer: syz [ 130.147986][ T5933] usb 2-1: SerialNumber: syz [ 130.157830][ T5933] usb 2-1: config 0 descriptor?? [ 130.167685][ T5933] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.177490][ T5933] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 130.768722][ T5933] em28xx 2-1:0.0: chip ID is em2874 [ 130.852905][ T5931] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 130.942956][ T185] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 131.021554][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.031908][ T5931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.050038][ T5931] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 131.069265][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.094588][ T5931] usb 3-1: config 0 descriptor?? [ 131.173974][ T185] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.189926][ T185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.203926][ T185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.227450][ T185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.245724][ T185] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.255037][ T185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.272388][ T185] usb 5-1: config 0 descriptor?? [ 131.639615][ T5933] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.651083][ T5933] em28xx 2-1:0.0: board has no eeprom [ 131.727457][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.756458][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.941935][ T185] usbhid 5-1:0.0: can't add hid device: -71 [ 131.948260][ T185] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.005738][ T185] usb 5-1: USB disconnect, device number 16 [ 132.045044][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.076992][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.462928][ T6724] dvmrp8: entered allmulticast mode [ 132.754617][ T5933] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.779992][ T5933] em28xx 2-1:0.0: dvb set to bulk mode. [ 132.819757][ T45] em28xx 2-1:0.0: Binding DVB extension [ 132.868165][ T5933] usb 2-1: USB disconnect, device number 12 [ 132.889670][ T5933] em28xx 2-1:0.0: Disconnecting em28xx [ 133.049510][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.056697][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.123911][ T45] em28xx 2-1:0.0: Registering input extension [ 133.306616][ T45] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 133.322855][ T45] Registered IR keymap rc-empty [ 133.372902][ T45] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 133.420548][ T45] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 133.461925][ T45] em28xx 2-1:0.0: Input extension successfully initialized [ 133.482578][ T5933] em28xx 2-1:0.0: Closing input extension [ 133.577877][ T5933] em28xx 2-1:0.0: Freeing device [ 133.757024][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 133.792893][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.859268][ T5931] usb 3-1: USB disconnect, device number 21 [ 133.883917][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.162866][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 134.171787][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.183057][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.203352][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.215172][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.232807][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.272173][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.675682][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 134.723324][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 134.728818][ T9] usbtmc 5-1:16.0: can't read capabilities [ 134.938275][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.489399][ T6770] dvmrp8: entered allmulticast mode [ 135.645405][ T6779] netlink: 'syz.1.226': attribute type 3 has an invalid length. [ 136.243242][ T5922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 136.590001][ T5922] usb 3-1: device descriptor read/64, error -71 [ 136.683451][ T185] usb 5-1: USB disconnect, device number 17 [ 136.844308][ T5922] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 136.917179][ T6789] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 137.003044][ T5922] usb 3-1: device descriptor read/64, error -71 [ 137.113168][ T5922] usb usb3-port1: attempt power cycle [ 137.213317][ T9] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 137.403189][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 137.492910][ T5922] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 137.524394][ T5922] usb 3-1: device descriptor read/8, error -71 [ 137.542866][ T9] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 137.743216][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 137.759073][ T9] usb usb5-port1: attempt power cycle [ 137.803903][ T5922] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 137.843268][ T5922] usb 3-1: device descriptor read/8, error -71 [ 137.955535][ T5922] usb usb3-port1: unable to enumerate USB device [ 138.126076][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 138.192594][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 138.332994][ T9] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 138.383536][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 138.432037][ T9] usb usb5-port1: unable to enumerate USB device [ 138.660766][ T6813] xt_connbytes: Forcing CT accounting to be enabled [ 138.705472][ T6813] set match dimension is over the limit! [ 138.982852][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.080752][ T6818] syz_tun: entered allmulticast mode [ 139.182874][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 139.206843][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.268778][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.298854][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.312379][ T6817] syz_tun: left allmulticast mode [ 139.318192][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 139.342700][ T6823] block device autoloading is deprecated and will be removed. [ 139.356208][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.390147][ T9] usb 2-1: config 0 descriptor?? [ 139.612805][ T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 139.627598][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 139.803026][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 139.812103][ T45] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 139.825093][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.842419][ T45] usb 3-1: Product: syz [ 139.851670][ T45] usb 3-1: Manufacturer: syz [ 139.867417][ T45] usb 3-1: SerialNumber: syz [ 139.888608][ T9] cougar 0003:060B:500A.0005: unexpected long global item [ 139.913530][ T9] cougar 0003:060B:500A.0005: parse failed [ 139.973872][ T45] usb 3-1: config 0 descriptor?? [ 139.993684][ T9] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 140.057985][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.075693][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.402340][ T45] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 140.447722][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.476459][ T45] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 140.485242][ T45] usb 3-1: media controller created [ 140.548210][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.666467][ T45] zl10353_read_register: readreg error (reg=127, ret==0) [ 140.715411][ T5925] usb 2-1: USB disconnect, device number 13 [ 140.751974][ T45] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 140.771340][ T45] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 140.837435][ T45] usb 3-1: USB disconnect, device number 26 [ 140.973987][ T45] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 141.658770][ T6863] syz_tun: entered allmulticast mode [ 141.681249][ T6860] dvmrp8: entered allmulticast mode [ 142.032183][ T6859] syz_tun: left allmulticast mode [ 142.182962][ T185] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 142.406569][ T185] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.417426][ T185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.443577][ T185] usb 3-1: Product: syz [ 142.447849][ T185] usb 3-1: Manufacturer: syz [ 142.452518][ T185] usb 3-1: SerialNumber: syz [ 142.678330][ T185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.696830][ T185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 142.710575][ T185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.762439][ T185] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 142.779814][ T185] usb 3-1: USB disconnect, device number 27 [ 143.143569][ T185] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 143.202905][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.298673][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.317575][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.342539][ T185] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.358585][ T5836] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 143.372823][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 143.379969][ T185] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.389805][ T185] usb 3-1: can't read configurations, error -71 [ 143.397238][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.414671][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.428813][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.437236][ T9] usb 4-1: Product: syz [ 143.441687][ T9] usb 4-1: Manufacturer: syz [ 143.447535][ T9] usb 4-1: SerialNumber: syz [ 143.457094][ T9] usb 4-1: config 0 descriptor?? [ 143.463244][ T6879] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.537480][ T5836] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 143.546820][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.558445][ T5836] usb 5-1: config 0 has no interface number 0 [ 143.565228][ T5836] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 143.575665][ T5836] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.591781][ T5836] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 143.611253][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.631655][ T5836] usb 5-1: Product: syz [ 143.641789][ T5836] usb 5-1: Manufacturer: syz [ 143.651980][ T5836] usb 5-1: SerialNumber: syz [ 143.670675][ T5836] usb 5-1: config 0 descriptor?? [ 144.023523][ T6884] netlink: 48 bytes leftover after parsing attributes in process `syz.0.257'. [ 144.296620][ T6893] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 144.828923][ T6901] netlink: 'syz.0.260': attribute type 21 has an invalid length. [ 144.943125][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 145.212784][ T6906] syz_tun: entered allmulticast mode [ 145.487537][ T6905] syz_tun: left allmulticast mode [ 145.626342][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.693906][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.708255][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'. [ 145.809155][ T5923] usb 5-1: USB disconnect, device number 22 [ 145.983342][ T185] usb 4-1: USB disconnect, device number 11 [ 146.444032][ T5931] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 146.666762][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.722236][ T5931] usb 5-1: config 1 has an invalid interface number: 43 but max is 1 [ 146.752571][ T5931] usb 5-1: config 1 has no interface number 1 [ 146.783263][ T5931] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 146.835576][ T5931] usb 5-1: config 1 interface 0 has no altsetting 0 [ 146.882660][ T5931] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 146.923754][ T185] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 146.935315][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.972202][ T5931] usb 5-1: Product: syz [ 146.976705][ T5931] usb 5-1: Manufacturer: syz [ 146.981311][ T5931] usb 5-1: SerialNumber: syz [ 147.132878][ T185] usb 3-1: Using ep0 maxpacket: 32 [ 147.161394][ T185] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 147.197323][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.218825][ T5931] gspca_main: spca501-2.14.0 probing 0000:0000 [ 147.230303][ T185] usb 3-1: config 0 descriptor?? [ 147.262978][ T5931] gspca_spca501: reg write: error -71 [ 147.281187][ T5931] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 147.311198][ T185] as10x_usb: device has been detected [ 147.326362][ T185] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 147.338288][ T5931] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 147.406883][ T5931] usb 5-1: USB disconnect, device number 23 [ 147.408983][ T185] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 147.491678][ T185] as10x_usb: error during firmware upload part1 [ 147.513184][ T185] Registered device nBox DVB-T Dongle [ 147.516836][ T185] usb 3-1: USB disconnect, device number 30 [ 147.589571][ T185] Unregistered device nBox DVB-T Dongle [ 147.599664][ T185] as10x_usb: device has been disconnected [ 147.879146][ T6953] syz_tun: entered allmulticast mode [ 148.081581][ T6960] netlink: 56 bytes leftover after parsing attributes in process `syz.2.277'. [ 148.133589][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 148.174929][ T6960] veth0_macvtap: left promiscuous mode [ 149.028044][ T6973] kvm: pic: non byte write [ 149.203145][ T6971] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 149.334066][ T6979] team0: Port device vlan2 added [ 149.352625][ T6985] xt_policy: output policy not valid in PREROUTING and INPUT [ 150.213006][ T5923] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 150.433451][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 150.478854][ T5923] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 150.488100][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.557522][ T5923] usb 5-1: Product: syz [ 150.593682][ T5923] usb 5-1: Manufacturer: syz [ 150.609116][ T5923] usb 5-1: SerialNumber: syz [ 150.674414][ T5923] usb 5-1: config 0 descriptor?? [ 150.723643][ T5923] ttusb_dec_send_command: command bulk message failed: error -22 [ 150.769490][ T5923] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 150.928728][ T6985] dvmrp1: entered allmulticast mode [ 150.990563][ T7007] syzkaller1: entered promiscuous mode [ 151.070812][ T7007] syzkaller1: entered allmulticast mode [ 151.210917][ T7010] syz_tun: entered allmulticast mode [ 151.221613][ T5923] usb 5-1: USB disconnect, device number 24 [ 151.325117][ T7010] dvmrp8: entered allmulticast mode [ 151.819195][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 151.836208][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 151.882972][ T7026] netlink: 'syz.3.290': attribute type 14 has an invalid length. [ 151.890726][ T7026] netlink: 'syz.3.290': attribute type 12 has an invalid length. [ 152.372814][ T5889] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 152.397863][ T7040] syzkaller1: entered promiscuous mode [ 152.403426][ T7040] syzkaller1: entered allmulticast mode [ 152.573149][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 152.582117][ T5889] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 152.603656][ T5889] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.612616][ T5889] usb 5-1: config 1 has no interface number 1 [ 152.631663][ T5889] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 152.667257][ T5889] usb 5-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 152.698624][ T5889] usb 5-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 152.792795][ T5889] usb 5-1: config 1 interface 2 has no altsetting 0 [ 152.838449][ T5889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.849157][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.004566][ T5889] usb 5-1: Product: syz [ 153.019142][ T5889] usb 5-1: Manufacturer: syz [ 153.048865][ T5889] usb 5-1: SerialNumber: syz [ 153.335016][ T5889] usb 5-1: 0:8 : does not exist [ 153.636175][ T5889] usb 5-1: USB disconnect, device number 25 [ 153.795288][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.103175][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.348646][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 154.371770][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 154, changing to 11 [ 154.406773][ T5933] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 154.463028][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.506411][ T5933] usb 4-1: config 0 descriptor?? [ 154.786318][ T5922] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 154.936340][ T5933] usb 4-1: string descriptor 0 read error: -71 [ 154.981659][ T5922] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 154.988034][ T5933] usbhid 4-1:0.0: can't add hid device: -71 [ 155.022613][ T5933] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.023647][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.108694][ T5933] usb 4-1: USB disconnect, device number 12 [ 155.154454][ T5922] usb 5-1: config 0 descriptor?? [ 155.439089][ T7072] tipc: Enabled bearer , priority 0 [ 155.588651][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.713709][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 155.899489][ T7093] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 155.965298][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 156.555226][ T5933] tipc: Node number set to 711627177 [ 156.818805][ T5922] pegasus 5-1:0.0: setup Pegasus II specific registers [ 156.919079][ T7119] ipvlan0: entered promiscuous mode [ 157.050409][ T5922] pegasus 5-1:0.0: can't locate MII phy, using default [ 157.082625][ T5922] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 26:55:d3:66:cc:58 [ 157.121439][ T5922] usb 5-1: USB disconnect, device number 26 [ 157.312817][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.513215][ T9] usb 2-1: device descriptor read/64, error -71 [ 157.902818][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.061987][ T9] usb 2-1: device descriptor read/64, error -71 [ 158.196548][ T9] usb usb2-port1: attempt power cycle [ 158.643118][ T7138] input: syz0 as /devices/virtual/input/input14 [ 158.723221][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.743770][ T9] usb 2-1: device descriptor read/8, error -71 [ 158.809326][ T7146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.985869][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.035571][ T9] usb 2-1: device descriptor read/8, error -71 [ 159.123373][ T5889] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 159.153525][ T9] usb usb2-port1: unable to enumerate USB device [ 159.312810][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 159.328267][ T5889] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 159.343394][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.363237][ T5889] usb 5-1: config 0 has no interface number 0 [ 159.369442][ T5889] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 159.392534][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.422263][ T5889] usb 5-1: config 0 descriptor?? [ 159.439421][ T5889] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 159.671521][ T5889] usb 5-1: USB disconnect, device number 27 [ 159.729005][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.745413][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 159.773447][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 159.876819][ T9] usb 4-1: device descriptor read/64, error -71 [ 160.122872][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.216472][ T7189] netlink: 35 bytes leftover after parsing attributes in process `syz.1.334'. [ 160.282817][ T9] usb 4-1: device descriptor read/64, error -71 [ 160.393195][ T9] usb usb4-port1: attempt power cycle [ 160.415448][ T7189] netlink: 'syz.1.334': attribute type 4 has an invalid length. [ 160.732912][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.756328][ T9] usb 4-1: device descriptor read/8, error -71 [ 161.003286][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.027737][ T9] usb 4-1: device descriptor read/8, error -71 [ 161.180368][ T9] usb usb4-port1: unable to enumerate USB device [ 161.408896][ T7207] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 161.913548][ T30] audit: type=1326 audit(1764884171.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 161.976056][ T30] audit: type=1326 audit(1764884171.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.079285][ T30] audit: type=1326 audit(1764884171.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.135501][ T30] audit: type=1326 audit(1764884171.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.227938][ T30] audit: type=1326 audit(1764884171.003:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.345077][ T30] audit: type=1326 audit(1764884171.003:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.435177][ T7225] loop9: detected capacity change from 0 to 7 [ 162.436345][ T30] audit: type=1326 audit(1764884171.003:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.466709][ T7225] Dev loop9: unable to read RDB block 7 [ 162.478496][ T7225] loop9: unable to read partition table [ 162.484688][ T7225] loop9: partition table beyond EOD, truncated [ 162.493882][ T7225] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 162.549758][ T30] audit: type=1326 audit(1764884171.003:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.640769][ T30] audit: type=1326 audit(1764884171.003:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.667945][ T7228] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 162.728985][ T30] audit: type=1326 audit(1764884171.003:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 162.742897][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.943879][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 162.954487][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 163.002842][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 163.022795][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 163.038581][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.056096][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 163.122973][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.132842][ T9] usb 2-1: Product: syz [ 163.137035][ T9] usb 2-1: Manufacturer: syz [ 163.142827][ T9] usb 2-1: SerialNumber: syz [ 163.161331][ T9] usb 2-1: config 0 descriptor?? [ 163.420968][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 163.451370][ T5191] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 163.484262][ T5191] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 163.521717][ T5191] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 163.591408][ T7221] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 163.639343][ T5191] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 163.666930][ T9] usb 2-1: USB disconnect, device number 18 [ 163.685780][ T7245] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 164.242855][ T5925] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 164.402517][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 164.418248][ T5925] usb 3-1: config 0 has no interfaces? [ 164.427539][ T5925] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 164.440081][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.461537][ T5925] usb 3-1: Product: syz [ 164.470489][ T5925] usb 3-1: Manufacturer: syz [ 164.494253][ T5925] usb 3-1: SerialNumber: syz [ 164.512822][ T5925] usb 3-1: config 0 descriptor?? [ 164.588752][ T7259] netlink: 'syz.1.355': attribute type 3 has an invalid length. [ 164.954905][ T9] usb 3-1: USB disconnect, device number 31 [ 164.998783][ T7261] loop9: detected capacity change from 0 to 7 [ 165.015672][ T5835] Dev loop9: unable to read RDB block 7 [ 165.022018][ T5835] loop9: unable to read partition table [ 165.028810][ T5835] loop9: partition table beyond EOD, truncated [ 165.053471][ T7261] Dev loop9: unable to read RDB block 7 [ 165.071015][ T7261] loop9: unable to read partition table [ 165.091493][ T7261] loop9: partition table beyond EOD, truncated [ 165.115023][ T7261] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 166.103806][ T7289] vivid-000: kernel_thread() failed [ 166.394005][ T5889] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 166.597905][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.609057][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.620979][ T5889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 166.691869][ T5889] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.733521][ T5889] usb 5-1: Manufacturer: syz [ 166.754951][ T5889] usb 5-1: config 0 descriptor?? [ 167.634569][ T5922] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.822864][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 167.830153][ T5922] usb 2-1: config 0 has no interfaces? [ 167.840773][ T5922] usb 2-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 167.850354][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.952174][ T5922] usb 2-1: Product: syz [ 167.956754][ T5922] usb 2-1: Manufacturer: syz [ 167.961467][ T5922] usb 2-1: SerialNumber: syz [ 167.975215][ T5922] usb 2-1: config 0 descriptor?? [ 168.287619][ T5925] usb 2-1: USB disconnect, device number 19 [ 168.442998][ T5922] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.592934][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 168.601258][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.629462][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 168.639127][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.657654][ T5922] usb 4-1: config 0 descriptor?? [ 168.683459][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 168.723234][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 168.884469][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.898049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.910335][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.925955][ T5191] bcm5974 4-1:0.0: could not read from device [ 168.933787][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 168.942304][ T9] usb 3-1: Manufacturer: syz [ 168.958851][ T9] usb 3-1: config 0 descriptor?? [ 168.965584][ T5922] bcm5974 4-1:0.0: could not read from device [ 168.979707][ T5191] bcm5974 4-1:0.0: could not read from device [ 169.000199][ T5922] input: failed to attach handler mousedev to device input16, error: -5 [ 169.021348][ T5922] usb 4-1: USB disconnect, device number 17 [ 169.023796][ T5191] bcm5974 4-1:0.0: could not read from device [ 169.113274][ T5839] bcm5974 4-1:0.0: could not read from device [ 169.324965][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 169.330991][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.376010][ T5889] usb 5-1: USB disconnect, device number 28 [ 169.696527][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.747956][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.822811][ T5836] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 170.995728][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.061185][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.204082][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.239759][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 171.274957][ T5836] usb 5-1: can't read configurations, error -71 [ 171.707515][ T9] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 171.717036][ T5836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 171.754128][ T9] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 171.790567][ T9] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 171.832314][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 171.853902][ T9] usb 3-1: USB disconnect, device number 32 [ 171.893095][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 171.900990][ T5836] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 171.954425][ T5836] usb 5-1: config 0 has no interface number 0 [ 171.992909][ T5836] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 172.028312][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.053083][ T5836] usb 5-1: Product: syz [ 172.057297][ T5836] usb 5-1: Manufacturer: syz [ 172.093345][ T5836] usb 5-1: SerialNumber: syz [ 172.126032][ T5836] usb 5-1: config 0 descriptor?? [ 172.165084][ T5836] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 172.337377][ T5836] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 172.476145][ T7380] tipc: Started in network mode [ 172.503095][ T7380] tipc: Node identity bee70e0df16, cluster identity 4711 [ 172.511226][ T7380] tipc: Enabled bearer , priority 0 [ 172.605240][ T7380] tipc: Disabling bearer [ 172.899629][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.993502][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.050491][ T9] usb 5-1: USB disconnect, device number 30 [ 173.061905][ T9] etas_es58x 5-1:0.2: Disconnecting syz syz [ 173.753291][ T5925] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 173.984197][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 174.019942][ T5925] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.050623][ T5925] usb 2-1: config 0 has no interface number 0 [ 174.071674][ T5925] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.091838][ T5925] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.179714][ T5925] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.229786][ T5925] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.301905][ T5925] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.358526][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.406602][ T5925] usb 2-1: config 0 descriptor?? [ 174.436459][ T5925] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.528919][ T7449] tunl0: entered promiscuous mode [ 175.626936][ T7449] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 175.663785][ T7454] loop5: detected capacity change from 0 to 7 [ 175.829157][ T7449] netlink: 9 bytes leftover after parsing attributes in process `syz.0.403'. [ 176.148515][ T7454] Dev loop5: unable to read RDB block 7 [ 176.199144][ C0] blk_print_req_error: 26 callbacks suppressed [ 176.199164][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 176.215188][ C0] buffer_io_error: 25 callbacks suppressed [ 176.215205][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 176.231420][ T7454] loop5: unable to read partition table [ 176.302062][ T7454] loop5: partition table beyond EOD, truncated [ 176.402830][ T7454] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 176.583244][ T45] usb 2-1: USB disconnect, device number 20 [ 176.663718][ T45] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 176.937779][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 176.969308][ T7482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.024517][ T5206] Dev loop5: unable to read RDB block 7 [ 177.032839][ T5206] loop5: unable to read partition table [ 177.038970][ T5206] loop5: partition table beyond EOD, truncated [ 178.954802][ T7518] fuse: Bad value for 'fd' [ 179.772847][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 179.845656][ T5923] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 179.932917][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 179.939104][ T45] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 179.952191][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.972234][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.994126][ T5836] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 180.003338][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.012877][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 180.020921][ T5923] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.029849][ T5923] usb 2-1: config 0 has no interface number 0 [ 180.047658][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.059836][ T5923] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.072590][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.081643][ T5923] usb 2-1: Product: syz [ 180.081869][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.091505][ T5923] usb 2-1: Manufacturer: syz [ 180.102332][ T5923] usb 2-1: SerialNumber: syz [ 180.110997][ T5923] usb 2-1: config 0 descriptor?? [ 180.119751][ T5923] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.129257][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.140543][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.155583][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.163996][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 180.174421][ T5836] usb 3-1: config 0 has no interfaces? [ 180.174458][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 180.182426][ T5836] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 180.199732][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 180.199758][ T45] usb 5-1: SerialNumber: syz [ 180.217846][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.217980][ T45] usb 5-1: config 0 descriptor?? [ 180.227658][ T5836] usb 3-1: Product: syz [ 180.235743][ T5836] usb 3-1: Manufacturer: syz [ 180.241112][ T5836] usb 3-1: SerialNumber: syz [ 180.246368][ T45] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 180.257277][ T5836] usb 3-1: config 0 descriptor?? [ 180.327486][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.363251][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.442064][ T7526] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 180.488761][ T5923] usb 3-1: USB disconnect, device number 33 [ 180.508598][ T5191] bcm5974 5-1:0.0: could not read from device [ 180.537433][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.557940][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.594107][ T5191] bcm5974 5-1:0.0: could not read from device [ 180.607406][ T45] usb 5-1: USB disconnect, device number 31 [ 180.689585][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.700218][ T5923] usb 2-1: USB disconnect, device number 21 [ 180.709108][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.752328][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.791714][ T5923] quatech2 2-1:0.51: device disconnected [ 182.866722][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.448'. [ 183.614609][ T5931] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 183.803694][ T5931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.841553][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.856453][ T5931] usb 3-1: Product: syz [ 183.866562][ T5931] usb 3-1: Manufacturer: syz [ 183.901755][ T5931] usb 3-1: SerialNumber: syz [ 183.928278][ T5931] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.971544][ T5889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.264322][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 184.977953][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 185.201812][ T5889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 185.212665][ T5889] ath9k_htc: Failed to initialize the device [ 185.219533][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.467'. [ 185.657274][ T5889] usb 3-1: ath9k_htc: USB layer deinitialized [ 185.722918][ T45] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 185.866277][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.897303][ T45] usb 2-1: config 4 has an invalid interface number: 7 but max is 0 [ 185.905745][ T45] usb 2-1: config 4 has no interface number 0 [ 185.922162][ T45] usb 2-1: config 4 interface 7 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 185.949596][ T45] usb 2-1: config 4 interface 7 has no altsetting 0 [ 185.968960][ T45] usb 2-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=1e.58 [ 185.985908][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.005346][ T45] usb 2-1: Product: syz [ 186.015443][ T45] usb 2-1: Manufacturer: syz [ 186.028389][ T45] usb 2-1: SerialNumber: syz [ 186.029093][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.361126][ T45] usb 3-1: USB disconnect, device number 34 [ 186.511541][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 186.511558][ T30] audit: type=1800 audit(1764884195.603:35): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.473" name="bus" dev="tmpfs" ino=599 res=0 errno=0 [ 186.580389][ T3513] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.591501][ T7678] netlink: 'syz.4.471': attribute type 6 has an invalid length. [ 186.607684][ T3513] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.617254][ T3513] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.626336][ T3513] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.832883][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 186.905674][ T5889] usb 2-1: USB disconnect, device number 22 [ 186.952809][ T5922] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 186.993031][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 186.999809][ T45] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 187.010298][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.021941][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.032605][ T45] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.045790][ T45] usb 3-1: config 7 interface 0 has no altsetting 0 [ 187.053186][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 187.062303][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.105611][ T5922] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.115243][ T5922] usb 4-1: config 0 has no interface number 0 [ 187.121359][ T5922] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 187.131831][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.143083][ T5922] usb 4-1: config 0 descriptor?? [ 187.154788][ T5922] usb 4-1: selecting invalid altsetting 1 [ 187.161647][ T5922] dvb_ttusb_budget: ttusb_init_controller: error [ 187.169499][ T5922] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 187.226869][ T5922] DVB: Unable to find symbol cx22700_attach() [ 187.275328][ T5922] DVB: Unable to find symbol tda10046_attach() [ 187.281555][ T5922] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 187.362255][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 187.371309][ T7682] bond0: Unable to set down delay as MII monitoring is disabled [ 187.386444][ T5922] usb 4-1: USB disconnect, device number 18 [ 187.707828][ T45] usbhid 3-1:7.0: can't add hid device: -71 [ 187.732066][ T45] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 187.749608][ T45] usb 3-1: USB disconnect, device number 35 [ 187.874983][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 187.884042][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.482'. [ 188.483091][ T5925] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 188.614189][ T7730] sctp: [Deprecated]: syz.4.490 (pid 7730) Use of int in maxseg socket option. [ 188.614189][ T7730] Use struct sctp_assoc_value instead [ 188.670451][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.680369][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.702848][ T5925] usb 2-1: Product: syz [ 188.709944][ T5925] usb 2-1: Manufacturer: syz [ 188.716465][ T5925] usb 2-1: SerialNumber: syz [ 188.732311][ T5925] usb 2-1: config 0 descriptor?? [ 188.944846][ T5925] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.014673][ T5925] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 189.059998][ T5925] usb 2-1: USB disconnect, device number 23 [ 189.507122][ T7750] delete_channel: no stack [ 190.013170][ T5922] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 190.192654][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.252823][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.286153][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.308583][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.590585][ T5922] usb 5-1: usb_control_msg returned -32 [ 190.600474][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 190.963498][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 190.972538][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 191.302797][ T5889] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 191.688794][ T5889] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 191.697936][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.770819][ T5889] usb 3-1: Product: syz [ 191.781705][ T5889] usb 3-1: Manufacturer: syz [ 191.791380][ T5889] usb 3-1: SerialNumber: syz [ 192.364131][ T5889] usb 3-1: config 0 descriptor?? [ 192.432419][ T5842] Bluetooth: hci5: urb ffff88814d43b700 submission failed (2) [ 192.706758][ T9] usb 5-1: USB disconnect, device number 32 [ 193.118812][ T7804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.508'. [ 193.223031][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 193.384149][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 193.391285][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.425394][ T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 193.447183][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.470289][ T9] usb 5-1: Product: syz [ 193.491984][ T9] usb 5-1: Manufacturer: syz [ 193.502776][ T9] usb 5-1: SerialNumber: syz [ 193.521842][ T9] usb 5-1: config 0 descriptor?? [ 193.540687][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 193.559254][ T9] usb 5-1: selecting invalid altsetting 1 [ 193.737253][ T5889] usb 3-1: USB disconnect, device number 36 [ 193.828744][ T7818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.513'. [ 193.927373][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 193.957814][ T5933] usb 5-1: USB disconnect, device number 33 [ 194.025010][ T7826] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 194.047127][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 194.314939][ T5933] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 194.324123][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.522'. [ 194.341286][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.522'. [ 194.451290][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.457691][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484071][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 194.498394][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.515169][ T5933] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 194.539786][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.548394][ T5933] usb 5-1: Product: syz [ 194.552690][ T5933] usb 5-1: Manufacturer: syz [ 194.558617][ T5933] usb 5-1: SerialNumber: syz [ 194.565408][ T5933] usb 5-1: config 0 descriptor?? [ 194.575361][ T5933] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 194.581620][ T5933] usb 5-1: selecting invalid altsetting 1 [ 194.603014][ T5836] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 194.752790][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 194.760271][ T5836] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.769988][ T5836] usb 2-1: config 0 has no interface number 0 [ 194.772653][ T5933] gspca_stk014: reg_r err -71 [ 194.778598][ T5836] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.785455][ T5933] stk014 5-1:0.0: probe with driver stk014 failed with error -71 [ 194.795251][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.804744][ T5933] usb 5-1: USB disconnect, device number 34 [ 194.815526][ T5836] usb 2-1: Product: syz [ 194.822407][ T5836] usb 2-1: Manufacturer: syz [ 194.827886][ T5836] usb 2-1: SerialNumber: syz [ 194.853492][ T5836] usb 2-1: config 0 descriptor?? [ 194.861373][ T5836] smsc95xx v2.0.0 [ 194.982820][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.077287][ T7865] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 195.113201][ T5889] usb 4-1: device descriptor read/64, error -71 [ 195.272517][ T5836] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 195.284980][ T5836] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.362859][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 195.513008][ T5889] usb 4-1: device descriptor read/64, error -71 [ 195.532526][ T7875] bond1: up delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 195.553295][ T7875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.624756][ T5889] usb usb4-port1: attempt power cycle [ 195.909269][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 195.918271][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 196.024070][ T5836] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 196.042124][ T5836] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 196.050706][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 196.061952][ T5836] usb 2-1: USB disconnect, device number 24 [ 196.213208][ T5889] usb 4-1: device descriptor read/8, error -71 [ 196.597550][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.597597][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 196.604027][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.611388][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 196.617198][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 196.653223][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 196.687961][ T5889] usb 4-1: device descriptor read/8, error -71 [ 196.803183][ T5889] usb usb4-port1: unable to enumerate USB device [ 197.785729][ T7919] netlink: 'syz.4.540': attribute type 27 has an invalid length. [ 197.929649][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.937128][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.300904][ T7928] netlink: 31 bytes leftover after parsing attributes in process `syz.1.543'. [ 198.379601][ T7919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.435799][ T7919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.513338][ T5926] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 198.635474][ T5925] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 198.662955][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 198.704494][ T5926] usb 3-1: config 0 has no interfaces? [ 198.714836][ T5926] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 198.727172][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.752932][ T5926] usb 3-1: Product: syz [ 198.772832][ T5926] usb 3-1: Manufacturer: syz [ 198.777838][ T5926] usb 3-1: SerialNumber: syz [ 198.802653][ T5926] usb 3-1: config 0 descriptor?? [ 198.813069][ T5925] usb 2-1: device descriptor read/64, error -71 [ 199.093791][ T5925] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 199.149076][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.168364][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.193965][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.223041][ T5925] usb 2-1: device descriptor read/64, error -71 [ 199.233668][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.285084][ T5836] usb 3-1: USB disconnect, device number 37 [ 199.353448][ T5925] usb usb2-port1: attempt power cycle [ 199.616287][ T7951] syz_tun: entered allmulticast mode [ 199.669184][ T7950] syz_tun: left allmulticast mode [ 199.703705][ T5925] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 199.725527][ T5925] usb 2-1: device descriptor read/8, error -71 [ 199.904282][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 200.073032][ T5925] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 200.077452][ T7963] fuse: Unknown parameter '' [ 200.103402][ T5925] usb 2-1: device descriptor read/8, error -71 [ 200.213764][ T5925] usb usb2-port1: unable to enumerate USB device [ 200.296122][ T7970] fuse: Bad value for 'fd' [ 200.642963][ T5925] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 200.802838][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 200.811725][ T5925] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 200.821462][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.829563][ T5925] usb 5-1: Product: syz [ 200.833972][ T5925] usb 5-1: Manufacturer: syz [ 200.838576][ T5925] usb 5-1: SerialNumber: syz [ 200.845808][ T5925] usb 5-1: config 0 descriptor?? [ 200.854693][ T5925] gspca_main: se401-2.14.0 probing 047d:5003 [ 201.135944][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 201.159339][ T7980] ipt_ECN: cannot use operation on non-tcp rule [ 201.256145][ T5925] gspca_se401: Bayer format not supported! [ 201.295618][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.319012][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.337713][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.351327][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.365141][ T10] usb 4-1: Product: syz [ 201.371404][ T10] usb 4-1: Manufacturer: syz [ 201.378292][ T10] usb 4-1: SerialNumber: syz [ 201.390155][ T10] cdc_ncm 4-1:1.0: skipping garbage [ 201.395736][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 201.402514][ T10] cdc_ncm 4-1:1.0: bind() failure [ 201.411551][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 201.420287][ T10] cdc_ncm 4-1:1.1: bind() failure [ 201.464826][ T10] usb 5-1: USB disconnect, device number 35 [ 201.592365][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 201.712954][ T5925] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 201.878236][ T5925] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 201.888928][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.901843][ T5925] usb 2-1: config 0 has no interface number 0 [ 201.914947][ T5925] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 201.936029][ T5925] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.958869][ T5925] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 201.979025][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.000074][ T5925] usb 2-1: Product: syz [ 202.010312][ T5925] usb 2-1: Manufacturer: syz [ 202.020773][ T5925] usb 2-1: SerialNumber: syz [ 202.036597][ T5836] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 202.038077][ T5925] usb 2-1: config 0 descriptor?? [ 202.064582][ T7983] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.077511][ T5836] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.080082][ T5925] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 202.112917][ T5925] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 202.199672][ T7998] fido_id[7998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.315569][ T5836] usb 2-1: USB disconnect, device number 29 [ 202.343429][ T7983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.557859][ T8007] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.567'. [ 202.582958][ T8007] openvswitch: netlink: Flow key attr not present in new flow. [ 202.614154][ T8007] loop7: detected capacity change from 0 to 7 [ 202.625357][ T5835] Dev loop7: unable to read RDB block 7 [ 202.630996][ T5835] loop7: AHDI p1 p2 [ 202.635409][ T5835] loop7: partition table partially beyond EOD, truncated [ 202.643399][ T5835] loop7: p1 start 1702000233 is beyond EOD, truncated [ 202.653346][ T8007] Dev loop7: unable to read RDB block 7 [ 202.661393][ T8007] loop7: AHDI p1 p2 [ 202.665848][ T8007] loop7: partition table partially beyond EOD, truncated [ 202.674469][ T8007] loop7: p1 start 1702000233 is beyond EOD, truncated [ 203.033044][ T5836] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 203.192896][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 203.201045][ T5836] usb 3-1: config index 0 descriptor too short (expected 50468, got 36) [ 203.209952][ T5836] usb 3-1: config 129 has too many interfaces: 217, using maximum allowed: 32 [ 203.219257][ T5836] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 203.230396][ T5836] usb 3-1: config 129 has 0 interfaces, different from the descriptor's value: 217 [ 203.240192][ T5836] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 203.249819][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.471629][ T5836] usb 3-1: string descriptor 0 read error: -71 [ 203.481228][ T5836] usb 3-1: USB disconnect, device number 38 [ 203.542935][ T5925] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 203.672893][ T5925] usb 2-1: device descriptor read/64, error -71 [ 203.762699][ T5933] usb 4-1: USB disconnect, device number 23 [ 203.924825][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 204.067321][ T5925] usb 2-1: device descriptor read/64, error -71 [ 204.183031][ T5925] usb usb2-port1: attempt power cycle [ 204.532827][ T5925] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 204.533039][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 204.553287][ T5925] usb 2-1: device descriptor read/8, error -71 [ 204.712813][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 204.724451][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.733613][ T8051] syzkaller0: entered promiscuous mode [ 204.739432][ T8051] syzkaller0: entered allmulticast mode [ 204.747160][ T10] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 204.764459][ T10] usb 3-1: config 4 has no interface number 0 [ 204.780540][ T10] usb 3-1: config 4 interface 10 has no altsetting 0 [ 204.801116][ T10] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=f3.fd [ 204.803737][ T5925] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 204.810601][ T10] usb 3-1: New USB device strings: Mfr=154, Product=207, SerialNumber=3 [ 204.828013][ T10] usb 3-1: Product: syz [ 204.832250][ T10] usb 3-1: Manufacturer: syz [ 204.837373][ T10] usb 3-1: SerialNumber: syz [ 204.857259][ T5925] usb 2-1: device descriptor read/8, error -71 [ 204.975466][ T5925] usb usb2-port1: unable to enumerate USB device [ 205.069861][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 205.093486][ T10] radio-si470x 3-1:4.10: could not find interrupt in endpoint [ 205.102831][ T10] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5 [ 205.112131][ T10] usbhid 3-1:4.10: couldn't find an input interrupt endpoint [ 205.135286][ T10] usb 3-1: USB disconnect, device number 39 [ 205.434096][ T8060] syz_tun: entered allmulticast mode [ 205.912869][ T45] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 206.013060][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 206.076141][ T45] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 206.088476][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.110493][ T45] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.132094][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.150852][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.172957][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 206.178398][ T45] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 206.181304][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.192903][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.207577][ T10] usb 3-1: config 0 has no interface number 0 [ 206.212017][ T45] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.220813][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.292956][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.292956][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.292983][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.301638][ T10] usb 3-1: Product: syz [ 206.301659][ T10] usb 3-1: Manufacturer: syz [ 206.301673][ T10] usb 3-1: SerialNumber: syz [ 206.343858][ T10] usb 3-1: config 0 descriptor?? [ 206.344571][ T45] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 206.365864][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.368426][ T10] smsc95xx v2.0.0 [ 206.386891][ T45] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.413077][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.434341][ T45] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.455588][ T45] usb 4-1: string descriptor 0 read error: -22 [ 206.461983][ T45] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.471265][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.488009][ T45] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.841166][ T8080] geneve2: entered promiscuous mode [ 206.846732][ T8080] geneve2: entered allmulticast mode [ 206.899177][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.031748][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 207.042822][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.555318][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.753769][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.800687][ T5836] usb 4-1: USB disconnect, device number 24 [ 207.904161][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.921386][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.978156][ T10] usb 3-1: USB disconnect, device number 40 [ 208.245218][ T30] audit: type=1326 audit(1764884217.333:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.308392][ T8101] macvlan0: entered promiscuous mode [ 208.341399][ T30] audit: type=1326 audit(1764884217.333:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.351806][ T8101] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 208.402179][ T8101] netlink: 'syz.4.593': attribute type 2 has an invalid length. [ 208.454072][ T30] audit: type=1326 audit(1764884217.333:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.522603][ T30] audit: type=1326 audit(1764884217.333:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.587318][ T30] audit: type=1326 audit(1764884217.333:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.683843][ T30] audit: type=1326 audit(1764884217.333:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.718214][ T30] audit: type=1326 audit(1764884217.333:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.785897][ T30] audit: type=1326 audit(1764884217.333:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.808379][ T30] audit: type=1326 audit(1764884217.333:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 208.831823][ T30] audit: type=1326 audit(1764884217.333:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fbb8f749 code=0x7ffc0000 [ 209.041788][ T8109] syz_tun: entered allmulticast mode [ 209.427600][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 209.643634][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 209.682660][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 210.012399][ T1326] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.032080][ T1326] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.043605][ T1326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.070227][ T1326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.345612][ T5836] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 210.368261][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 210.507401][ T5836] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 210.532801][ T5836] usb 4-1: config 7 has no interface number 0 [ 210.564659][ T5836] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 210.583078][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.591095][ T5836] usb 4-1: Product: syz [ 210.596610][ T5836] usb 4-1: Manufacturer: syz [ 210.607577][ T5836] usb 4-1: SerialNumber: syz [ 210.782904][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 210.842946][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 210.932785][ T5925] usb 3-1: Invalid ep0 maxpacket: 9 [ 211.012844][ T10] usb 5-1: config 0 has an invalid interface number: 236 but max is 1 [ 211.021769][ T10] usb 5-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 211.032618][ T10] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 211.045822][ T10] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 211.069904][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.079349][ T10] usb 5-1: config 0 has no interface number 0 [ 211.082833][ T5925] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 211.085978][ T10] usb 5-1: config 0 interface 236 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 211.108282][ T10] usb 5-1: config 0 interface 236 has no altsetting 0 [ 211.138434][ T10] usb 5-1: New USB device found, idVendor=2c4e, idProduct=0103, bcdDevice=b7.dc [ 211.147938][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.156417][ T10] usb 5-1: Product: syz [ 211.160843][ T10] usb 5-1: Manufacturer: syz [ 211.167936][ T10] usb 5-1: SerialNumber: syz [ 211.180951][ T10] usb 5-1: config 0 descriptor?? [ 211.273035][ T5925] usb 3-1: Invalid ep0 maxpacket: 9 [ 211.284104][ T5925] usb usb3-port1: attempt power cycle [ 211.393755][ T5836] as10x_usb: device has been detected [ 211.414001][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 211.440118][ T10] usb 5-1: USB disconnect, device number 36 [ 211.487563][ T5836] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 211.586711][ T8146] syzkaller0: entered promiscuous mode [ 211.593651][ T8146] syzkaller0: entered allmulticast mode [ 211.642882][ T5925] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 211.666731][ T5925] usb 3-1: Invalid ep0 maxpacket: 9 [ 211.727779][ T5836] as10x_usb: error during firmware upload part1 [ 211.739726][ T5836] Registered device Elgato EyeTV DTT Deluxe [ 211.749400][ T5836] usb 4-1: USB disconnect, device number 25 [ 211.805807][ T5925] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 211.807464][ T5836] Unregistered device Elgato EyeTV DTT Deluxe [ 211.825753][ T5836] as10x_usb: device has been disconnected [ 211.855563][ T5925] usb 3-1: Invalid ep0 maxpacket: 9 [ 211.873312][ T5925] usb usb3-port1: unable to enumerate USB device [ 212.812812][ T5925] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.892960][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 212.900577][ T180] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 213.020880][ T5925] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 213.030114][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.039877][ T5925] usb 2-1: Product: syz [ 213.044534][ T5925] usb 2-1: Manufacturer: syz [ 213.049241][ T5925] usb 2-1: SerialNumber: syz [ 213.055500][ T5925] usb 2-1: config 0 descriptor?? [ 213.073082][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 213.073566][ T5850] Bluetooth: hci5: urb ffff888033072800 submission failed (2) [ 213.082243][ T45] usb 4-1: config 0 has no interfaces? [ 213.097185][ T180] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.110999][ T180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.125195][ T45] usb 4-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 213.142285][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.152450][ T180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.171152][ T45] usb 4-1: Product: syz [ 213.177735][ T180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.190336][ T45] usb 4-1: Manufacturer: syz [ 213.201303][ T45] usb 4-1: SerialNumber: syz [ 213.211357][ T180] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.225301][ T45] usb 4-1: config 0 descriptor?? [ 213.247760][ T180] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.317668][ T180] usb 5-1: Product: syz [ 213.340418][ T180] usb 5-1: Manufacturer: syz [ 213.367225][ T180] cdc_wdm 5-1:1.0: skipping garbage [ 213.377658][ T180] cdc_wdm 5-1:1.0: skipping garbage [ 213.385665][ T180] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 213.391590][ T180] cdc_wdm 5-1:1.0: Unknown control protocol [ 213.451536][ T180] usb 4-1: USB disconnect, device number 26 [ 213.631649][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.641565][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.864258][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 213.871167][ C1] wdm_int_callback: 8271 callbacks suppressed [ 213.871181][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 213.883804][ C1] wdm_int_callback: 8271 callbacks suppressed [ 213.883823][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 213.896672][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 213.903253][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 213.910074][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 213.916672][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 213.923010][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 213.924218][ T5836] usb 5-1: USB disconnect, device number 37 [ 213.929606][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 213.929625][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 213.994027][ T8206] hub 9-0:1.0: USB hub found [ 214.004112][ T8206] hub 9-0:1.0: 1 port detected [ 214.396848][ T5836] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 214.407102][ T5902] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 214.573327][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 214.578561][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 214.586442][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 214.598839][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.622550][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 214.638432][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 214.657484][ T5902] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.670844][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 214.688241][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 214.702920][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.718743][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.726375][ T8219] bridge0: port 1() entered disabled state [ 214.733877][ T5902] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 214.743575][ T5836] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 214.752681][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 214.762421][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.770849][ T5902] usb 4-1: Product: syz [ 214.775308][ T5836] usb 5-1: Product: syz [ 214.779526][ T5902] usb 4-1: Manufacturer: syz [ 214.784472][ T5836] usb 5-1: Manufacturer: syz [ 214.789170][ T5902] usb 4-1: SerialNumber: syz [ 214.794193][ T5836] usb 5-1: SerialNumber: syz [ 214.810373][ T5836] usb 5-1: config 0 descriptor?? [ 214.854909][ T5902] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input21 [ 214.872822][ T5836] rc_core: IR keymap rc-imon-rsc not found [ 214.878819][ T5836] Registered IR keymap rc-empty [ 214.886540][ T5836] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 214.946141][ T5836] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 215.045730][ T5836] usb 5-1: USB disconnect, device number 38 [ 215.239474][ T8230] fuse: Bad value for 'fd' [ 215.452818][ T180] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 215.602866][ T180] usb 3-1: Using ep0 maxpacket: 8 [ 215.821825][ T8237] @: renamed from syz_tun (while UP) [ 215.906387][ T5902] usb 2-1: USB disconnect, device number 34 [ 215.917325][ T180] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 215.986318][ T180] usb 3-1: config 127 has no interface number 1 [ 216.004588][ T180] usb 3-1: config 127 interface 171 has no altsetting 0 [ 216.095246][ T180] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 216.124700][ T180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.151258][ T180] usb 3-1: Product: syz [ 216.168320][ T180] usb 3-1: Manufacturer: syz [ 216.214776][ T180] usb 3-1: SerialNumber: syz [ 216.223262][ T8242] bond2: option arp_interval: invalid value (18446744073491447809) [ 216.321283][ T8242] bond2: option arp_interval: allowed values 0 - 2147483647 [ 216.379751][ T8242] bond2 (unregistering): Released all slaves [ 216.448135][ T5902] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 216.672894][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 216.680577][ T5902] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 216.695920][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.725606][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.735653][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.754444][ T5902] usb 5-1: Product: syz [ 216.761563][ T5902] usb 5-1: Manufacturer: syz [ 216.770148][ T5902] usb 5-1: SerialNumber: syz [ 217.071029][ T8251] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.223937][ T5902] usb 5-1: 0:2 : does not exist [ 217.239076][ T5902] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 217.254190][ T5925] usb 4-1: USB disconnect, device number 27 [ 217.309066][ T5925] appletouch 4-1:1.0: input: appletouch disconnected [ 217.331559][ T5836] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 217.340437][ T5902] usb 5-1: USB disconnect, device number 39 [ 217.380069][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.506613][ T5836] usb 2-1: not running at top speed; connect to a high speed hub [ 217.517993][ T5836] usb 2-1: config 1 interface 0 has no altsetting 0 [ 217.529637][ T5836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.542947][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.553616][ T5836] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 217.595419][ T5836] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 217.628428][ T5836] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 217.849737][ T180] xr_serial 3-1:127.171: xr_serial converter detected [ 217.874413][ T180] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 217.903099][ T5926] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 217.904244][ T180] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 217.964838][ T180] usb 3-1: USB disconnect, device number 45 [ 217.981989][ T180] xr_serial 3-1:127.171: device disconnected [ 218.093451][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 218.099996][ T5926] usb 4-1: config 0 has no interfaces? [ 218.107480][ T5926] usb 4-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 218.116891][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.125578][ T5926] usb 4-1: Product: syz [ 218.129789][ T5926] usb 4-1: Manufacturer: syz [ 218.134491][ T5926] usb 4-1: SerialNumber: syz [ 218.141339][ T5926] usb 4-1: config 0 descriptor?? [ 218.212803][ T5902] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 218.292909][ T180] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 218.357807][ T8258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.366860][ T5902] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 218.385048][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.399437][ T5902] usb 5-1: config 0 descriptor?? [ 218.444907][ T180] usb 3-1: too many configurations: 229, using maximum allowed: 8 [ 218.469101][ T5926] usb 4-1: USB disconnect, device number 28 [ 218.480819][ T180] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.516966][ T180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.559862][ T180] usb 3-1: Product: syz [ 218.564371][ T180] usb 3-1: Manufacturer: syz [ 218.569049][ T180] usb 3-1: SerialNumber: syz [ 218.579719][ T180] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.611674][ T5925] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.327516][ T5902] corsair 0003:1B1C:1B09.0008: hidraw0: USB HID v10.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.4-1/input0 [ 219.522439][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.546682][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.671198][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.635'. [ 219.681478][ T8279] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 220.024281][ T5836] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 220.059396][ T5836] usb 2-1: USB disconnect, device number 35 [ 220.088181][ T5836] usblp0: removed [ 220.605893][ T5925] usb 3-1: Service connection timeout for: 258 [ 220.627257][ T5925] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 220.661038][ T5925] ath9k_htc: Failed to initialize the device [ 220.663555][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 220.699024][ T5925] usb 3-1: ath9k_htc: USB layer deinitialized [ 220.713613][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 221.019523][ T5943] usb 3-1: USB disconnect, device number 46 [ 221.089450][ T5836] usb 5-1: USB disconnect, device number 40 [ 222.104588][ T8335] netlink: 'syz.3.646': attribute type 3 has an invalid length. [ 222.467469][ T5836] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 222.700050][ T5836] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 222.710650][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.720724][ T5836] usb 3-1: Product: syz [ 222.760572][ T5836] usb 3-1: Manufacturer: syz [ 222.775366][ T5836] usb 3-1: SerialNumber: syz [ 222.792105][ T5836] usb 3-1: config 0 descriptor?? [ 222.812505][ T5836] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 223.297054][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 224.032954][ T5902] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 224.952988][ T5943] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 225.192937][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 225.233658][ T5943] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 225.242436][ T5943] usb 2-1: config 0 has no interface number 0 [ 225.297689][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 225.312596][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.320829][ T5943] usb 2-1: Product: syz [ 225.325312][ T5943] usb 2-1: Manufacturer: syz [ 225.329943][ T5943] usb 2-1: SerialNumber: syz [ 225.342494][ T5943] usb 2-1: config 0 descriptor?? [ 225.348305][ T8407] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 225.362129][ T5943] smsc95xx v2.0.0 [ 225.372243][ T8407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.416672][ T8404] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 225.537328][ T8407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.674167][ T9] usb 3-1: USB disconnect, device number 47 [ 225.778940][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 225.790488][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.192836][ T180] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 226.363269][ T180] usb 3-1: Using ep0 maxpacket: 8 [ 226.377764][ T180] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 226.387246][ T180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.398300][ T180] usb 3-1: Product: syz [ 226.417887][ T180] usb 3-1: Manufacturer: syz [ 226.423203][ T180] usb 3-1: SerialNumber: syz [ 226.455437][ T180] usb 3-1: config 0 descriptor?? [ 226.655295][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 226.666616][ T5943] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 226.689623][ T180] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 226.768673][ T8430] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 226.776472][ T8429] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 227.635169][ T8441] netlink: 'syz.0.674': attribute type 3 has an invalid length. [ 227.692840][ T45] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 227.818854][ T7922] usb 2-1: USB disconnect, device number 36 [ 227.975573][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.997879][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 228.015019][ T45] usb 5-1: config 7 has an invalid interface number: 180 but max is 0 [ 228.027052][ T45] usb 5-1: config 7 has no interface number 0 [ 228.036796][ T45] usb 5-1: config 7 interface 180 has no altsetting 0 [ 228.049472][ T45] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 228.059803][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.067898][ T45] usb 5-1: Product: syz [ 228.078846][ T45] usb 5-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓践 [ 228.103518][ T45] usb 5-1: SerialNumber: syz [ 228.946000][ T180] gspca_sunplus: reg_r err -110 [ 228.959332][ T180] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 229.361222][ T180] usb 3-1: USB disconnect, device number 48 [ 229.854366][ T45] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 229.883378][ T5902] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 229.884203][ T45] gspca_topro: reg_w err -71 [ 229.963066][ T45] gspca_topro: Sensor soi763a [ 229.984531][ T45] usb 5-1: USB disconnect, device number 42 [ 230.043045][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 230.056141][ T5902] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 230.064399][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 230.084062][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.116880][ T5902] usb 3-1: config 0 has no interface number 0 [ 230.130083][ T5902] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.155159][ T5902] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.190344][ T5902] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.222491][ T5902] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.281802][ T5902] usb 3-1: config 0 interface 52 has no altsetting 0 [ 230.291301][ T9] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 230.302591][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.311651][ T5902] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 230.329424][ T9] usb 2-1: Product: syz [ 230.335644][ T9] usb 2-1: Manufacturer: syz [ 230.340339][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.348486][ T9] usb 2-1: SerialNumber: syz [ 230.386187][ T5902] usb 3-1: config 0 descriptor?? [ 230.393334][ T9] usb 2-1: config 0 descriptor?? [ 230.535109][ T5850] Bluetooth: hci5: urb ffff888054f0a900 submission failed (2) [ 230.635490][ T5902] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input23 [ 230.842877][ T5902] usb 3-1: USB disconnect, device number 49 [ 230.843009][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 230.994494][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 231.142904][ T180] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 231.175970][ T45] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 231.185788][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.193848][ T45] usb 4-1: Product: syz [ 231.198262][ T45] usb 4-1: Manufacturer: syz [ 231.202902][ T45] usb 4-1: SerialNumber: syz [ 231.212142][ T45] usb 4-1: config 0 descriptor?? [ 231.219285][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 231.225285][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 231.294855][ T180] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 231.303273][ T180] usb 5-1: config 1 has no interface number 0 [ 231.309420][ T180] usb 5-1: config 1 interface 105 has no altsetting 0 [ 231.318344][ T180] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 231.327734][ T180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.335803][ T180] usb 5-1: Product: syz [ 231.340010][ T180] usb 5-1: Manufacturer: syz [ 231.344869][ T180] usb 5-1: SerialNumber: syz [ 231.422353][ T45] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 231.433986][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.444118][ T45] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 231.446622][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.683'. [ 231.453075][ T45] usb 4-1: media controller created [ 231.485784][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.536747][ T45] DVB: Unable to find symbol dib7000p_attach() [ 231.543450][ T45] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 231.555982][ T180] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 231.576001][ T180] usb 5-1: USB disconnect, device number 43 [ 231.642952][ T45] rc_core: IR keymap rc-dib0700-rc5 not found [ 231.649410][ T45] Registered IR keymap rc-empty [ 231.655031][ T45] dvb-usb: could not initialize remote control. [ 231.661386][ T45] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 231.882001][ T5902] usb 4-1: USB disconnect, device number 29 [ 231.919074][ T5902] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 232.054089][ T180] usb 2-1: USB disconnect, device number 37 [ 232.198259][ T8488] loop9: detected capacity change from 0 to 7 [ 232.206976][ T8488] Dev loop9: unable to read RDB block 7 [ 232.212563][ T8488] loop9: unable to read partition table [ 232.219896][ T8488] loop9: partition table beyond EOD, truncated [ 232.244478][ T8488] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 232.275341][ T8490] @: renamed from syz_tun [ 233.192810][ T180] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 233.405778][ T180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.423650][ T180] usb 5-1: no configurations [ 233.431349][ T180] usb 5-1: can't read configurations, error -22 [ 233.592880][ T180] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 233.805714][ T180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.813649][ T180] usb 5-1: no configurations [ 233.818468][ T180] usb 5-1: can't read configurations, error -22 [ 233.826671][ T180] usb usb5-port1: attempt power cycle [ 234.224227][ T180] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 234.274540][ T180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.310844][ T180] usb 5-1: no configurations [ 234.339277][ T180] usb 5-1: can't read configurations, error -22 [ 234.482891][ T180] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 234.517283][ T8521] FAULT_INJECTION: forcing a failure. [ 234.517283][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 234.543626][ T180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.555308][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.0.693 Not tainted syzkaller #0 PREEMPT(full) [ 234.555332][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.555344][ T8521] Call Trace: [ 234.555352][ T8521] [ 234.555360][ T8521] dump_stack_lvl+0x189/0x250 [ 234.555384][ T8521] ? __pfx____ratelimit+0x10/0x10 [ 234.555408][ T8521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.555425][ T8521] ? __pfx__printk+0x10/0x10 [ 234.555446][ T8521] ? __might_fault+0xb0/0x130 [ 234.555475][ T8521] should_fail_ex+0x414/0x560 [ 234.555501][ T8521] copy_fpstate_to_sigframe+0xa70/0xcc0 [ 234.555526][ T8521] ? copy_fpstate_to_sigframe+0x181/0xcc0 [ 234.555553][ T8521] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 234.555598][ T8521] ? fpu__alloc_mathframe+0xad/0x130 [ 234.555621][ T8521] get_sigframe+0x58d/0x7d0 [ 234.555655][ T8521] ? __pfx_get_sigframe+0x10/0x10 [ 234.555681][ T8521] ? posixtimer_deliver_signal+0x305/0x410 [ 234.555702][ T8521] x64_setup_rt_frame+0x15b/0xd40 [ 234.555729][ T8521] ? lockdep_hardirqs_on+0x98/0x140 [ 234.555747][ T8521] ? _raw_spin_unlock_irq+0x2e/0x50 [ 234.555768][ T8521] ? get_signal+0x1150/0x1340 [ 234.555798][ T8521] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 234.555827][ T8521] arch_do_signal_or_restart+0x3d1/0x7a0 [ 234.555851][ T8521] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 234.555891][ T8521] ? exit_to_user_mode_loop+0x55/0x4f0 [ 234.555911][ T8521] exit_to_user_mode_loop+0x87/0x4f0 [ 234.555927][ T8521] ? rcu_is_watching+0x15/0xb0 [ 234.555949][ T8521] do_syscall_64+0x2e3/0xf80 [ 234.555967][ T8521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.555983][ T8521] ? clear_bhb_loop+0x60/0xb0 [ 234.556002][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.556018][ T8521] RIP: 0033:0x7f100a78f747 [ 234.556038][ T8521] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 234.556053][ T8521] RSP: 002b:00007f100b5cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 234.556072][ T8521] RAX: 000000000000012b RBX: 00007f100a9e5fa0 RCX: 00007f100a78f749 [ 234.556083][ T8521] RDX: 0000000000000001 RSI: 0000200000001440 RDI: 0000000000000004 [ 234.556094][ T8521] RBP: 00007f100b5cf090 R08: 0000000000000000 R09: 0000000000000000 [ 234.556104][ T8521] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000001 [ 234.556114][ T8521] R13: 00007f100a9e6038 R14: 00007f100a9e5fa0 R15: 00007f100ab0fa28 [ 234.556142][ T8521] [ 234.556642][ T180] usb 5-1: no configurations [ 234.617494][ T8524] loop4: detected capacity change from 0 to 1 [ 234.637439][ T180] usb 5-1: can't read configurations, error -22 [ 234.817355][ T8524] Dev loop4: unable to read RDB block 1 [ 234.827029][ T180] usb usb5-port1: unable to enumerate USB device [ 234.842996][ T8524] loop4: unable to read partition table [ 234.848829][ T8524] loop4: partition table beyond EOD, truncated [ 234.863025][ T8524] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 235.053071][ T5943] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 235.364672][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.381026][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 235.454787][ T5206] Dev loop4: unable to read RDB block 1 [ 235.460394][ T5206] loop4: unable to read partition table [ 235.468639][ T5943] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 235.482652][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.502496][ T5943] usb 4-1: Product: syz [ 235.509705][ T5943] usb 4-1: Manufacturer: syz [ 235.516251][ T5206] loop4: partition table beyond EOD, truncated [ 235.525778][ T5943] usb 4-1: SerialNumber: syz [ 235.533405][ T5943] usb 4-1: config 0 descriptor?? [ 235.559580][ T8526] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 235.567557][ T8536] loop9: detected capacity change from 0 to 7 [ 235.602967][ T8536] Dev loop9: unable to read RDB block 7 [ 235.618892][ T8536] loop9: unable to read partition table [ 235.788186][ T8536] loop9: partition table beyond EOD, truncated [ 235.793823][ T5943] rc_core: IR keymap rc-streamzap not found [ 235.911629][ T8536] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 236.079747][ T5943] Registered IR keymap rc-empty [ 236.109591][ T5943] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 236.309862][ T5943] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 236.478526][ T5943] usb 4-1: USB disconnect, device number 30 [ 236.582892][ T180] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 236.737820][ T180] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 236.747057][ T180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.825986][ T180] usb 3-1: Product: syz [ 236.830197][ T180] usb 3-1: Manufacturer: syz [ 236.857445][ T180] usb 3-1: SerialNumber: syz [ 236.872289][ T180] usb 3-1: config 0 descriptor?? [ 236.912064][ T180] hub 3-1:0.0: bad descriptor, ignoring hub [ 236.923930][ T180] hub 3-1:0.0: probe with driver hub failed with error -5 [ 237.089657][ T180] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 237.116314][ T180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.175550][ T180] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 237.193158][ T180] usb 3-1: media controller created [ 237.216966][ T8563] FAULT_INJECTION: forcing a failure. [ 237.216966][ T8563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.272226][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.4.705 Not tainted syzkaller #0 PREEMPT(full) [ 237.272251][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.272260][ T8563] Call Trace: [ 237.272267][ T8563] [ 237.272274][ T8563] dump_stack_lvl+0x189/0x250 [ 237.272297][ T8563] ? __pfx____ratelimit+0x10/0x10 [ 237.272320][ T8563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.272336][ T8563] ? __pfx__printk+0x10/0x10 [ 237.272360][ T8563] ? get_sigframe+0x596/0x7d0 [ 237.272385][ T8563] should_fail_ex+0x414/0x560 [ 237.272410][ T8563] _copy_to_user+0x31/0xb0 [ 237.272427][ T8563] copy_siginfo_to_user+0x22/0xc0 [ 237.272444][ T8563] x64_setup_rt_frame+0x776/0xd40 [ 237.272481][ T8563] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 237.272507][ T8563] arch_do_signal_or_restart+0x3d1/0x7a0 [ 237.272531][ T8563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.272566][ T8563] ? exit_to_user_mode_loop+0x55/0x4f0 [ 237.272586][ T8563] exit_to_user_mode_loop+0x87/0x4f0 [ 237.272602][ T8563] ? rcu_is_watching+0x15/0xb0 [ 237.272625][ T8563] do_syscall_64+0x2e3/0xf80 [ 237.272643][ T8563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.272659][ T8563] ? clear_bhb_loop+0x60/0xb0 [ 237.272679][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.272695][ T8563] RIP: 0033:0x7f57fbb8f747 [ 237.272712][ T8563] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 237.272725][ T8563] RSP: 002b:00007f57fc9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 237.272743][ T8563] RAX: 000000000000012b RBX: 00007f57fbde5fa0 RCX: 00007f57fbb8f749 [ 237.272755][ T8563] RDX: 0000000000000001 RSI: 0000200000001440 RDI: 0000000000000004 [ 237.272766][ T8563] RBP: 00007f57fc9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 237.272776][ T8563] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000001 [ 237.272787][ T8563] R13: 00007f57fbde6038 R14: 00007f57fbde5fa0 R15: 00007f57fbf0fa28 [ 237.272816][ T8563] [ 237.273713][ T180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.576422][ T8568] netlink: 120 bytes leftover after parsing attributes in process `syz.4.707'. [ 237.628726][ T180] DVB: Unable to find symbol dib7000p_attach() [ 237.646652][ T180] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 237.782940][ T180] rc_core: IR keymap rc-dib0700-rc5 not found [ 237.804072][ T180] Registered IR keymap rc-empty [ 237.816034][ T180] dvb-usb: could not initialize remote control. [ 237.822394][ T180] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 238.102338][ T180] usb 3-1: USB disconnect, device number 50 [ 238.298164][ T180] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 239.053625][ T7922] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 239.222998][ T7922] usb 2-1: Using ep0 maxpacket: 16 [ 239.230188][ T7922] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.241393][ T7922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.248074][ T7922] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 239.257144][ T7922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.267175][ T7922] usb 2-1: config 0 descriptor?? [ 239.489631][ T7922] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 239.939682][ T5943] usb 2-1: USB disconnect, device number 38 [ 255.886479][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.892936][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.135414][ T8633] loop9: detected capacity change from 0 to 7 [ 311.148257][ T8633] Dev loop9: unable to read RDB block 7 [ 311.167416][ T8633] loop9: unable to read partition table [ 311.177694][ T8633] loop9: partition table beyond EOD, truncated [ 311.189554][ T8633] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 311.281631][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.379275][ T8646] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 311.425999][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 311.426014][ T30] audit: type=1326 audit(1764884320.523:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.457043][ T30] audit: type=1326 audit(1764884320.523:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.487149][ T30] audit: type=1326 audit(1764884320.523:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.510732][ T30] audit: type=1326 audit(1764884320.523:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.584827][ T30] audit: type=1326 audit(1764884320.523:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.608818][ T30] audit: type=1326 audit(1764884320.523:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.633806][ T8659] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 311.669828][ T30] audit: type=1326 audit(1764884320.523:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.715351][ T30] audit: type=1326 audit(1764884320.523:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.768608][ T30] audit: type=1326 audit(1764884320.523:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.821696][ T8650] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 311.833200][ T8650] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 311.849189][ T30] audit: type=1326 audit(1764884320.573:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543678f749 code=0x7ffc0000 [ 311.851996][ T8650] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 311.913243][ T8650] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 312.133372][ T5943] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 312.442874][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 312.453747][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.488126][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.537420][ T5943] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 312.568499][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.582273][ T5943] usb 4-1: config 0 descriptor?? [ 312.790472][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 312.987415][ T9] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 313.022076][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.047236][ T5943] kye 0003:0458:5016.000A: control desc unexpectedly large [ 313.059951][ T9] usb 5-1: Product: syz [ 313.075389][ T7922] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 313.083018][ T9] usb 5-1: Manufacturer: syz [ 313.083036][ T9] usb 5-1: SerialNumber: syz [ 313.118348][ T5943] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000A/input/input27 [ 313.141230][ T9] usb 5-1: config 0 descriptor?? [ 313.200959][ T5850] Bluetooth: hci5: urb ffff888073123000 submission failed (2) [ 313.219059][ T5943] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000A/input/input28 [ 313.376083][ T5943] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 313.422352][ T7922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.434053][ T7922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.452476][ T7922] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 313.483593][ T7922] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.507815][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.564431][ T7922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.588191][ T8698] netlink: 256 bytes leftover after parsing attributes in process `syz.3.731'. [ 313.707520][ T8693] udevd[8693]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.747453][ T7922] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 313.921778][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.934170][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.991413][ T8707] binder: BINDER_SET_CONTEXT_MGR already set [ 314.005511][ T8707] binder: 8706:8707 ioctl 4018620d 200000000040 returned -16 [ 314.021710][ T8687] syzkaller0: entered promiscuous mode [ 314.029387][ T8687] syzkaller0: entered allmulticast mode [ 314.035659][ T8707] binder: 8706:8707 ioctl c0306201 200000000300 returned -11 [ 314.383952][ T7922] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 314.499793][ T180] usb 5-1: USB disconnect, device number 48 [ 314.732348][ T8714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.743'. [ 314.744981][ T8714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.743'. [ 314.765108][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.775247][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.838653][ T5935] usb 4-1: USB disconnect, device number 31 [ 314.972804][ T180] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.012802][ T5935] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 315.132823][ T180] usb 5-1: Using ep0 maxpacket: 8 [ 315.139667][ T180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.152011][ T180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.161890][ T180] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 315.171102][ T180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.180350][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.191929][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.202400][ T180] usb 5-1: config 0 descriptor?? [ 315.209484][ T5935] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 315.221192][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.231596][ T5935] usb 4-1: config 0 descriptor?? [ 315.628401][ T180] usbhid 5-1:0.0: can't add hid device: -71 [ 315.638948][ T180] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 315.646221][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.649741][ T7922] usb 3-1: USB disconnect, device number 51 [ 315.720874][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.784876][ T180] usb 5-1: USB disconnect, device number 49 [ 315.798039][ T5935] usbhid 4-1:0.0: can't add hid device: -32 [ 315.820303][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 315.838741][ T8728] syz_tun: entered allmulticast mode [ 316.121372][ T8725] syz_tun: left allmulticast mode [ 316.492801][ T7922] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 316.542414][ T8731] tap0: tun_chr_ioctl cmd 2147767521 [ 316.550686][ T8731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.747'. [ 316.611332][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 316.784691][ T7922] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 316.903265][ T7922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.925998][ T5943] usb 4-1: USB disconnect, device number 32 [ 316.974519][ T7922] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 317.087168][ T7922] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 317.168434][ T7922] usb 3-1: Manufacturer: syz [ 317.200689][ T7922] usb 3-1: config 0 descriptor?? [ 317.253029][ T180] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 317.326337][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333782][ T7922] rc_core: IR keymap rc-hauppauge not found [ 317.335534][ T8759] : renamed from bond_slave_0 (while UP) [ 317.339830][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.354112][ T7922] Registered IR keymap rc-empty [ 317.360344][ T7922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 317.392227][ T7922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 317.408235][ T180] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 317.423186][ T180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.435576][ T180] usb 5-1: Product: syz [ 317.440699][ T180] usb 5-1: Manufacturer: syz [ 317.454010][ T180] usb 5-1: SerialNumber: syz [ 317.472372][ T180] usb 5-1: config 0 descriptor?? [ 317.489720][ T180] hub 5-1:0.0: bad descriptor, ignoring hub [ 317.499177][ T180] hub 5-1:0.0: probe with driver hub failed with error -5 [ 317.643292][ T5943] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 317.692878][ T180] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 317.737778][ T180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.752661][ T8771] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 317.782430][ T8771] ------------[ cut here ]------------ [ 317.788274][ T8771] usb 5-1: BOGUS control dir, pipe 80003280 doesn't match bRequestType c0 [ 317.796842][ T8771] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.0.757/8771 [ 317.803048][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 317.805051][ T8771] Modules linked in: [ 317.814621][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 317.824213][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.834450][ T8771] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 317.840124][ T8771] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 317.859849][ T8771] RSP: 0018:ffffc90003e5f820 EFLAGS: 00010246 [ 317.865950][ T8771] RAX: 0000000000000000 RBX: ffff8880274df900 RCX: 0000000080003280 [ 317.873940][ T8771] RDX: ffff888030b27800 RSI: ffffffff8c12edc0 RDI: ffffffff8f8d4cc0 [ 317.881935][ T8771] RBP: 1ffff110068c4ce4 R08: 00000000000000c0 R09: 0000000000000000 [ 317.890092][ T8771] R10: ffffc90003e5f920 R11: fffff520007cbf30 R12: ffff8880554f2100 [ 317.898129][ T8771] R13: ffff888034626720 R14: 0000000080003280 R15: ffff888030b27800 [ 317.906309][ T8771] FS: 00007f100b58d6c0(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 317.915880][ T8771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.923019][ T8771] CR2: 000000110c3b7202 CR3: 0000000031010000 CR4: 00000000003526f0 [ 317.931035][ T8771] Call Trace: [ 317.934367][ T8771] [ 317.937327][ T8771] ? __init_swait_queue_head+0xa9/0x150 [ 317.942920][ T8771] usb_start_wait_urb+0x114/0x4c0 [ 317.947957][ T8771] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 317.953737][ T8771] usb_control_msg+0x232/0x3e0 [ 317.958525][ T8771] dib0700_i2c_xfer+0xba7/0xf70 [ 317.963409][ T8771] __i2c_transfer+0x871/0x20e0 [ 317.968189][ T8771] ? lockdep_hardirqs_on+0x98/0x140 [ 317.973406][ T8771] ? __pfx___i2c_transfer+0x10/0x10 [ 317.978607][ T8771] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 317.984000][ T8771] ? i2c_transfer+0x120/0x3a0 [ 317.988680][ T8771] i2c_transfer+0x25b/0x3a0 [ 317.993201][ T8771] ? __pfx_i2c_transfer+0x10/0x10 [ 317.998224][ T8771] ? _copy_from_user+0x94/0xb0 [ 318.003016][ T8771] i2cdev_ioctl_rdwr+0x460/0x740 [ 318.007957][ T8771] i2cdev_ioctl+0x64b/0x7f0 [ 318.012457][ T8771] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.017902][ T8771] ? __fget_files+0x3a0/0x420 [ 318.022569][ T8771] ? __fget_files+0x2a/0x420 [ 318.027454][ T8771] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.032393][ T8771] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.037432][ T8771] __se_sys_ioctl+0xfc/0x170 [ 318.042025][ T8771] do_syscall_64+0xfa/0xf80 [ 318.046641][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.052584][ T5943] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.052739][ T8771] ? clear_bhb_loop+0x60/0xb0 [ 318.052766][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.061175][ T5943] usb 4-1: config 179 has no interface number 0 [ 318.065717][ T8771] RIP: 0033:0x7f100a78f749 [ 318.065739][ T8771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.065755][ T8771] RSP: 002b:00007f100b58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.071742][ T5943] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 318.077942][ T8771] RAX: ffffffffffffffda RBX: 00007f100a9e6180 RCX: 00007f100a78f749 [ 318.077961][ T8771] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 000000000000000a [ 318.077975][ T8771] RBP: 00007f100a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.077988][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.078000][ T8771] R13: 00007f100a9e6218 R14: 00007f100a9e6180 R15: 00007f100ab0fa28 [ 318.078035][ T8771] [ 318.078062][ T8771] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.078077][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 318.078098][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.078110][ T8771] Call Trace: [ 318.078119][ T8771] [ 318.078126][ T8771] dump_stack_lvl+0x99/0x250 [ 318.078149][ T8771] ? __asan_memcpy+0x40/0x70 [ 318.078178][ T8771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.078197][ T8771] ? __pfx__printk+0x10/0x10 [ 318.078231][ T8771] vpanic+0x237/0x6d0 [ 318.078251][ T8771] ? __pfx_vpanic+0x10/0x10 [ 318.078267][ T8771] ? is_bpf_text_address+0x292/0x2b0 [ 318.078290][ T8771] ? is_bpf_text_address+0x26/0x2b0 [ 318.078320][ T8771] panic+0xb9/0xc0 [ 318.078338][ T8771] ? __pfx_panic+0x10/0x10 [ 318.078374][ T8771] __warn+0x317/0x4b0 [ 318.078399][ T8771] __report_bug+0x288/0x500 [ 318.078431][ T8771] ? __pfx___report_bug+0x10/0x10 [ 318.078464][ T8771] ? usb_submit_urb+0x1133/0x1890 [ 318.078486][ T8771] ? usb_submit_urb+0x112e/0x1890 [ 318.078517][ T8771] report_bug_entry+0x16a/0x220 [ 318.078541][ T8771] ? usb_submit_urb+0x112e/0x1890 [ 318.078562][ T8771] ? usb_submit_urb+0x1133/0x1890 [ 318.078584][ T8771] handle_bug+0xca/0x200 [ 318.078604][ T8771] exc_invalid_op+0x1a/0x50 [ 318.078623][ T8771] asm_exc_invalid_op+0x1a/0x20 [ 318.078639][ T8771] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 318.078663][ T8771] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 318.078679][ T8771] RSP: 0018:ffffc90003e5f820 EFLAGS: 00010246 [ 318.078695][ T8771] RAX: 0000000000000000 RBX: ffff8880274df900 RCX: 0000000080003280 [ 318.078707][ T8771] RDX: ffff888030b27800 RSI: ffffffff8c12edc0 RDI: ffffffff8f8d4cc0 [ 318.078720][ T8771] RBP: 1ffff110068c4ce4 R08: 00000000000000c0 R09: 0000000000000000 [ 318.078732][ T8771] R10: ffffc90003e5f920 R11: fffff520007cbf30 R12: ffff8880554f2100 [ 318.078745][ T8771] R13: ffff888034626720 R14: 0000000080003280 R15: ffff888030b27800 [ 318.078781][ T8771] ? __init_swait_queue_head+0xa9/0x150 [ 318.078808][ T8771] usb_start_wait_urb+0x114/0x4c0 [ 318.078838][ T8771] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 318.078882][ T8771] usb_control_msg+0x232/0x3e0 [ 318.078912][ T8771] dib0700_i2c_xfer+0xba7/0xf70 [ 318.078957][ T8771] __i2c_transfer+0x871/0x20e0 [ 318.078983][ T8771] ? lockdep_hardirqs_on+0x98/0x140 [ 318.079009][ T8771] ? __pfx___i2c_transfer+0x10/0x10 [ 318.079033][ T8771] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 318.079053][ T8771] ? i2c_transfer+0x120/0x3a0 [ 318.079077][ T8771] i2c_transfer+0x25b/0x3a0 [ 318.079101][ T8771] ? __pfx_i2c_transfer+0x10/0x10 [ 318.079127][ T8771] ? _copy_from_user+0x94/0xb0 [ 318.079148][ T8771] i2cdev_ioctl_rdwr+0x460/0x740 [ 318.079186][ T8771] i2cdev_ioctl+0x64b/0x7f0 [ 318.079207][ T8771] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.079232][ T8771] ? __fget_files+0x3a0/0x420 [ 318.079249][ T8771] ? __fget_files+0x2a/0x420 [ 318.079268][ T8771] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.079285][ T8771] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 318.079306][ T8771] __se_sys_ioctl+0xfc/0x170 [ 318.079331][ T8771] do_syscall_64+0xfa/0xf80 [ 318.079348][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.079365][ T8771] ? clear_bhb_loop+0x60/0xb0 [ 318.079386][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.079402][ T8771] RIP: 0033:0x7f100a78f749 [ 318.079418][ T8771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.079433][ T8771] RSP: 002b:00007f100b58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.079449][ T8771] RAX: ffffffffffffffda RBX: 00007f100a9e6180 RCX: 00007f100a78f749 [ 318.079462][ T8771] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 000000000000000a [ 318.079474][ T8771] RBP: 00007f100a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.079485][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.079495][ T8771] R13: 00007f100a9e6218 R14: 00007f100a9e6180 R15: 00007f100ab0fa28 [ 318.079525][ T8771] [ 318.082909][ T8771] Kernel Offset: disabled